Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3435303a3a2f34382d3438203d3e20313939323033.roa
File:                     323630323a666161383a3435303a3a2f34382d3438203d3e20313939323033.roa (raw, json)
Hash identifier:          hM/SjId+fxgrUhiUfvCwganyHTzkYOe2E60I4OcYbKM=
Subject key identifier:   77:7B:27:FD:49:5E:3E:21:3D:61:F1:28:C5:40:BE:46:76:FB:8D:AD
Certificate issuer:       /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial:       1571D8C960E16BEF5BA177B7D549F376DA0AF94D
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3435303a3a2f34382d3438203d3e20313939323033.roa
Signing time:             Thu 15 May 2025 02:22:40 +0000
ROA not before:           Thu 15 May 2025 02:17:40 +0000
ROA not after:            Thu 14 May 2026 02:22:40 +0000
asID:                     199203
IP address blocks:        2602:faa8:450::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 13:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:71:d8:c9:60:e1:6b:ef:5b:a1:77:b7:d5:49:f3:76:da:0a:f9:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
        Validity
            Not Before: May 15 02:17:40 2025 GMT
            Not After : May 14 02:22:40 2026 GMT
        Subject: CN=777B27FD495E3E213D61F128C540BE4676FB8DAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9b:7f:e5:98:bb:9a:4e:02:00:30:f5:75:9c:
                    f4:87:aa:1b:53:28:c2:86:58:60:c6:89:76:ff:17:
                    f0:ad:c9:c2:1d:89:f9:79:8c:c9:2f:28:90:c3:ee:
                    98:15:0b:ca:ec:c8:ad:d6:6b:16:72:92:14:ae:79:
                    e2:42:07:79:9c:1a:07:82:58:1d:c1:82:26:f8:7a:
                    27:9a:f5:72:b0:92:4b:88:c6:84:be:30:5c:b5:97:
                    48:df:70:44:b4:a7:ae:fc:4f:e8:f6:92:0b:30:c3:
                    c5:21:56:a8:8a:84:6e:f4:af:4d:ab:57:b5:cf:a4:
                    0b:d2:69:e5:35:33:8c:22:1e:aa:f7:99:cf:e4:d4:
                    e5:c6:10:af:a3:25:8b:24:33:4f:a5:45:77:c6:eb:
                    83:61:f7:8b:1f:98:35:6c:8f:64:ed:c0:2c:1c:de:
                    b4:f5:97:a6:df:1f:f4:84:28:64:48:80:28:a1:69:
                    7d:c2:85:40:26:29:b2:bb:ff:68:7e:b1:30:5b:87:
                    6d:6e:9a:a3:dd:25:1b:b4:f6:4e:ab:cb:86:ca:2c:
                    e3:dd:68:00:f0:79:25:21:71:01:11:8e:b1:be:07:
                    51:02:d4:f5:22:b3:c7:3a:7b:d7:eb:7a:9b:d1:5c:
                    81:76:c5:8a:e8:e3:64:09:71:ec:4d:cd:de:2c:34:
                    12:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7B:27:FD:49:5E:3E:21:3D:61:F1:28:C5:40:BE:46:76:FB:8D:AD
            X509v3 Authority Key Identifier:
                keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3435303a3a2f34382d3438203d3e20313939323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:450::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:88:b6:52:21:d3:e8:6c:95:ba:a7:93:ce:06:db:99:c5:32:
         fa:dd:10:98:59:be:23:ab:ac:58:06:84:4e:70:c6:00:8d:9f:
         9d:4a:b6:35:6a:4b:b2:a5:bf:78:1c:1b:88:a1:6a:41:a9:7e:
         94:57:a9:40:6f:b4:65:ac:3e:6e:c7:8a:8c:89:a0:a0:6f:79:
         23:57:2b:8a:a6:8b:3e:b5:d7:dc:ef:4b:d1:4a:ed:cb:8c:38:
         ac:a2:33:2b:52:01:a5:20:97:68:12:6b:c8:5a:0c:5c:dc:ef:
         e1:12:ce:e0:a0:9e:ed:f7:48:bf:2b:2e:a6:85:a8:62:ce:01:
         a7:3e:a3:9a:d4:d3:a0:b7:6b:10:02:24:37:61:93:23:35:9d:
         89:33:0b:df:82:23:b7:73:1e:01:77:5c:d8:d2:f3:04:07:ad:
         ac:4f:1a:d5:7a:d8:40:fb:83:f2:6c:21:2f:d1:66:7f:ae:e2:
         40:12:d5:16:d4:be:3b:da:9b:e8:9f:d0:36:49:49:d9:48:71:
         f1:42:11:a9:d8:2e:eb:52:d7:ee:15:4d:47:da:6a:15:e9:53:
         fb:e9:11:1b:f9:37:8e:cb:f6:d0:53:6a:14:6e:9d:92:42:2d:
         2d:d4:de:30:04:c0:6f:8a:b2:32:1a:db:0b:27:dc:2f:5f:f6:
         57:69:0f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:24:57 2025 by rpki-client