Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a6566393a3a2f34382d3438203d3e2033323830.roa
File:                     323630323a666336383a6566393a3a2f34382d3438203d3e2033323830.roa (raw, json)
Hash identifier:          cwjXEfo9TkOO6qNs2q006ztmWRGEpOBLOhMsT4+sikY=
Subject key identifier:   A3:2E:54:70:3E:AE:12:9F:76:E3:41:8B:C3:85:82:C2:FC:5C:B1:E1
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       2D8224D615A7B3F27F80E51B6DCC1F59DC182BEA
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a6566393a3a2f34382d3438203d3e2033323830.roa
Signing time:             Fri 21 Mar 2025 21:25:44 +0000
ROA not before:           Fri 21 Mar 2025 21:20:44 +0000
ROA not after:            Fri 20 Mar 2026 21:25:44 +0000
asID:                     3280
IP address blocks:        2602:fc68:ef9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:82:24:d6:15:a7:b3:f2:7f:80:e5:1b:6d:cc:1f:59:dc:18:2b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Mar 21 21:20:44 2025 GMT
            Not After : Mar 20 21:25:44 2026 GMT
        Subject: CN=A32E54703EAE129F76E3418BC38582C2FC5CB1E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:91:55:fe:70:f3:b9:9f:a9:0f:66:5e:47:c0:
                    5a:76:1f:41:76:74:7a:fc:ba:18:6f:c7:49:29:c9:
                    c1:2a:f8:93:4a:ec:34:2f:7f:72:82:61:04:c7:9d:
                    d4:af:31:c4:72:b3:76:bc:ed:7e:c7:a5:f5:69:b9:
                    a3:fb:e6:d8:26:d8:28:d0:d5:fe:1a:df:a6:4e:c3:
                    2d:3a:9f:88:77:c9:27:1f:e1:f0:c1:1c:10:50:b8:
                    7a:b1:76:dc:07:36:ef:4c:90:41:72:5f:d6:e2:fa:
                    c5:2b:78:e0:3e:5e:dd:68:b0:2d:42:80:7a:8f:b9:
                    d2:f8:53:44:9e:fe:16:fe:4c:85:d4:54:b5:8d:fd:
                    a3:7f:df:89:a0:66:e8:e9:7e:76:ac:e1:ca:b1:45:
                    39:fc:60:f5:e8:70:6f:69:b0:95:c8:a4:5c:02:39:
                    d7:b5:48:d9:68:a9:56:0b:b4:ef:ed:58:81:a0:41:
                    d0:85:ad:80:73:e7:6d:19:9d:7f:01:bf:2b:ea:c3:
                    66:e8:df:70:a6:c9:c0:d9:d1:28:cd:af:17:df:04:
                    13:20:3a:ab:b6:60:f9:2b:e8:1f:3b:7c:4e:3a:1f:
                    db:1a:6d:2c:21:d2:4a:b0:be:bf:77:4a:8c:b3:1e:
                    6e:8d:94:c8:41:3e:db:41:f8:34:57:df:2d:b4:35:
                    bf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2E:54:70:3E:AE:12:9F:76:E3:41:8B:C3:85:82:C2:FC:5C:B1:E1
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a6566393a3a2f34382d3438203d3e2033323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc68:ef9::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:ef:b8:a9:bb:0b:8f:68:4c:ca:b7:68:ca:4a:85:5d:8f:84:
