Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31333a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a31333a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          h0VoqYHjwT0jCKNROkDNn9bUwoClV9MuCr8ND7FMUJE=
Subject key identifier:   40:22:02:58:F8:A1:C4:82:ED:C9:8A:36:5C:F2:21:D6:93:E4:A4:61
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       5FB4A93839720AEBB1ECAAB62E5A6B8A029A989F
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31333a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 16 Oct 2025 11:36:40 +0000
ROA not before:           Thu 16 Oct 2025 11:31:40 +0000
ROA not after:            Thu 15 Oct 2026 11:36:40 +0000
asID:                     9009
IP address blocks:        2602:fad4:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 17:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b4:a9:38:39:72:0a:eb:b1:ec:aa:b6:2e:5a:6b:8a:02:9a:98:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Oct 16 11:31:40 2025 GMT
            Not After : Oct 15 11:36:40 2026 GMT
        Subject: CN=40220258F8A1C482EDC98A365CF221D693E4A461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bc:bd:2f:9a:33:b7:d5:6c:7c:ed:47:9e:ec:
                    75:56:30:8b:69:cf:77:f1:25:0f:13:a3:33:31:ae:
                    9f:01:4b:57:6f:0d:90:22:2a:2a:aa:5c:14:81:b7:
                    d6:95:8e:87:ca:3b:4d:5b:4d:e0:91:0a:f8:6d:b2:
                    95:41:58:cc:f6:6a:30:71:ca:62:fe:a8:4d:da:00:
                    66:c7:12:02:0c:6b:c7:4a:14:f2:4f:ed:bb:a9:9d:
                    99:80:ea:48:72:95:03:c8:53:78:a5:88:da:29:1d:
                    d1:c4:17:09:c2:2d:90:68:a1:39:1c:55:1c:09:b2:
                    e7:ce:14:4e:74:03:ca:bb:29:58:78:2e:c9:e5:5f:
                    ec:cd:a5:f7:19:a2:0b:8a:53:fb:d7:26:6a:34:61:
                    08:a3:ec:4b:74:af:cf:f1:55:1d:14:4b:5a:f5:29:
                    c0:f0:b2:9a:42:49:7e:01:c0:5e:55:d0:4d:a2:ed:
                    9c:16:c2:3b:38:c4:ba:f6:e0:5a:8a:e6:1a:98:be:
                    a2:bd:34:52:c3:02:55:6d:fc:79:09:65:be:92:44:
                    67:a3:82:42:3a:da:79:d0:40:d2:56:4a:7e:e4:bb:
                    d3:07:da:12:6e:ee:58:66:9c:26:b7:96:c3:57:ab:
                    93:e4:09:a4:bc:99:7a:6b:a4:a7:be:e1:ba:20:f6:
                    7c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:22:02:58:F8:A1:C4:82:ED:C9:8A:36:5C:F2:21:D6:93:E4:A4:61
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31333a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:4e:fb:aa:a0:b5:8d:15:fd:84:9d:4d:0e:80:f2:d8:99:ef:
         76:95:43:23:5b:43:b0:51:05:7d:3e:2a:47:2c:58:4c:36:27:
         ca:7a:57:b8:b6:37:c7:31:2a:53:a0:f4:52:7e:53:2c:c2:75:
         8d:ab:c9:14:f0:15:04:d2:8b:08:60:06:7b:ba:1a:7e:bf:8e:
         ce:26:1e:37:8c:7d:57:b9:08:89:cb:fe:32:0b:f4:c6:d7:fd:
         58:2a:96:7a:03:94:87:53:89:dd:bc:50:87:11:5a:e0:7f:e0:
         35:07:92:f7:b8:c9:0a:81:36:b3:8a:4a:d2:ce:37:7e:ed:0a:
         1e:fb:e9:68:02:47:00:61:0a:ed:fa:1d:b6:19:07:56:47:96:
         cc:36:75:9c:d5:1c:12:c7:01:22:9e:c0:6a:b9:18:d2:6c:59:
         ed:7c:f0:99:41:7a:d1:5d:a6:61:39:79:38:ef:d8:6a:a2:a4:
         cf:82:48:4b:24:69:7b:36:94:81:e7:c1:c5:e8:53:66:7a:dd:
         76:47:a4:c7:21:c4:2f:83:ab:51:74:05:3e:2e:41:3a:f1:73:
         8c:a0:33:ef:e5:15:16:b7:3d:eb:aa:84:1d:6d:60:4a:58:de:
         85:9e:ca:f0:bc:26:05:ab:11:9d:76:bf:b8:c6:ce:c8:a8:36:
         26:e7:5d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:15:29 2025 by rpki-client