Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a333a3a2f34382d3438203d3e20323632323837.roa
File:                     323630323a666164343a333a3a2f34382d3438203d3e20323632323837.roa (raw, json)
Hash identifier:          RQAv8IrYVe2KXbyfYTXTEuzbogN5qQLtGi+MEfn9iUI=
Subject key identifier:   05:D0:36:C4:BE:19:CF:23:3E:29:61:6A:8E:EC:28:48:EE:F7:05:1E
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       566345B9EEB54E960EC5D327A0FC20AA4DE1827C
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a333a3a2f34382d3438203d3e20323632323837.roa
Signing time:             Thu 29 May 2025 12:28:46 +0000
ROA not before:           Thu 29 May 2025 12:23:46 +0000
ROA not after:            Thu 28 May 2026 12:28:46 +0000
asID:                     262287
IP address blocks:        2602:fad4:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:47:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:63:45:b9:ee:b5:4e:96:0e:c5:d3:27:a0:fc:20:aa:4d:e1:82:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: May 29 12:23:46 2025 GMT
            Not After : May 28 12:28:46 2026 GMT
        Subject: CN=05D036C4BE19CF233E29616A8EEC2848EEF7051E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0d:26:21:09:bd:2e:06:5c:85:02:d6:49:e7:
                    d5:54:a4:8a:a8:b3:57:c5:4c:f5:f1:62:4f:73:50:
                    8e:26:8a:98:62:91:ed:7e:e2:4d:22:c6:68:be:30:
                    97:18:04:15:7e:48:3a:73:e3:cd:eb:70:54:a1:51:
                    ea:c2:d9:d6:87:1a:c4:2e:f0:81:c2:df:50:d7:51:
                    ea:05:5a:d0:ed:c8:34:bd:90:78:06:41:56:67:e0:
                    58:21:94:bd:a1:91:fa:79:0c:34:6d:2a:a8:74:2d:
                    4e:d0:ad:20:af:85:bc:ee:66:c3:99:8b:de:dd:65:
                    fd:6b:2a:ae:4c:e6:7b:3d:0a:e7:4d:6a:02:dc:a8:
                    3f:a8:20:ac:5d:66:83:4d:04:06:66:6c:de:23:c0:
                    9d:93:7f:d7:2c:d4:a5:dc:bc:66:cf:7e:d3:cd:33:
                    6f:b4:d3:69:75:8d:f5:7b:df:43:26:a2:6c:9f:39:
                    12:f2:09:6b:65:89:9e:48:bb:20:87:b9:8d:0b:5e:
                    91:e2:95:46:65:db:03:72:83:99:b3:03:26:ab:e4:
                    7c:16:83:7e:b2:69:47:49:6e:1b:e5:05:c7:91:8f:
                    c3:c8:17:83:87:e9:8a:31:c0:ee:67:14:dc:4d:bf:
                    c0:bb:86:90:e5:1d:36:83:24:6b:1a:28:42:5e:b5:
                    cb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D0:36:C4:BE:19:CF:23:3E:29:61:6A:8E:EC:28:48:EE:F7:05:1E
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a333a3a2f34382d3438203d3e20323632323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:41:17:f8:d7:fd:87:f8:d1:b1:7d:77:2f:62:c0:91:fb:aa:
         f0:28:ad:4a:a4:52:2b:cc:49:db:af:a6:64:9c:66:2c:ee:9b:
         c9:34:2c:94:fa:59:d4:ba:db:f1:a1:b4:e9:53:02:27:45:4d:
         90:d6:c4:15:ec:ac:54:4d:64:7f:c9:df:6f:70:f9:76:c7:31:
         86:72:1f:57:5a:ff:b9:2f:33:e8:99:43:56:0b:70:2b:76:62:
         ba:2a:5b:d7:d3:ef:ee:97:46:a8:d5:c6:3f:9b:20:e0:95:84:
         d8:b6:0b:84:e4:ad:fe:74:31:09:14:4b:55:7c:31:e4:c6:2b:
         9c:2e:47:d0:f2:c1:40:a8:6c:e7:ed:50:39:97:17:0b:b4:fc:
         43:ab:8e:8e:ed:79:2a:ff:25:9a:37:5b:97:f7:e6:03:2b:9f:
         a4:3a:90:bc:1b:30:60:d4:10:f8:b2:37:1f:22:fd:8f:20:c7:
         32:b9:ff:8d:ba:ce:fb:1b:1e:c1:ea:bf:52:20:0a:e4:4d:e6:
         1e:df:04:a7:1d:bd:b7:d7:6b:32:5c:3f:2a:2f:5f:a3:3e:c5:
         23:57:98:2e:a0:dd:1b:59:8d:41:c2:4b:82:c6:d1:f2:9e:e9:
         b9:41:3d:71:4d:1f:5c:ca:90:c2:25:9a:72:ce:1e:ab:af:cf:
         ab:18:58:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:54:18 2025 by rpki-client