         75:9d:9f:4a:0c:8f:15:d5:a4:93:7f:60:62:10:ce:cb:25:ee:
         c8:42:0b:76:42:cb:ff:af:2d:36:63:1c:f7:ba:91:29:30:23:
         40:ea:2f:22:19:02:ed:74:d4:89:bd:35:ae:7a:12:1b:c8:41:
         08:06:4e:44:54:f8:4d:34:51:dd:4f:a6:f0:a2:67:85:b0:96:
         4f:0a:f2:52:ff:9b:2a:f8:83:9c:51:d7:11:a1:a4:59:8c:f5:
         d9:3b:34:2a:90:68:6d:ad:86:c1:05:38:94:97:a7:0c:25:6d:
         61:15:74:0f:14:7d:46:2b:f1:ea:90:2e:54:7b:4a:87:8b:45:
         98:9c:27:6c:3a:e5:5c:19:7b:1a:69:a3:39:b5:b6:2c:dd:93:
         13:93:b4:a5:68:4d:6f:fe:00:f8:78:bc:b1:0e:b9:ee:9a:6b:
         57:74:7f:0a:57:c9:13:87:fd:d4:0b:22:4e:eb:a9:a3:d8:43:
         cb:31:5f:c0:cd:b7:64:1a:e3:01:ef:65:58:94:ab:88:92:6f:
         2c:61:87:76:65:6d:9b:4c:92:16:a3:d8:0a:56:94:1a:1d:1b:
         f1:69:f7:18:68:c6:94:b4:01:80:21:5b:14:cb:d0:21:7e:5e:
         39:16:5f:c7
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIULYIk1hWns/J/gOUbbcwfWdwYK+owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDk4NWVhNTBkZjU0ZTc5NWE0YmUxNGFkNTE4OGE4ZTUy
ODczNzg3MDM5YmI2YjI3YjIwHhcNMjUwMzIxMjEyMDQ0WhcNMjYwMzIwMjEyNTQ0
WjAzMTEwLwYDVQQDEyhBMzJFNTQ3MDNFQUUxMjlGNzZFMzQxOEJDMzg1ODJDMkZD
NUNCMUUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5FV/nDzuZ+p
D2ZeR8Badh9BdnR6/LoYb8dJKcnBKviTSuw0L39ygmEEx53UrzHEcrN2vO1+x6X1
abmj++bYJtgo0NX+Gt+mTsMtOp+Id8knH+HwwRwQULh6sXbcBzbvTJBBcl/W4vrF
K3jgPl7daLAtQoB6j7nS+FNEnv4W/kyF1FS1jf2jf9+JoGbo6X52rOHKsUU5/GD1
6HBvabCVyKRcAjnXtUjZaKlWC7Tv7ViBoEHQha2Ac+dtGZ1/Ab8r6sNm6N9wpsnA
2dEoza8X3wQTIDqrtmD5K+gfO3xOOh/bGm0sIdJKsL6/d0qMsx5ujZTIQT7bQfg0
V98ttDW/owIDAQABo4ICuTCCArUwHQYDVR0OBBYEFKMuVHA+rhKfduNBi8OFgsL8
XLHhMB8GA1UdIwQYMBaAFBjAkk0jHaMBlRYLJe7mMn60Awb4MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMzYzVjNWY2YjViLzAv
MThDMDkyNEQyMzFEQTMwMTk1MTYwQjI1RUVFNjMyN0VCNDAzMDZGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzcyMjViNDE1LThhZTAtNDUyMy1iMzdmLTc0ZWQ3ODA2NzZhYS8wOTg1
ZWE1MGRmNTRlNzk1YTRiZTE0YWQ1MTg4YThlNTI4NzM3ODcwMzliYjZiMjdiMi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MTcz
M2M1YzVmNmI1Yi8wLzMyMzYzMDMyM2E2NjYzMzYzODNhNjU2NjM5M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzMjM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvxoDvkwDQYJKoZI
hvcNAQELBQADggEBAJPvuKm7C49oTMq3aMpKhV2PhHWdn0oMjxXVpJN/YGIQzssl
7shCC3ZCy/+vLTZjHPe6kSkwI0DqLyIZAu101Im9Na56EhvIQQgGTkRU+E00Ud1P
pvCiZ4Wwlk8K8lL/myr4g5xR1xGhpFmM9dk7NCqQaG2thsEFOJSXpwwlbWEVdA8U
fUYr8eqQLlR7SoeLRZicJ2w65VwZexppozm1tizdkxOTtKVoTW/+APh4vLEOue6a
a1d0fwpXyROH/dQLIk7rqaPYQ8sxX8DNt2Qa4wHvZViUq4iSbyxhh3ZlbZtMkhaj
2ApWlBodG/Fp9xhoxpS0AYAhWxTL0CF+XjkWX8c=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:06 2025 by rpki-client