Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3830303a3a2f34302d3430203d3e203534323138.roa
File:                     323630323a666139623a3830303a3a2f34302d3430203d3e203534323138.roa (raw, json)
Hash identifier:          xDsHUkrcab26/1h4TTBO0ST88/nVRiJoSMs45c/jN8I=
Subject key identifier:   EB:1A:D1:59:B0:8D:57:DF:89:18:D6:CC:CE:69:B7:B3:B5:94:5B:EF
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       66D8A85BD5EA82054E4552F74BEE6FA459935CD5
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3830303a3a2f34302d3430203d3e203534323138.roa
Signing time:             Tue 25 Feb 2025 20:14:18 +0000
ROA not before:           Tue 25 Feb 2025 20:09:18 +0000
ROA not after:            Tue 24 Feb 2026 20:14:18 +0000
asID:                     54218
IP address blocks:        2602:fa9b:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Apr 2025 13:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d8:a8:5b:d5:ea:82:05:4e:45:52:f7:4b:ee:6f:a4:59:93:5c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Feb 25 20:09:18 2025 GMT
            Not After : Feb 24 20:14:18 2026 GMT
        Subject: CN=EB1AD159B08D57DF8918D6CCCE69B7B3B5945BEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:41:e2:1b:93:75:13:02:e1:64:90:33:ac:dc:
                    58:5c:07:af:f3:9d:ab:95:67:dc:a6:02:13:62:35:
                    a0:23:2a:23:f5:09:dc:5f:aa:eb:42:04:e5:b7:e8:
                    14:9d:27:d3:84:ba:31:5a:f7:05:e6:3d:ec:e8:07:
                    86:49:97:76:61:92:e6:5a:99:8c:56:22:68:51:66:
                    46:25:d2:f0:01:70:5e:5d:d6:70:18:4b:58:79:c5:
                    1d:0e:53:38:38:b4:2a:56:62:5d:fb:c5:05:b7:6d:
                    28:13:d4:53:66:a4:74:31:2b:11:f2:ab:a0:95:ce:
                    5a:34:5c:0b:5e:a3:7b:57:fe:4d:44:67:8b:5c:17:
                    98:b1:f2:93:76:91:ec:e9:25:76:c4:d3:10:c1:0e:
                    ba:20:6c:75:08:29:0b:2c:09:5f:99:4b:f9:d8:62:
                    2a:a2:e0:44:33:76:e9:71:c6:46:46:bc:02:24:0d:
                    bc:35:2a:6f:ca:5f:14:6a:7c:41:c7:40:dd:dc:c7:
                    24:c2:f1:f8:dc:76:ff:68:09:97:fb:67:1f:74:1d:
                    20:3a:f1:03:62:63:00:00:06:50:83:48:a5:d6:f8:
                    6e:f1:97:1d:66:c1:bf:b3:40:d6:f1:73:7d:62:d5:
                    8d:e1:e9:bf:99:e6:44:f5:a7:a1:e6:5e:97:18:f8:
                    f7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1A:D1:59:B0:8D:57:DF:89:18:D6:CC:CE:69:B7:B3:B5:94:5B:EF
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3830303a3a2f34302d3430203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:e4:41:4d:e8:15:15:6e:db:74:37:2a:c9:c1:96:ac:75:92:
         5e:79:8e:18:b4:4c:91:9c:2e:a0:1c:6e:dc:85:12:8a:f6:2a:
         e9:29:60:3c:ec:65:0a:ae:60:83:66:70:b2:02:24:e7:46:f4:
         6b:db:c4:74:0c:50:e3:95:2e:d1:f3:7d:82:b6:7c:03:d5:5e:
         01:ad:f8:6b:12:61:91:10:57:4c:bf:10:4f:13:a7:39:f1:ef:
         f2:a4:fa:35:dd:2e:8a:90:6e:7c:b4:58:04:2a:29:83:8f:8e:
         9e:cc:00:a3:57:25:1a:16:65:a1:56:14:2c:5c:45:a4:85:ab:
         4c:46:8f:2c:2e:bc:d0:3b:42:9b:51:f1:1c:06:37:ca:22:e0:
         02:4f:c6:b2:fb:8a:41:96:1f:b7:00:05:94:a3:13:cf:67:4a:
         cb:75:b6:4e:34:42:20:f8:5b:26:23:fa:f9:f0:af:29:43:8a:
         7b:80:3b:60:61:37:8e:fe:97:85:46:16:86:69:91:4f:43:e5:
         03:3a:3d:00:fe:3c:19:8e:66:e7:92:08:dd:ed:50:35:64:89:
         2c:8c:c8:31:fa:08:bd:16:26:78:63:76:fa:f3:fa:6e:8a:05:
         11:c8:eb:3f:a7:e8:cf:29:cc:83:a8:3e:4c:ea:ee:d6:66:8f:
         1f:ac:df:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:12:34 2025 by rpki-client