Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130653a3a2f34382d3438203d3e20333936333536.roa
File:                     323630323a666636323a3130653a3a2f34382d3438203d3e20333936333536.roa (raw, json)
Hash identifier:          CLxQiCCMaXEhAaeXm/ZGGJnbeyU4Dity/DBBGpUe4Y8=
Subject key identifier:   A9:48:42:08:3A:F4:6C:88:BA:68:A4:2F:0A:E3:A6:0F:E1:18:95:0A
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       BEC8C103E00E073A796A6F34B45EDE9C818F31
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130653a3a2f34382d3438203d3e20333936333536.roa
Signing time:             Tue 13 May 2025 10:28:33 +0000
ROA not before:           Tue 13 May 2025 10:23:33 +0000
ROA not after:            Tue 12 May 2026 10:28:33 +0000
asID:                     396356
IP address blocks:        2602:ff62:10e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            be:c8:c1:03:e0:0e:07:3a:79:6a:6f:34:b4:5e:de:9c:81:8f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 13 10:23:33 2025 GMT
            Not After : May 12 10:28:33 2026 GMT
        Subject: CN=A94842083AF46C88BA68A42F0AE3A60FE118950A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0e:ff:59:8e:bc:28:30:93:9b:fa:36:a6:83:
                    4f:6f:60:25:70:46:40:0c:be:5d:1f:5f:1a:01:cb:
                    e5:6a:22:10:01:74:47:7d:0d:f3:f6:ac:1c:2e:05:
                    07:a5:b2:61:bd:7d:cb:8e:8d:bb:d0:44:e0:71:4e:
                    85:83:f1:24:b9:3a:b7:4d:9f:4b:5c:18:f1:cd:bf:
                    31:4e:31:4d:bd:6f:77:85:bb:03:14:25:a2:69:22:
                    78:c0:dc:9f:d6:a6:10:55:59:f9:c9:88:74:6a:f7:
                    00:cb:7d:a0:c0:fe:fb:51:3a:76:09:30:9f:4f:c8:
                    2d:bc:2f:f2:64:58:ac:07:a0:b5:ce:e0:ba:92:8b:
                    74:53:a7:15:7b:90:74:9c:3d:c5:ec:56:6b:32:12:
                    9f:d4:d7:df:82:f2:9e:5d:0a:29:2d:44:6f:01:75:
                    d1:6d:89:f4:ec:0c:9a:34:06:7c:e8:b8:ff:35:c3:
                    71:c0:3e:fa:24:7e:d8:52:06:a9:45:55:9e:63:ae:
                    de:c4:5a:6f:30:05:d7:23:fc:a0:5a:06:04:b3:00:
                    6d:97:6b:3b:0e:28:46:c0:12:12:de:3d:82:0b:17:
                    33:56:88:13:34:67:14:c2:cf:89:c8:3a:1a:b7:14:
                    08:97:9b:da:a8:d4:54:64:c3:8e:09:8f:98:65:84:
                    d3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:48:42:08:3A:F4:6C:88:BA:68:A4:2F:0A:E3:A6:0F:E1:18:95:0A
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130653a3a2f34382d3438203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10e::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:a4:ef:21:a0:ee:80:4a:11:2e:f8:fc:3f:eb:a3:69:2d:11:
         9c:8a:7b:3b:d1:7d:5c:ee:fd:30:a2:39:d6:46:37:bb:c8:2c:
         c4:b1:16:fe:77:cb:60:08:f1:09:7b:c4:82:5a:27:82:ec:44:
         c3:6a:8f:fa:ab:68:28:52:e4:16:4d:e9:47:54:96:f6:e9:52:
         8c:71:26:fc:25:67:e8:5f:6a:77:76:cd:d2:38:1a:e1:4f:1d:
         25:2b:99:ef:ae:36:ca:26:55:f9:e5:ee:df:76:d5:0a:f3:9b:
         1e:4f:e8:cb:b4:79:4d:63:2e:28:77:88:4e:18:ed:2a:f6:ad:
         5b:ac:a3:f2:e4:9e:c8:d0:cc:7d:16:b4:a9:ae:e6:65:db:40:
         e7:9b:74:36:83:fb:3b:24:52:46:6d:a0:69:95:27:89:8e:0d:
         c8:5c:11:1d:9f:42:5c:6f:49:4f:7a:fd:aa:18:9f:20:f4:f2:
         71:b2:86:37:9e:4d:88:bd:f4:f5:23:60:27:a7:40:43:e6:a7:
         ea:de:e3:1c:ec:56:0f:44:17:4f:bc:10:ac:1e:d3:2c:2d:50:
         69:4c:7a:dc:7c:8e:5c:6f:aa:69:33:6c:33:ec:1e:8a:e6:49:
         3a:9c:20:f2:fd:1b:3f:aa:96:6c:bf:c9:23:48:54:d3:67:2e:
         85:c3:60:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:14:47 2025 by rpki-client