Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132663a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132663a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          XWbVDaoRDS6s8/xkV0cOPuayYDS9kbKh8y0C4GCNbmg=
Subject key identifier:   A9:47:57:60:E7:72:3B:A3:32:94:5B:20:3E:D7:48:AE:C2:59:D0:D7
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       501DD830008C4995DF75816D9F3D3929D4BB72E2
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132663a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 05 May 2025 15:28:32 +0000
ROA not before:           Mon 05 May 2025 15:23:32 +0000
ROA not after:            Mon 04 May 2026 15:28:32 +0000
asID:                     29802
IP address blocks:        2602:ff62:12f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:1d:d8:30:00:8c:49:95:df:75:81:6d:9f:3d:39:29:d4:bb:72:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  5 15:23:32 2025 GMT
            Not After : May  4 15:28:32 2026 GMT
        Subject: CN=A9475760E7723BA332945B203ED748AEC259D0D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e9:87:e5:7a:67:82:e8:18:4f:4d:cd:58:1d:
                    cc:38:a7:06:77:4c:1d:a7:cd:3a:de:8b:b4:89:7e:
                    7a:67:18:e1:3a:98:29:f6:1a:bd:c0:ae:a7:d9:62:
                    5e:b4:48:70:38:1f:86:60:c5:ff:49:3c:bc:76:c1:
                    5f:11:53:47:24:f4:ee:58:18:a3:5f:fb:f0:9d:a0:
                    ae:ab:ed:d0:26:9f:77:67:14:78:f9:f9:ea:e7:11:
                    cc:9b:20:10:0a:5d:49:13:85:e4:84:4b:66:9d:71:
                    91:7c:95:54:f5:7e:79:79:c2:96:7b:d4:7b:c1:7d:
                    f4:c7:e5:0d:dd:cb:88:63:91:34:12:b1:72:71:a0:
                    0b:1c:56:ba:4b:6b:f6:f4:a7:77:3b:48:e1:bc:cf:
                    6c:f8:de:43:02:e0:66:76:df:25:50:39:27:69:82:
                    23:68:8d:68:c9:32:df:dc:76:b3:bc:5c:8c:26:2f:
                    4f:79:f4:26:8f:0d:97:ad:4f:9b:98:cf:7c:08:64:
                    96:84:d9:a0:68:ab:de:0e:b3:dc:04:31:86:44:d0:
                    f4:40:dd:83:d3:5b:a2:23:3a:bd:1d:61:79:23:e6:
                    ff:79:4f:59:c5:1a:98:32:32:e3:c8:52:ff:7a:d6:
                    a4:2c:98:f6:75:78:d6:42:8d:99:6a:ad:d0:c9:93:
                    2b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:47:57:60:E7:72:3B:A3:32:94:5B:20:3E:D7:48:AE:C2:59:D0:D7
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132663a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:12f::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:6f:92:c4:25:ea:2d:db:20:4e:24:07:fe:19:a8:c3:e8:8e:
         29:a2:8a:3b:b2:8e:a5:ce:c8:11:7f:7f:24:d1:54:c7:67:a8:
         e0:0b:03:c0:cc:af:0a:a0:6a:37:1a:a5:7f:60:e1:8b:62:58:
         be:22:57:84:3a:6c:36:43:81:ac:66:ce:b3:44:49:a5:b2:70:
         4e:cb:d9:a1:fb:2e:e6:9c:15:f7:e6:eb:35:60:ff:88:65:1e:
         f4:01:67:fa:8c:f3:45:63:cf:1d:bc:33:ba:b2:fd:a8:06:c9:
         96:e0:d6:2a:0a:76:91:b9:52:b0:1d:f5:b2:85:d4:e4:97:5b:
         25:b0:2d:ac:e0:df:8a:d0:02:a8:20:e1:7e:ea:8f:23:c2:d6:
         b3:5a:1c:a9:88:05:cf:91:09:1b:fc:d3:a3:bc:4e:6c:fb:c0:
         d0:6f:a2:88:b6:6b:14:0e:12:06:a4:a0:35:a6:0a:ea:07:69:
         e7:56:82:3e:98:c0:6e:6c:d3:0e:b1:84:b2:ee:ca:bc:92:c1:
         14:bc:fe:6b:eb:ee:fe:00:e0:63:04:55:a9:5b:35:94:9c:e6:
         99:be:9e:ce:9c:cd:4f:60:ac:a7:ef:e9:45:dc:cd:f3:14:44:
         53:de:08:8d:39:94:8b:c0:a3:3c:63:01:d0:41:c7:89:30:a6:
         ea:d9:eb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:09:06 2025 by rpki-client