Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/323630363a346438303a3a2f33322d3332203d3e2035363530.roa
File:                     323630363a346438303a3a2f33322d3332203d3e2035363530.roa (raw, json)
Hash identifier:          smloRLFqbEKHEU9GKCH/lk/wpd6Ucdq+59Te8QsXLxc=
Subject key identifier:   B5:1F:10:ED:AB:00:0C:AC:B3:7E:50:AB:5D:07:18:9E:9B:09:1B:D9
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       5DD03CC954CEBAE6B7BB5593191CDDA92FCEA350
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/323630363a346438303a3a2f33322d3332203d3e2035363530.roa
Signing time:             Thu 27 Feb 2025 05:08:51 +0000
ROA not before:           Thu 27 Feb 2025 05:03:51 +0000
ROA not after:            Thu 26 Feb 2026 05:08:51 +0000
asID:                     5650
IP address blocks:        2606:4d80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d0:3c:c9:54:ce:ba:e6:b7:bb:55:93:19:1c:dd:a9:2f:ce:a3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Feb 27 05:03:51 2025 GMT
            Not After : Feb 26 05:08:51 2026 GMT
        Subject: CN=B51F10EDAB000CACB37E50AB5D07189E9B091BD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2b:19:86:02:e1:aa:a9:7b:11:df:04:24:ff:
                    c6:c4:cf:4b:4b:06:e1:43:fd:14:d3:00:ef:0a:e6:
                    8e:79:55:ca:ec:42:5d:1a:21:62:18:a2:c1:7a:31:
                    29:38:b9:d7:63:5c:93:3a:d6:06:c9:c4:76:1c:51:
                    a5:95:85:65:dd:1d:26:99:d1:d3:c4:88:dd:76:5f:
                    c1:dc:25:56:72:d7:b5:8d:d4:d7:f9:2c:df:86:89:
                    c5:60:83:8b:4a:9c:a1:a9:2f:99:1d:2c:ef:75:cf:
                    e0:f7:0a:7d:74:42:e8:64:1a:d4:a9:96:f7:e7:a8:
                    41:80:84:e4:54:a9:6c:4a:bf:bd:a2:57:24:a5:96:
                    bf:3c:98:db:f3:67:27:f9:a6:36:6b:e0:76:8e:b5:
                    18:e6:02:82:20:a8:73:a0:18:9d:a0:12:5c:d9:6b:
                    28:4b:21:ac:5b:5d:57:55:59:e1:23:68:be:87:61:
                    fb:9e:b2:48:24:8a:dc:a3:89:ae:a7:3b:cf:33:26:
                    01:e7:f3:59:c5:7f:d4:2a:e4:bf:50:64:41:40:2e:
                    2c:ab:fe:d6:c4:36:8c:f9:ee:99:b3:bb:2d:62:b6:
                    30:1c:95:a2:17:fb:f1:95:17:3d:64:83:6a:53:02:
                    e2:d2:17:d0:ec:2d:60:0e:70:c8:12:8d:ed:93:40:
                    28:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1F:10:ED:AB:00:0C:AC:B3:7E:50:AB:5D:07:18:9E:9B:09:1B:D9
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/323630363a346438303a3a2f33322d3332203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:3e:04:09:a1:45:07:3d:42:5a:64:5f:15:df:0f:5d:ff:b2:
         91:76:30:3e:9e:d3:58:1e:8b:08:94:e3:17:b5:c8:ac:21:73:
         f1:c7:1a:13:6a:99:c7:5e:b3:3c:f0:06:4a:3a:43:bb:eb:4a:
         cd:10:80:88:d0:da:f4:e8:35:cb:3f:40:99:d8:e5:85:a0:65:
         a3:e4:77:96:91:1f:f4:e1:4f:67:22:b0:79:57:ba:74:29:75:
         29:89:c0:6b:bc:e7:07:37:7b:9e:6a:9d:c6:b9:7f:31:c8:c2:
         c7:14:6c:f5:11:89:97:5c:db:c3:b6:5d:30:10:92:a9:29:cc:
         80:8b:be:3a:a9:2e:cc:28:43:9d:c3:6e:5f:fd:39:d9:ea:22:
         f3:de:dc:92:a6:a7:be:73:3e:c9:03:f4:e2:e3:bc:b5:d3:93:
         ad:be:f9:8e:df:88:f4:3b:6a:c2:c8:38:e2:15:40:5c:ef:71:
         19:c5:b8:fc:34:87:2e:15:89:9b:8a:74:7b:19:1e:a3:71:49:
         6a:0a:33:56:23:5e:31:8c:88:1d:14:37:fa:fc:23:e4:a2:82:
         54:56:6a:f9:e0:32:2d:8f:c4:8c:c0:fe:e6:85:ad:34:3c:bb:
         f8:a9:cb:f3:2c:9c:77:f0:f0:06:76:11:7e:5a:84:2b:03:5e:
         e1:cf:22:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:09:32 2025 by rpki-client