Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39383a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a39383a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          O/u9wsHx6yQjJ4p0dA2ROsPMl+WvXYTJFWmlfxsxGBY=
Subject key identifier:   CC:65:23:C2:B0:39:71:11:63:B4:72:E9:C1:69:FA:26:58:61:DB:0C
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       0E0F7CBDFEA26847E044F5DC9163B0A351E5A86C
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39383a3a2f34362d3436203d3e203534313438.roa
Signing time:             Sat 01 Nov 2025 02:45:14 +0000
ROA not before:           Sat 01 Nov 2025 02:40:14 +0000
ROA not after:            Sat 31 Oct 2026 02:45:14 +0000
asID:                     54148
IP address blocks:        2602:fa43:98::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 07:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0f:7c:bd:fe:a2:68:47:e0:44:f5:dc:91:63:b0:a3:51:e5:a8:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Nov  1 02:40:14 2025 GMT
            Not After : Oct 31 02:45:14 2026 GMT
        Subject: CN=CC6523C2B039711163B472E9C169FA265861DB0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:70:ad:b6:7c:09:be:5f:4d:6b:f7:86:27:4f:
                    c1:d2:8f:29:32:5b:cc:bb:58:c2:da:c1:83:ce:10:
                    57:9b:8c:f1:b1:b7:b2:ca:49:50:34:56:3f:dc:f8:
                    d0:d3:af:23:c1:6a:12:56:5d:c2:c9:98:2a:17:5b:
                    52:5b:22:fb:da:f0:ac:22:51:b0:90:ac:ce:76:07:
                    a8:d5:2f:d8:37:cd:13:c4:a5:44:6b:d4:c5:2f:c5:
                    4c:1a:81:57:36:3f:85:de:b4:f9:a7:7c:b9:6c:59:
                    b2:d7:25:18:7b:7c:b1:63:15:ae:d2:d6:23:41:95:
                    7f:23:34:40:72:54:52:b2:88:60:b3:eb:ee:25:2d:
                    53:7f:7e:2c:ed:1c:70:8c:a4:71:12:cd:eb:0d:0d:
                    6f:36:36:b9:fc:4c:f6:3f:d9:ce:57:ee:fa:de:a1:
                    5b:e8:0f:b4:20:f0:65:67:2b:3f:bb:d4:d4:34:ef:
                    f2:82:ef:dd:89:bf:fd:be:45:9a:e7:df:be:08:0d:
                    e4:b4:32:ad:b6:ed:3f:35:10:4d:55:8f:44:02:02:
                    7c:38:bb:ab:b3:c3:fb:cb:69:d2:63:56:b9:12:78:
                    2f:99:26:3f:a1:72:7b:56:b2:d7:f7:9f:27:57:01:
                    bf:f7:16:07:f0:76:b2:e7:85:82:b2:01:2d:45:6a:
                    37:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:65:23:C2:B0:39:71:11:63:B4:72:E9:C1:69:FA:26:58:61:DB:0C
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39383a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:98::/46

    Signature Algorithm: sha256WithRSAEncryption
         25:40:4a:dd:db:d8:83:72:9e:33:60:58:38:40:36:12:78:62:
         f1:8f:e3:00:36:2e:4f:cb:86:c1:8b:e3:52:f6:d5:a6:ae:64:
         96:62:b9:7f:7e:2b:ad:76:6b:7d:fa:2f:27:b5:52:ee:31:ee:
         a1:20:41:54:16:65:76:69:28:9c:f8:5d:97:9a:e0:a1:bc:a4:
         6e:7b:d0:8b:bf:6b:01:53:6b:a6:ec:4b:38:dc:de:ae:33:b1:
         48:26:6d:0f:01:f1:8f:27:17:35:07:66:1b:8a:45:cd:50:a1:
         b0:11:d0:32:a5:9c:50:19:47:4a:5e:7a:a6:47:37:55:58:6e:
         13:1a:45:74:c3:4e:ca:61:07:05:9f:9d:29:ba:4a:93:62:46:
         e6:81:1f:ff:54:f7:c1:43:04:42:5d:99:af:7d:d5:37:34:c5:
         5c:75:fe:1c:d0:41:7c:1f:69:85:4a:59:17:cb:76:23:fc:bf:
         4d:05:55:5f:75:69:1e:5a:66:13:e0:39:fe:ae:51:66:83:9b:
         cb:51:a3:fd:ac:a0:b1:15:4f:fd:21:41:10:aa:bb:c2:80:14:
         60:5c:88:c6:46:2f:82:fe:bf:46:6d:92:58:b7:80:0c:f4:5a:
         14:4e:df:b5:36:e6:ad:6c:d5:6c:c1:b1:50:5c:dc:a7:d6:0d:
         79:83:c0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:35:18 2025 by rpki-client