Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31313a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a31313a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          OrMOGB+cvSwSlzZ75ojfJ7+F+EKV5+LdxIFd1F9hmQk=
Subject key identifier:   AE:04:FA:48:83:A0:47:53:FF:FB:49:6E:51:FF:03:D3:E7:8C:6D:B7
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       773589577B394A94158F06695970ACE6C2EEA1C5
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31313a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 16 Oct 2025 11:36:38 +0000
ROA not before:           Thu 16 Oct 2025 11:31:38 +0000
ROA not after:            Thu 15 Oct 2026 11:36:38 +0000
asID:                     9009
IP address blocks:        2602:fad4:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 17:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:35:89:57:7b:39:4a:94:15:8f:06:69:59:70:ac:e6:c2:ee:a1:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Oct 16 11:31:38 2025 GMT
            Not After : Oct 15 11:36:38 2026 GMT
        Subject: CN=AE04FA4883A04753FFFB496E51FF03D3E78C6DB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:35:50:ed:1a:cf:f9:17:3e:37:6b:2c:bd:
                    02:bc:b4:50:94:9a:62:87:4f:4c:50:49:ae:90:70:
                    b3:4d:86:96:0a:39:ad:41:2a:d6:d2:1a:01:37:8b:
                    80:e5:b6:2f:9c:45:f5:75:d8:03:0b:75:1e:44:a9:
                    3a:2b:53:91:54:b0:5e:d9:9b:97:52:5e:3f:fc:83:
                    9b:94:a7:72:3f:6f:70:a8:26:2d:30:e2:df:0b:0d:
                    36:38:47:76:8f:d7:e8:1a:6c:05:e6:0f:c2:0d:f1:
                    7e:ec:56:6e:be:0d:6d:3e:82:95:84:56:47:63:1b:
                    7e:7d:22:4e:2f:50:c2:e8:f4:c9:88:7b:d2:3f:a5:
                    92:ea:17:08:30:e2:bc:33:ff:3c:a6:5a:3e:e9:b3:
                    85:c6:05:1f:3e:ce:cd:f4:77:ac:84:c0:9c:05:9d:
                    d9:ac:6a:f4:03:0e:e8:b5:02:20:c3:a0:35:14:0a:
                    30:97:d1:03:0e:22:45:1a:0d:5f:89:ff:b9:b9:d5:
                    c2:e4:b2:27:01:98:14:24:af:03:05:70:e7:7c:5b:
                    dc:e0:b4:ae:8c:5e:f9:21:fd:21:f9:24:7e:b5:ca:
                    ea:8e:2e:f0:96:be:9c:1a:0a:e3:28:a1:a9:8d:79:
                    f6:24:33:37:7b:5d:24:ab:5b:dd:b7:2f:a3:74:46:
                    40:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:04:FA:48:83:A0:47:53:FF:FB:49:6E:51:FF:03:D3:E7:8C:6D:B7
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31313a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:0d:d4:6c:99:fd:ce:64:75:57:9b:ec:4b:50:77:e8:2b:2b:
         ec:9d:60:39:13:49:9d:ff:b6:af:a6:9a:2b:86:7e:7d:42:53:
         a3:c4:3f:fa:a0:fa:31:df:7a:9b:1f:5d:0f:30:99:a2:de:93:
         39:23:bb:79:34:a6:b0:83:bf:9a:ca:84:87:14:62:1c:75:23:
         e5:24:9c:70:10:ad:b7:76:63:02:a3:0f:bb:81:37:50:20:93:
         63:a7:7d:18:81:67:d0:e0:23:6e:56:20:14:72:9a:be:06:44:
         42:ef:a8:09:61:5b:33:4a:ef:25:23:3e:72:5c:02:1f:09:91:
         70:96:7c:ea:19:5e:98:ce:e5:f7:03:68:04:31:21:54:f7:6c:
         5c:a2:ea:5d:3f:eb:9d:8e:6d:0a:f5:1a:b4:15:83:42:e0:bd:
         aa:c6:d7:64:b4:98:7a:35:41:5e:44:04:32:55:0b:b2:1e:d4:
         ad:5e:a4:83:5a:0f:d4:93:60:7e:43:81:df:a0:21:5f:53:e3:
         49:49:10:f0:6f:c2:59:7f:b6:e0:47:ec:63:88:b0:8e:e0:1a:
         f7:2e:99:f8:74:1c:50:dd:7d:d2:77:7d:20:b7:5d:eb:90:3b:
         88:21:c3:a1:34:1d:de:36:1e:1c:ab:0a:9a:51:3a:3e:19:71:
         40:e7:91:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:15:29 2025 by rpki-client