Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323030343534.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e20323030343534.roa (raw, json)
Hash identifier:          2q7Ebfv8kg4PhxMDtMZ/GXq/hWi04FVohxnykO5NIgA=
Subject key identifier:   9D:E8:60:EC:4A:1A:2F:81:E7:C9:74:63:49:7B:87:AC:52:EA:F0:68
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       65CDC87FCF70ED58468B285BA35DE92B8EC998C5
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323030343534.roa
Signing time:             Mon 27 Jan 2025 12:14:12 +0000
ROA not before:           Mon 27 Jan 2025 12:09:12 +0000
ROA not after:            Mon 26 Jan 2026 12:14:12 +0000
asID:                     200454
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Apr 2025 13:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:cd:c8:7f:cf:70:ed:58:46:8b:28:5b:a3:5d:e9:2b:8e:c9:98:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Jan 27 12:09:12 2025 GMT
            Not After : Jan 26 12:14:12 2026 GMT
        Subject: CN=9DE860EC4A1A2F81E7C97463497B87AC52EAF068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:e1:2f:04:ed:54:12:25:62:6a:70:bc:3f:
                    85:99:b8:54:a5:28:c7:a2:3c:cf:18:b3:e6:60:8a:
                    c8:52:bd:fb:8a:c9:c0:60:a5:22:6c:91:9d:bd:b5:
                    d2:1c:af:a3:5a:27:10:96:da:d2:7a:eb:5b:be:fe:
                    18:9e:13:57:02:77:03:de:7f:54:14:12:80:29:60:
                    a6:4b:88:bc:b0:4f:27:50:98:08:ce:de:8c:4a:1f:
                    e3:8a:48:99:2b:99:9d:81:d7:bf:3b:33:b9:b3:07:
                    27:be:b8:20:3d:ec:04:37:a4:c0:1c:30:3f:4d:55:
                    05:a5:d5:d4:cd:3c:10:05:2d:d3:27:4f:2f:7b:0d:
                    3a:ca:b4:48:91:bd:be:97:27:9d:d4:96:1a:58:62:
                    7d:75:ef:a8:e0:6e:75:c7:a0:c3:03:b0:4c:29:ff:
                    8a:6f:68:58:4d:cc:84:41:07:3c:82:65:98:9b:7a:
                    d9:a8:b9:2e:fe:dd:88:b0:fa:6f:54:b0:f3:ec:fb:
                    d2:87:66:67:95:0c:75:15:9b:2e:e7:81:f0:08:9f:
                    45:a4:a8:b3:f6:f8:3e:69:44:f3:07:b7:7a:bd:f6:
                    19:2e:f9:85:9d:d6:eb:81:0f:d9:76:05:14:46:dc:
                    19:10:a7:58:9a:6e:f4:4e:df:bd:a9:04:65:2e:b5:
                    41:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E8:60:EC:4A:1A:2F:81:E7:C9:74:63:49:7B:87:AC:52:EA:F0:68
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323030343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         dd:e7:56:9a:60:69:70:10:38:ac:9c:97:00:4e:4b:c0:15:19:
         b9:36:46:62:c8:54:0f:6e:1c:fa:3d:92:b4:43:0d:2e:20:1c:
         a8:3b:8e:39:c4:22:28:fc:10:35:6c:df:11:40:1b:7b:e7:ea:
         f7:53:53:f1:aa:0f:60:a7:9a:2d:1d:28:df:b7:81:11:b0:02:
         61:ba:7a:67:68:b0:fd:19:46:50:0a:e9:85:8e:ba:9f:1c:fb:
         1a:e4:09:c3:c6:9a:37:02:03:a5:7f:17:47:f7:7f:92:2c:47:
         5d:f7:1e:47:5c:32:96:5b:bd:b9:f9:10:a2:28:87:ac:57:2e:
         45:bb:55:2d:db:c1:0c:7a:37:e4:12:73:4d:72:22:72:51:e5:
         59:cc:df:8c:55:b2:da:0d:15:d8:68:8b:6a:a2:6e:0d:7a:ff:
         b1:4c:fd:0a:0d:a3:5c:81:bf:8f:1e:ff:2a:49:9c:05:10:0d:
         d7:02:6c:e4:d9:9a:e1:d1:5b:c3:80:18:08:92:52:8d:b2:64:
         8b:69:1e:5b:1e:96:69:dd:e1:90:5e:1b:ab:98:89:92:41:3d:
         07:95:b1:eb:5a:9e:32:00:4d:f0:2b:66:56:f9:6f:84:b7:9c:
         18:c7:d5:aa:b8:3a:94:1d:ea:2e:50:dc:4c:97:1d:97:ac:69:
         ee:97:49:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:11:56 2025 by rpki-client