Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a6530303a3a2f34302d3430203d3e2033323830.roa
File:                     323630323a666336383a6530303a3a2f34302d3430203d3e2033323830.roa (raw, json)
Hash identifier:          7iPU1weQfl5AT9YuiusgCbTpaTAhgyRKlM5j50pZ3l4=
Subject key identifier:   0E:95:98:C7:09:66:5A:CD:7F:9B:4F:9F:20:A8:1C:97:B4:44:7C:EC
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       36FFE4374061FF82B5AA977065D0922F88F9C1C6
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a6530303a3a2f34302d3430203d3e2033323830.roa
Signing time:             Fri 21 Mar 2025 21:25:44 +0000
ROA not before:           Fri 21 Mar 2025 21:20:44 +0000
ROA not after:            Fri 20 Mar 2026 21:25:44 +0000
asID:                     3280
IP address blocks:        2602:fc68:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ff:e4:37:40:61:ff:82:b5:aa:97:70:65:d0:92:2f:88:f9:c1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Mar 21 21:20:44 2025 GMT
            Not After : Mar 20 21:25:44 2026 GMT
        Subject: CN=0E9598C709665ACD7F9B4F9F20A81C97B4447CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1f:3e:e6:73:6b:a1:e3:82:f6:9e:91:66:f3:
                    f7:1a:a3:85:5e:84:8e:57:88:e0:9d:15:e8:3f:72:
                    0d:3f:e3:b9:18:cf:12:5d:1e:50:47:2c:44:fa:54:
                    fe:94:11:8e:a3:44:92:b5:d1:7f:50:24:a4:af:6f:
                    5a:5c:af:51:cb:6b:68:44:f7:fa:75:e1:32:97:bc:
                    6c:ac:30:9a:51:57:d7:fb:0a:4c:e4:c5:15:ac:41:
                    aa:54:db:8d:bf:e9:e0:a2:2a:59:5d:49:cf:4a:0f:
                    60:db:c4:97:02:e1:d7:72:24:a7:87:19:e9:03:6a:
                    30:42:27:05:77:57:de:16:df:eb:cf:1e:ff:d2:96:
                    88:f5:38:48:87:5a:39:03:04:88:e4:97:5d:d1:ad:
                    75:4b:d6:07:a0:4d:d6:7d:78:95:a6:ab:64:4a:a7:
                    83:d0:b9:43:2c:bf:79:3c:6d:55:dd:c2:75:81:d9:
                    62:34:9c:42:f7:c7:91:5c:83:b9:e2:9d:6b:20:48:
                    ce:27:b7:2c:0f:9d:ac:89:dc:c0:08:97:ee:89:d1:
                    7a:2c:75:cc:a0:7f:8d:12:a4:20:79:c9:c8:47:96:
                    94:7e:7d:cd:33:be:9e:a6:39:1c:a9:86:1b:f7:a1:
                    2b:59:ed:7e:37:7c:ca:41:33:78:01:f4:85:32:f1:
                    c4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:95:98:C7:09:66:5A:CD:7F:9B:4F:9F:20:A8:1C:97:B4:44:7C:EC
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a6530303a3a2f34302d3430203d3e2033323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc68:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b1:05:6c:97:9e:1e:b1:8b:f7:4b:d7:fd:5f:52:64:f5:6a:a0:
         8c:8d:57:5d:71:f4:d4:0d:f6:fe:67:b5:dc:9e:b1:d9:0c:22:
         04:5f:79:2a:85:02:df:54:a3:c1:33:07:7c:ce:ff:e4:c0:a1:
         ee:81:7e:66:81:81:a7:96:e0:be:d8:69:20:49:50:0e:91:75:
         95:0e:90:c6:67:1d:b6:7a:4e:06:1b:a6:b4:ee:c3:c1:84:ac:
         7f:7d:8a:a5:f2:ad:a0:78:e3:db:5e:1b:77:a0:e2:fc:8a:d8:
         62:9e:56:78:4c:54:ad:9e:ef:c3:22:8f:3a:5b:17:e3:c7:2a:
         58:a8:16:89:db:7c:b1:31:c2:95:e6:48:50:62:ad:49:0a:c2:
         3d:0d:04:19:63:52:1d:30:89:ed:f8:2e:42:df:4c:db:07:b6:
         0f:27:d1:2e:6d:6b:64:d0:c4:90:dd:b5:1c:ae:59:79:69:56:
         27:93:28:f9:84:85:2a:60:98:01:6d:19:07:8e:1d:8c:2a:5f:
         f2:d1:9c:c4:1a:4b:2a:95:c1:3c:5e:86:3b:c3:3d:d5:99:db:
         d5:38:d6:16:7e:fb:fc:5b:5e:7e:3f:dd:2f:c6:3d:09:8b:1b:
         56:49:a1:13:c1:ef:e5:bc:93:e7:cf:77:cf:a3:76:1f:57:9d:
         fb:1e:9d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:09 2025 by rpki-client