Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39343a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a39343a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          5CR6ur57ERvKX4ZD29NVtXwLjbcVq/5hpeIZ9rAKs7s=
Subject key identifier:   24:AD:67:FD:E3:71:5B:DA:49:96:63:FE:44:9C:BF:5E:88:CD:6A:D5
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       1578F1261E2B80FBBF1640D03445BB4EBD554BDF
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39343a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 25 Sep 2025 21:45:12 +0000
ROA not before:           Thu 25 Sep 2025 21:40:12 +0000
ROA not after:            Thu 24 Sep 2026 21:45:12 +0000
asID:                     54148
IP address blocks:        2602:fa43:94::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 01:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:78:f1:26:1e:2b:80:fb:bf:16:40:d0:34:45:bb:4e:bd:55:4b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Sep 25 21:40:12 2025 GMT
            Not After : Sep 24 21:45:12 2026 GMT
        Subject: CN=24AD67FDE3715BDA499663FE449CBF5E88CD6AD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4d:57:f2:ca:ff:30:d1:8b:f3:c6:2e:c3:c1:
                    72:4c:c0:19:43:a3:a2:6c:21:9a:77:03:11:ad:5f:
                    f7:b9:51:ff:a2:6f:bd:35:80:89:8b:15:23:79:1f:
                    c2:8a:76:13:ac:1f:c5:25:db:0c:5c:93:22:b8:1a:
                    2c:ff:f2:27:ae:1e:26:1b:ad:d0:a8:6d:71:cd:a1:
                    c9:fc:c3:e0:36:25:bd:d3:d0:ef:f4:7c:2a:f8:0b:
                    8a:56:03:de:31:70:65:69:82:41:04:87:19:20:40:
                    57:fa:11:1f:31:85:a4:2a:10:f9:d5:42:7a:63:f3:
                    36:13:32:02:22:50:7a:d6:41:d6:52:48:88:11:a5:
                    81:d1:f9:68:38:9d:63:22:6f:5f:07:5a:9a:d8:5c:
                    b7:74:23:cb:5b:d3:e9:78:bc:f0:6d:5b:57:4f:45:
                    07:9d:3d:de:3f:5d:54:9d:55:ce:94:ea:1e:85:d8:
                    11:b4:0b:b9:fb:2f:30:17:87:04:47:1e:a8:59:69:
                    d9:dd:37:29:8e:91:29:36:96:a7:20:e9:38:11:8f:
                    89:dc:c3:a6:42:c1:00:2b:92:66:66:ad:59:e6:37:
                    83:e4:0b:79:12:2b:1a:43:23:70:c2:ab:10:b5:c6:
                    ac:98:89:d4:dc:e1:75:0d:42:48:66:70:63:aa:8f:
                    2e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AD:67:FD:E3:71:5B:DA:49:96:63:FE:44:9C:BF:5E:88:CD:6A:D5
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39343a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:94::/46

    Signature Algorithm: sha256WithRSAEncryption
         af:1a:55:f7:67:af:e2:25:33:e3:fa:55:76:f3:80:f5:d3:a6:
         28:76:f0:60:10:33:a6:45:65:21:0b:2e:c1:68:15:6f:28:29:
         28:86:b5:12:3a:50:a3:18:f9:20:61:64:91:bb:03:0c:dd:ba:
         68:e5:f2:68:5c:43:b3:57:b5:de:35:96:3c:36:38:33:68:af:
         ef:26:27:ae:e0:a2:9d:0c:f3:7b:80:94:64:71:6b:ea:14:6e:
         dc:6c:b2:42:dc:82:70:84:7b:6e:4c:10:b0:50:8a:4d:6e:1c:
         9a:c9:e8:c2:30:27:c9:01:03:7b:b2:cd:be:93:f2:51:a3:b4:
         2c:e6:72:1b:c1:b3:80:a3:9b:4c:51:cf:f1:eb:43:60:7c:7c:
         de:30:b0:4d:75:4a:1e:5e:22:e0:30:2b:31:70:43:8b:45:ce:
         96:76:d3:9a:06:25:b1:c9:d3:3e:30:ef:ad:3b:c2:3e:d4:f5:
         25:82:34:0b:dc:66:e4:70:20:f7:10:4c:65:49:4d:8d:0d:db:
         a3:41:ed:cb:00:8c:f3:db:37:9f:5e:eb:d1:a7:4b:20:09:9c:
         07:8f:5d:6f:4e:bc:16:44:a7:ed:5c:52:56:ad:05:5c:20:ce:
         fb:0e:20:16:a1:e0:bf:55:b0:fc:de:28:aa:87:f3:c7:a1:1f:
         20:fc:64:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 14:54:41 2025 by rpki-client