Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130663a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3130663a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          hbSDaaFTtUAGzLFOTo32ZNH5MhVAT1w8gXziXO+1D8w=
Subject key identifier:   2B:6C:EF:70:C9:98:75:87:EE:FD:24:28:94:32:EC:65:6F:0A:07:7A
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       4FBB81F637C683E25148D8589A60CBBAA94AB9BF
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130663a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 19 May 2025 20:28:33 +0000
ROA not before:           Mon 19 May 2025 20:23:33 +0000
ROA not after:            Mon 18 May 2026 20:28:33 +0000
asID:                     29802
IP address blocks:        2602:ff62:10f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:bb:81:f6:37:c6:83:e2:51:48:d8:58:9a:60:cb:ba:a9:4a:b9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 19 20:23:33 2025 GMT
            Not After : May 18 20:28:33 2026 GMT
        Subject: CN=2B6CEF70C9987587EEFD24289432EC656F0A077A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a8:43:ff:e5:21:c0:b0:fe:00:9a:87:b1:3a:
                    cc:73:d5:69:7c:ae:08:44:e9:10:bb:4e:44:40:6f:
                    f2:5a:a5:8a:b2:e7:f7:dc:9c:36:ea:eb:42:b9:86:
                    f7:94:b6:0e:e3:e0:41:09:11:79:b3:5f:01:27:56:
                    dc:9b:22:cd:d5:a5:3e:c0:7d:d3:b6:04:23:60:c1:
                    2e:81:ae:78:41:ac:2e:86:c2:5a:0e:6c:73:41:22:
                    68:29:ec:4c:4c:bf:fa:a8:19:6e:75:c6:56:93:81:
                    3f:f9:90:df:51:1d:b0:1f:08:48:68:bf:48:47:88:
                    c4:6f:2d:a3:fb:1d:b0:ea:4e:be:b3:e9:1e:61:2b:
                    c9:d0:78:86:a2:ed:fd:7c:ef:a3:cf:b8:96:5f:58:
                    60:41:c7:e7:e4:14:b8:76:cc:3a:e0:a7:4e:3d:45:
                    6b:fa:21:12:3e:96:d4:34:e9:86:cc:c6:16:e9:a4:
                    5d:7a:d2:7f:21:e5:68:cc:c7:16:bf:48:32:50:8d:
                    12:e8:3a:7d:5c:fd:9e:32:73:5f:83:cf:fa:9b:4b:
                    dd:2d:b5:95:32:5d:53:7f:a4:6a:f4:d0:8b:fc:7d:
                    67:40:23:77:ff:b9:59:ad:cc:ed:00:5b:1b:6c:c4:
                    99:dc:a6:d5:d3:30:d9:6e:6f:d3:42:13:60:2a:e1:
                    76:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6C:EF:70:C9:98:75:87:EE:FD:24:28:94:32:EC:65:6F:0A:07:7A
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130663a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10f::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:65:c9:01:13:8e:a1:5d:0b:db:20:73:75:21:32:3e:9f:f2:
         4d:ef:65:33:6e:48:f6:4f:42:18:82:31:bd:59:fa:5b:99:32:
         82:63:49:19:33:95:3f:b9:17:6e:63:67:09:30:49:0a:62:85:
         75:1f:f8:ac:fa:d3:a7:e6:6f:0c:aa:73:03:5d:e8:11:e6:22:
         75:76:d7:f7:24:5e:2b:84:fd:9f:27:91:e7:9e:ab:5a:42:ab:
         d2:f0:09:88:ac:b7:c4:6c:d1:13:89:f2:58:44:04:bf:36:27:
         6c:f7:f3:6e:12:49:44:0a:69:ce:fd:cc:b8:e3:f8:81:40:92:
         19:7f:0f:92:19:79:39:22:a6:8a:12:a0:d1:34:2d:c0:d2:e5:
         19:5b:13:a9:d6:34:6d:d3:0a:5f:5e:d9:4e:df:ca:23:4f:f4:
         65:64:72:e0:0d:47:9c:ef:71:c2:8e:51:9c:9e:ca:51:d4:d1:
         ad:4d:11:48:4d:0d:fb:fc:4b:78:00:92:90:2d:23:2f:55:c8:
         b5:6d:f0:fc:f0:7e:5e:3d:92:97:92:38:a4:40:9e:0a:45:41:
         89:14:ab:4f:f7:d1:19:1c:64:d0:d2:09:7a:d7:ea:4f:46:e1:
         2b:de:31:8c:2a:61:86:dd:5d:2f:1a:42:c8:41:75:fb:bf:07:
         ed:4c:3d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:11:53 2025 by rpki-client