Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203530373535.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e203530373535.roa (raw, json)
Hash identifier:          8Zc1DN0nEtVmDaBxOD6OPCLJyTxdOVgcJVa3Xw9FuhI=
Subject key identifier:   B7:98:07:F4:07:5C:71:F9:9C:3C:93:D9:34:BD:5B:FA:82:14:ED:32
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       2D65422FFCBDF5D02EFB2E420BB5AB9EFC4AF795
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203530373535.roa
Signing time:             Mon 27 Jan 2025 12:14:10 +0000
ROA not before:           Mon 27 Jan 2025 12:09:10 +0000
ROA not after:            Mon 26 Jan 2026 12:14:10 +0000
asID:                     50755
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 00:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:65:42:2f:fc:bd:f5:d0:2e:fb:2e:42:0b:b5:ab:9e:fc:4a:f7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Jan 27 12:09:10 2025 GMT
            Not After : Jan 26 12:14:10 2026 GMT
        Subject: CN=B79807F4075C71F99C3C93D934BD5BFA8214ED32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:07:09:6a:71:4f:33:b7:19:cd:2d:ed:7e:
                    b8:06:90:44:bc:30:ea:70:ff:f9:5d:d5:b6:f4:1b:
                    98:92:87:1d:26:85:53:05:c9:6f:f1:60:3a:90:af:
                    aa:52:ad:53:f0:d4:b7:a4:b0:20:e3:e6:4c:81:64:
                    2c:a8:78:a2:ea:28:16:5b:c0:e7:46:cb:97:f0:ab:
                    e2:29:b7:1a:5b:fc:e8:21:5c:e6:b5:13:3c:4d:fc:
                    c3:87:8b:4d:80:34:6f:ad:db:87:a6:45:db:3e:e9:
                    a5:1c:f2:ea:40:76:7f:bc:0a:ac:31:bc:a0:4d:23:
                    eb:17:03:df:d3:a1:29:76:62:07:0c:10:c0:f2:8c:
                    8d:7d:f8:33:e8:38:3b:0f:ec:57:1f:4b:7a:d7:7a:
                    08:dd:fb:7e:57:d3:00:f5:70:0f:1e:f2:90:fc:08:
                    b3:7b:82:04:b5:ed:6b:0b:fb:3d:52:b1:f7:86:23:
                    e8:5f:15:96:e4:4f:18:23:67:f4:5f:11:9c:05:c8:
                    fb:05:1b:35:93:4f:84:da:bd:3a:cf:b2:45:d9:87:
                    d6:aa:d0:06:82:f5:80:0d:44:ef:cf:96:dd:7d:f8:
                    33:7f:ec:48:d5:25:d7:ea:5b:dd:cd:6a:bc:65:4f:
                    57:0a:cd:67:07:25:1b:f1:3c:53:85:d3:82:42:cc:
                    b1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:98:07:F4:07:5C:71:F9:9C:3C:93:D9:34:BD:5B:FA:82:14:ED:32
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203530373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:b5:67:09:e5:25:1f:89:3d:0a:41:b9:eb:05:5b:36:25:93:
         90:6d:2b:f1:ad:ac:62:78:15:71:66:e0:07:be:78:d5:a1:55:
         19:1b:e7:49:a8:f7:23:dc:fd:fd:ec:50:d5:4f:53:62:7e:e4:
         4e:d0:6f:30:cc:41:f9:7c:62:ef:b9:08:a7:82:b9:60:6d:46:
         72:18:48:2d:40:cb:78:87:73:1b:1c:76:0e:1a:89:54:99:08:
         b8:b1:5b:0a:e8:12:b2:c1:a1:de:e7:96:14:05:31:cb:44:f5:
         70:b5:6b:8d:0d:c6:10:0b:3f:77:de:12:e5:42:0d:0c:89:4d:
         c1:bf:2f:bc:21:ca:5d:3a:57:46:44:9f:0f:40:4c:f3:63:76:
         a1:d4:de:3a:3e:15:0b:da:32:15:48:5c:53:c7:5d:3d:2b:93:
         22:bb:36:66:9d:de:a9:25:59:07:11:a1:a2:a3:f8:81:c8:97:
         b0:9a:20:9e:88:de:8d:b1:91:28:55:8a:36:d7:30:22:42:7a:
         52:4c:8a:a1:d1:fd:0c:25:da:d7:9d:aa:8a:8a:19:ed:c4:c3:
         4b:9f:16:9f:43:2c:2f:fb:a4:29:f3:33:9a:09:8a:ab:cf:3f:
         08:68:0c:2a:de:71:6b:eb:ec:4b:a9:fd:db:8b:86:13:c8:85:
         30:03:d4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:11:13 2025 by rpki-client