Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a633a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a633a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          KBDGqOscNALIhJRnFcR0IBdTjDT1i/EP/LaM5tdl8LE=
Subject key identifier:   5B:79:08:DE:25:EF:EB:55:FE:5B:9A:72:80:5E:95:0D:63:47:88:F9
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       319C8954499D7186B5F95DD9E4843E9A5DBE053C
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a633a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 16 Oct 2025 11:36:34 +0000
ROA not before:           Thu 16 Oct 2025 11:31:34 +0000
ROA not after:            Thu 15 Oct 2026 11:36:34 +0000
asID:                     9009
IP address blocks:        2602:fad4:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 17:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9c:89:54:49:9d:71:86:b5:f9:5d:d9:e4:84:3e:9a:5d:be:05:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Oct 16 11:31:34 2025 GMT
            Not After : Oct 15 11:36:34 2026 GMT
        Subject: CN=5B7908DE25EFEB55FE5B9A72805E950D634788F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a2:7c:97:be:e6:92:75:b9:e8:3a:01:89:36:
                    3a:4d:33:bf:34:42:c3:b6:8a:4d:ef:76:bb:24:a3:
                    8f:f7:1d:7f:8b:6b:55:76:b2:ff:d1:d0:15:f8:a1:
                    de:da:1a:3b:55:5f:91:b1:f7:ef:5f:3e:ce:7b:81:
                    a8:7b:b0:29:28:2b:c1:9b:a6:04:6f:49:2f:db:6b:
                    a1:2e:94:7f:d1:29:53:27:29:eb:87:ab:1f:79:db:
                    3b:25:c6:18:3f:89:ac:c2:2e:a1:45:e7:e8:21:a4:
                    6b:54:79:49:2a:57:6e:c7:da:dc:55:0e:8e:ce:09:
                    42:eb:10:58:e6:b6:6f:7a:16:eb:4d:a3:86:e1:cd:
                    26:94:69:87:8b:7f:92:d5:1b:d2:bf:de:9c:8a:69:
                    28:a4:60:d8:a4:62:91:69:f0:32:3c:c2:6e:d9:2f:
                    29:1b:04:e6:4d:44:37:4e:19:10:df:b2:ec:88:7a:
                    d0:44:22:21:bc:58:8c:1c:b3:ac:17:75:b0:f9:5d:
                    6a:13:ac:a4:f7:73:f3:cc:a7:18:f9:ba:45:1e:5c:
                    33:9a:65:90:76:68:72:1e:bd:0b:37:ca:56:8a:dd:
                    aa:c9:88:8f:19:ca:83:96:3e:84:79:ea:4b:f6:7b:
                    75:76:8f:70:ab:01:d9:88:cb:b0:3a:23:2b:43:52:
                    e4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:79:08:DE:25:EF:EB:55:FE:5B:9A:72:80:5E:95:0D:63:47:88:F9
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a633a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:43:b7:25:af:9b:2e:bd:e3:a0:60:9d:b2:0b:9c:1b:ec:e1:
         5d:5d:3d:81:d8:d1:42:8b:77:cf:61:f5:37:ff:09:55:1c:df:
         8a:07:dd:b3:22:83:d4:52:fb:e0:7c:bb:40:a1:28:90:f0:a4:
         d2:e2:b2:3f:46:64:37:78:96:a5:a4:80:8a:74:b5:ec:07:76:
         ce:bc:19:55:90:30:3b:7d:89:db:43:7e:49:6d:c6:6a:62:7d:
         0a:e3:b8:e8:d9:5f:9c:c6:ad:50:7b:92:c6:a3:fd:f5:f0:b0:
         c8:1c:14:18:94:26:d1:da:10:dd:b3:a1:a9:8c:f1:d2:7c:05:
         c0:01:1e:97:3f:65:a4:46:9a:1d:ff:e0:e3:d9:bc:e1:4d:ce:
         30:dc:44:2b:fb:43:fe:a9:82:c3:e2:04:f2:5c:99:8d:a4:05:
         f5:c6:7f:c7:b9:a2:72:07:f8:f2:06:e8:a0:25:57:2a:97:fb:
         3d:49:aa:35:05:96:7b:6a:b7:a0:e2:43:47:41:99:f6:1e:07:
         22:50:e2:95:cc:3b:e1:3a:ad:51:a4:a7:a8:f1:fa:28:6a:6a:
         3e:46:47:b4:2a:7d:56:8f:95:38:f1:43:72:cc:8d:e6:60:96:
         54:68:19:2e:fd:42:c8:f0:b4:1d:79:74:e6:5b:7c:74:59:d8:
         e9:90:92:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:15:29 2025 by rpki-client