Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132343a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132343a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          2X2FJTWuwM47wu04DM7ubpujsSEC76RamCQqJbbZhiM=
Subject key identifier:   8A:0B:14:9D:48:2B:17:16:34:ED:1C:91:7A:0C:2B:A8:66:8C:D1:54
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       55EEC07920E21B903B7D85E6A8D600D3269B0EC8
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132343a3a2f34382d3438203d3e203239383032.roa
Signing time:             Fri 16 May 2025 15:28:33 +0000
ROA not before:           Fri 16 May 2025 15:23:33 +0000
ROA not after:            Fri 15 May 2026 15:28:33 +0000
asID:                     29802
IP address blocks:        2602:ff62:124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ee:c0:79:20:e2:1b:90:3b:7d:85:e6:a8:d6:00:d3:26:9b:0e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 16 15:23:33 2025 GMT
            Not After : May 15 15:28:33 2026 GMT
        Subject: CN=8A0B149D482B171634ED1C917A0C2BA8668CD154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:19:b3:34:75:e6:5d:e8:85:9c:06:1e:f7:57:
                    c2:4a:07:ea:66:c2:80:64:73:d2:52:6a:50:67:f1:
                    b5:36:f2:c6:f7:43:ed:bf:e8:d7:a3:90:63:90:b5:
                    e3:e0:e6:53:b2:49:9e:b7:9d:6c:dd:e0:48:c0:a9:
                    cd:33:f8:bc:1e:29:ae:9b:80:f1:26:af:39:51:ee:
                    99:94:b5:d4:79:cd:9d:19:d4:b6:e3:d7:2d:44:8f:
                    3c:fb:fd:3a:d9:bd:ab:3e:86:c7:be:93:d1:7f:9a:
                    4f:cc:b0:e5:70:a2:65:9c:15:95:1e:d2:89:e6:de:
                    ae:19:cb:57:af:a1:17:75:0d:1a:03:49:5b:08:2e:
                    48:a5:5a:d4:60:a5:0c:eb:98:12:1e:15:ac:5f:48:
                    32:2e:f3:e0:83:5c:e7:18:b7:b9:90:fb:d3:5b:4f:
                    51:a2:94:71:77:3b:ff:b1:3c:0d:41:86:0b:f6:43:
                    43:00:ee:e9:a5:a0:ec:68:37:fa:58:a6:a6:b4:2b:
                    6d:1e:ed:67:06:0b:60:59:b6:0e:77:96:c0:7a:28:
                    50:df:60:f3:a8:7c:68:e1:61:43:c1:8f:c9:5f:ff:
                    26:54:27:3d:6d:6b:19:2c:2e:f1:f2:d5:ac:a4:eb:
                    ef:cd:b2:30:97:2c:02:19:05:f2:06:38:14:55:e3:
                    9b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0B:14:9D:48:2B:17:16:34:ED:1C:91:7A:0C:2B:A8:66:8C:D1:54
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132343a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:124::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:60:0f:17:de:75:3c:16:98:22:c9:55:3c:93:8f:57:6d:3a:
         6f:a0:a9:bd:31:64:47:db:3c:02:68:a7:89:32:98:0f:07:0e:
         4a:92:6b:f4:79:2e:9a:02:c8:01:df:80:e3:04:d9:ba:59:98:
         16:23:42:9f:68:e3:98:4b:f8:a9:95:aa:2f:b0:11:39:cf:de:
         9e:76:53:3a:08:30:f2:ad:80:3e:75:64:53:81:34:71:de:8b:
         04:7b:c4:ce:c3:7c:bb:55:dd:25:a7:a0:cc:f4:59:7b:5b:88:
         57:ed:ef:a8:fc:47:b3:d7:d7:0f:c5:66:24:8e:09:a6:65:de:
         44:df:21:8c:43:42:5f:7a:f7:3c:7b:c9:08:22:d2:3e:db:93:
         d7:f2:66:3f:c6:f5:cb:b5:18:c4:4d:4a:4e:5f:b9:2f:d0:c7:
         d0:94:e2:ba:fe:94:22:0d:6e:02:8d:b2:b3:a4:1d:56:f8:02:
         85:30:44:0a:18:aa:6f:26:b9:55:27:00:c9:be:f7:8b:81:bf:
         d4:bf:bd:ec:ca:02:c5:07:9c:59:d5:7e:e6:d5:23:bb:37:e3:
         03:b2:5c:1e:59:2b:d5:e7:39:30:04:fb:8f:a4:86:ac:9c:7c:
         47:7b:bc:bc:84:bd:1c:68:23:82:7a:56:11:f2:de:ff:03:02:
         44:e9:a7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:06:21 2025 by rpki-client