Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a313a3a2f34382d3438203d3e20323136333234.roa
File:                     323630323a663764633a313a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          pDNzPZMaGu8AM9re1WlvmEu4/d6Fp8rbaq4VsSUN1nM=
Subject key identifier:   11:22:CC:5C:E8:1F:E3:52:B2:93:62:D6:E9:32:EF:39:5A:9A:4B:05
Certificate issuer:       /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial:       4E0C391B603062B11360FE0D64262F31F849B877
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a313a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Thu 05 Jun 2025 15:03:31 +0000
ROA not before:           Thu 05 Jun 2025 14:58:31 +0000
ROA not after:            Thu 04 Jun 2026 15:03:31 +0000
asID:                     216324
IP address blocks:        2602:f7dc:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0c:39:1b:60:30:62:b1:13:60:fe:0d:64:26:2f:31:f8:49:b8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
        Validity
            Not Before: Jun  5 14:58:31 2025 GMT
            Not After : Jun  4 15:03:31 2026 GMT
        Subject: CN=1122CC5CE81FE352B29362D6E932EF395A9A4B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5d:4b:b3:74:b3:9a:3e:43:43:d8:89:fe:8b:
                    1a:19:0f:a6:12:55:bd:fa:7f:f1:16:43:9e:5f:b1:
                    54:06:e4:46:3a:66:a1:83:4a:12:b3:71:1f:29:39:
                    66:9b:8d:ea:71:ab:b9:54:6a:0f:a9:43:18:0c:73:
                    87:df:a7:77:e9:e8:91:01:12:e8:6c:b5:25:9f:bb:
                    46:68:c1:2b:94:c3:b6:d0:1b:62:2c:96:98:d9:79:
                    5c:a9:56:65:18:78:53:50:57:ef:35:e1:22:5f:45:
                    5b:81:5d:5f:fa:2a:36:3c:a8:14:20:1d:40:cb:df:
                    c4:86:37:3f:3b:37:be:a6:75:36:af:5a:9d:95:a1:
                    7c:16:e4:b7:ea:c1:59:2f:a4:0b:1c:44:64:f7:d0:
                    23:05:2c:4f:9b:d4:5b:0b:ff:8b:e4:3a:5b:93:58:
                    93:8a:8f:c4:12:49:10:36:95:b6:2f:97:d2:43:43:
                    8a:74:10:f0:eb:10:ea:a2:cc:d4:a5:72:8c:64:d7:
                    84:61:44:b9:eb:01:15:ce:32:bc:44:ef:c8:d2:1b:
                    84:42:5c:6b:63:c9:61:e7:3b:22:74:f8:d5:8d:b7:
                    87:69:96:1f:d3:57:b3:0e:28:2f:ac:d6:ad:8e:78:
                    27:28:09:2c:28:e6:a1:ca:53:d3:ba:62:0f:ed:a9:
                    1f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:22:CC:5C:E8:1F:E3:52:B2:93:62:D6:E9:32:EF:39:5A:9A:4B:05
            X509v3 Authority Key Identifier:
                keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a313a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7dc:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:69:00:ee:00:c4:d6:f3:bf:70:3a:53:48:94:b8:9a:b3:5d:
