Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a31303a3a2f34342d3434203d3e2033323830.roa
File:                     323630323a666336383a31303a3a2f34342d3434203d3e2033323830.roa (raw, json)
Hash identifier:          4BlMZm7N3PnozjaS0wKF0pIUOH7tnkWmBhMgiYvF+sY=
Subject key identifier:   A1:15:8B:B9:A0:5C:FB:96:BE:FF:0C:66:68:8E:E9:E2:F5:C1:36:E8
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       5962EB0CF13DA7DEBE09B801F656CC3D51F1D74F
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a31303a3a2f34342d3434203d3e2033323830.roa
Signing time:             Fri 21 Mar 2025 21:25:44 +0000
ROA not before:           Fri 21 Mar 2025 21:20:44 +0000
ROA not after:            Fri 20 Mar 2026 21:25:44 +0000
asID:                     3280
IP address blocks:        2602:fc68:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:62:eb:0c:f1:3d:a7:de:be:09:b8:01:f6:56:cc:3d:51:f1:d7:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Mar 21 21:20:44 2025 GMT
            Not After : Mar 20 21:25:44 2026 GMT
        Subject: CN=A1158BB9A05CFB96BEFF0C66688EE9E2F5C136E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:49:6b:20:a6:0c:6c:9d:41:ee:f3:a1:ff:8a:
                    c8:f5:d2:ba:76:50:11:f6:d2:93:b8:57:4e:b5:88:
                    ed:e0:73:b5:05:fa:fc:4e:50:3f:f0:ac:41:42:8c:
                    70:0c:eb:a2:21:cd:33:39:09:8b:48:b2:aa:02:4e:
                    c6:67:2e:e7:4b:66:c9:b2:b5:7f:08:26:b1:70:dc:
                    2c:4e:14:d2:d4:2d:3a:32:6d:0d:d2:3a:33:eb:0b:
                    61:6f:04:1c:8f:2b:37:cf:e6:80:35:98:fa:2c:14:
                    e7:b9:ad:41:da:ce:cd:f3:77:87:db:19:fa:0a:a6:
                    74:7b:56:ab:93:f0:16:13:e7:21:e9:84:68:95:47:
                    cf:22:64:c8:90:dd:15:00:46:66:13:85:de:9c:05:
                    4e:d2:ce:f6:39:f6:d0:43:1a:ce:26:42:3c:42:22:
                    34:b8:40:8e:aa:bd:52:a1:ae:5b:bb:5b:14:21:05:
                    ae:dc:25:66:74:8c:7a:31:bb:62:54:64:56:2b:f4:
                    7f:3b:05:a9:b3:5c:ee:fa:86:a2:2a:34:c6:98:c9:
                    10:d2:8c:c0:4b:bc:83:c8:dc:24:63:3a:c4:06:a7:
                    aa:db:75:1e:4b:2d:40:12:0f:f9:06:12:9d:0a:d0:
                    a4:e2:cb:12:0c:02:f1:1a:1b:ae:f0:b3:d0:0d:0d:
                    29:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:15:8B:B9:A0:5C:FB:96:BE:FF:0C:66:68:8E:E9:E2:F5:C1:36:E8
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a31303a3a2f34342d3434203d3e2033323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc68:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         a8:19:1f:c0:78:8f:56:d0:63:e0:72:24:3f:ae:3c:66:f6:47:
         71:33:21:16:1d:f8:04:c3:33:01:5c:59:dd:fd:3c:6e:d2:73:
         44:c7:9c:68:31:af:8e:b5:57:aa:0b:55:f3:82:dd:1d:d7:a1:
         87:c6:c9:59:75:16:79:cc:d7:fe:4a:30:e9:f3:0e:a5:06:f0:
         76:e2:c3:f7:6d:df:18:af:4a:b6:45:6b:f9:3f:b8:a7:42:4e:
         ae:78:e5:b8:cc:2e:3a:92:cf:64:a4:7e:c8:79:7e:c5:ce:fe:
         97:47:e6:6a:8b:20:c7:59:29:11:5c:72:50:30:e4:d9:e7:df:
         40:8f:8d:48:9f:ed:9c:03:b4:eb:50:53:50:56:5c:c7:d8:aa:
         16:dc:dc:ae:7f:28:e7:dc:1f:5f:d5:0c:a6:b0:a8:15:e8:e1:
         39:31:2b:37:18:03:91:bf:51:cb:83:2a:7b:e9:7c:ee:4b:8c:
         5b:b4:6d:2f:24:8c:cc:e3:c8:20:78:0d:45:9b:8d:68:25:9a:
         81:55:f5:a5:c0:e0:31:91:3d:42:3f:85:04:12:b7:f1:81:89:
         aa:28:52:41:03:3c:8b:15:7b:13:ba:1c:5b:7b:9a:77:9f:e0:
         8d:68:0b:48:c7:22:6d:09:fc:27:58:70:1b:28:12:35:d7:09:
         64:07:b8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:04:58 2025 by rpki-client