Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a34303a3a2f34342d3434203d3e203534313438.roa
File:                     323630323a666134333a34303a3a2f34342d3434203d3e203534313438.roa (raw, json)
Hash identifier:          /rn4jbdrEQ5ZC2yXbIrLZIgEk9mh/BwDFfGmTHtNk5w=
Subject key identifier:   5F:78:23:64:84:E8:D7:76:6B:8C:6F:EA:3C:0C:BF:2F:A7:82:A4:91
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       088AE5049858F3183B3E938804E9D031CFF27A82
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a34303a3a2f34342d3434203d3e203534313438.roa
Signing time:             Thu 25 Sep 2025 21:45:11 +0000
ROA not before:           Thu 25 Sep 2025 21:40:11 +0000
ROA not after:            Thu 24 Sep 2026 21:45:11 +0000
asID:                     54148
IP address blocks:        2602:fa43:40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Oct 2025 19:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8a:e5:04:98:58:f3:18:3b:3e:93:88:04:e9:d0:31:cf:f2:7a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Sep 25 21:40:11 2025 GMT
            Not After : Sep 24 21:45:11 2026 GMT
        Subject: CN=5F78236484E8D7766B8C6FEA3C0CBF2FA782A491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:c1:ad:2d:77:17:40:4c:1d:0f:80:10:3e:
                    d4:37:fd:f4:07:df:94:7b:ca:54:28:03:18:ff:24:
                    7b:b9:14:2a:88:86:82:4a:71:bf:0a:4b:d5:84:ab:
                    60:f1:7a:4d:1d:28:ab:5b:a7:bd:7d:42:dd:c9:1d:
                    4e:0f:aa:86:42:2a:44:44:16:d2:be:b3:04:00:f0:
                    c6:cf:d5:b0:67:d2:9c:75:01:43:63:c4:12:7a:d4:
                    38:63:1c:8b:8f:69:e1:ef:96:11:f2:45:dc:38:1f:
                    b7:7a:64:39:e0:56:97:33:2b:d3:d8:5f:c8:a8:c2:
                    cb:b3:2b:43:a0:f2:17:ff:c2:eb:59:1e:7d:4f:62:
                    d5:ec:1b:d2:34:ea:e9:70:8d:2d:12:54:39:93:4a:
                    6e:47:ea:61:04:dd:f5:b0:9c:e0:4a:77:83:23:04:
                    85:9f:ac:85:74:f8:b2:16:d1:a1:85:e0:a5:93:01:
                    49:87:b3:61:49:0c:d6:9e:35:16:38:64:f9:84:c2:
                    54:21:c6:e2:4c:29:6b:a2:49:8f:5d:31:06:24:fe:
                    8a:8c:15:bc:90:87:3b:f9:a9:8d:9a:73:cd:5b:0d:
                    fa:f4:f5:c0:93:2c:d3:4b:96:88:b2:06:1d:e6:0d:
                    54:d3:08:b3:4d:14:7f:b3:30:15:a6:d9:86:b6:8f:
                    af:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:78:23:64:84:E8:D7:76:6B:8C:6F:EA:3C:0C:BF:2F:A7:82:A4:91
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a34303a3a2f34342d3434203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         3b:72:11:ce:10:4f:04:c6:95:09:f7:ff:c4:63:ec:f1:0b:30:
         0b:93:41:92:85:66:86:04:b5:6a:84:09:46:8b:97:e7:61:f6:
         af:59:08:32:cb:bd:03:82:db:4d:3e:46:6b:2a:1d:39:86:dc:
         08:3d:2d:a1:c2:9b:49:52:8c:6c:13:97:ff:de:83:b2:17:d3:
         52:56:5a:70:7a:d9:65:e6:47:04:66:52:21:f0:a5:90:17:f7:
         9f:79:d1:d7:6f:a0:d0:bb:02:ff:3a:72:02:67:de:b7:c1:88:
         4c:f3:d0:c9:75:e5:5d:ed:e8:12:a2:b0:b2:19:70:ff:89:a0:
         fd:2e:c1:61:f6:75:48:88:f9:41:6f:31:90:65:6a:96:55:ef:
         85:96:94:9f:9e:f1:58:5b:01:68:37:b6:92:5e:c2:9d:f3:68:
         33:87:95:7b:03:69:f1:f4:b1:e1:76:83:da:12:84:be:ac:c0:
         ba:e7:11:c1:3a:4e:68:ed:44:54:5a:5b:61:5f:4d:7e:4b:4b:
         72:dd:77:6d:85:aa:b1:ae:3c:4a:43:7e:d2:ba:37:72:c0:cd:
         5a:98:ab:33:54:b6:35:67:3b:41:b5:e7:96:de:1e:1a:a3:c3:
         c0:0a:c0:bf:52:3d:ed:d1:f5:74:66:10:e7:bd:45:76:88:d2:
         3c:4a:49:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 12:00:36 2025 by rpki-client