         ec:6d:69:ee:b3:da:ac:3e:3e:46:f1:92:38:bd:0b:84:b3:ea:
         31:8e:10:a8:f2:2a:f5:6a:b4:58:64:4f:3a:d7:d6:85:49:12:
         85:8e:ca:69:2c:b2:7e:db:f3:5b:2c:ba:2b:65:2a:99:05:9d:
         b1:5a:9b:dc:f6:1b:a0:8c:a5:5f:cd:6a:46:46:9a:5e:bd:2b:
         6e:75:f5:e4:59:11:d4:1d:db:7d:50:7c:66:32:f0:94:c8:ff:
         c3:96:1c:72:de:5a:57:b5:63:15:e8:68:49:f8:5c:28:b7:2d:
         29:af:fc:18:e0:4b:aa:f6:2f:a2:ed:f7:1a:ef:8f:cf:ba:1c:
         82:eb:3c:1f:b0:ae:68:40:e7:92:ef:ad:a4:61:4b:9b:e2:df:
         16:53:50:66:5d:e6:2e:38:8b:d5:12:6d:a7:0f:b2:6c:f8:b5:
         ac:4b:b6:3a:49:f6:a6:01:7b:ca:6a:e7:f1:14:3e:68:ec:1b:
         47:4c:33:42:3c:30:e4:05:81:8b:2c:c5:0b:3c:0f:9a:22:1a:
         ec:32:05:96:5e:88:4e:de:3d:25:5c:53:34:c5:c1:b2:a8:7d:
         32:56:a4:4b:b7:36:d1:04:ff:e9:09:4d:f5:00:5f:01:e4:6f:
         f6:19:ee:49
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUTgw5G2AwYrETYP4NZCYvMfhJuHcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMGNjODU3ZDA1ZWZiYjM1MDIzMDUyMGQwOGM4ZDdmNDVl
MzRlM2JmZjNjYjUxNmU1NTYwHhcNMjUwNjA1MTQ1ODMxWhcNMjYwNjA0MTUwMzMx
WjAzMTEwLwYDVQQDEygxMTIyQ0M1Q0U4MUZFMzUyQjI5MzYyRDZFOTMyRUYzOTVB
OUE0QjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF1Ls3Szmj5D
Q9iJ/osaGQ+mElW9+n/xFkOeX7FUBuRGOmahg0oSs3EfKTlmm43qcau5VGoPqUMY
DHOH36d36eiRARLobLUln7tGaMErlMO20BtiLJaY2XlcqVZlGHhTUFfvNeEiX0Vb
gV1f+io2PKgUIB1Ay9/Ehjc/Oze+pnU2r1qdlaF8FuS36sFZL6QLHERk99AjBSxP
m9RbC/+L5Dpbk1iTio/EEkkQNpW2L5fSQ0OKdBDw6xDqoszUpXKMZNeEYUS56wEV
zjK8RO/I0huEQlxrY8lh5zsidPjVjbeHaZYf01ezDigvrNatjngnKAksKOahylPT
umIP7akfyQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFBEizFzoH+NSspNi1uky7zla
mksFMB8GA1UdIwQYMBaAFKsu+I8kdJ9aEg363mfJGOTHEMU+MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyOTA4YjNlMjg1MTRhLzAv
QUIyRUY4OEYyNDc0OUY1QTEyMERGQURFNjdDOTE4RTRDNzEwQzUzRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1L2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2LWQxM2JlOTdkOTFhMi8wY2M4
NTdkMDVlZmJiMzUwMjMwNTIwZDA4YzhkN2Y0NWUzNGUzYmZmM2NiNTE2ZTU1Ni5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5Mjkw
OGIzZTI4NTE0YS8wLzMyMzYzMDMyM2E2NjM3NjQ2MzNhMzEzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMjMxMzYzMzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvfcAAEwDQYJKoZI
hvcNAQELBQADggEBAL9pAO4AxNbzv3A6U0iUuJqzXextae6z2qw+Pkbxkji9C4Sz
6jGOEKjyKvVqtFhkTzrX1oVJEoWOymkssn7b81ssuitlKpkFnbFam9z2G6CMpV/N
akZGml69K2519eRZEdQd231QfGYy8JTI/8OWHHLeWle1YxXoaEn4XCi3LSmv/Bjg
S6r2L6Lt9xrvj8+6HILrPB+wrmhA55LvraRhS5vi3xZTUGZd5i44i9USbacPsmz4
taxLtjpJ9qYBe8pq5/EUPmjsG0dMM0I8MOQFgYssxQs8D5oiGuwyBZZeiE7ePSVc
UzTFwbKofTJWpEu3NtEE/+kJTfUAXwHkb/YZ7kk=
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:21:14 2025 by rpki-client