Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a323a3a2f34382d3438203d3e203136393039.roa
File:                     323630323a663738613a323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          nqGImzaVXOpkBSvooAQqqq+0Vvgk+qlEdKEMMTdIGQU=
Subject key identifier:   9B:1D:DA:B7:A8:1B:4A:28:A3:67:52:82:11:0B:6B:8A:08:55:FF:65
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       289972AD488ACF3832CECBD1D798CF6A0A3F6891
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a323a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 23 Feb 2025 08:33:47 +0000
ROA not before:           Sun 23 Feb 2025 08:28:47 +0000
ROA not after:            Sun 22 Feb 2026 08:33:47 +0000
asID:                     16909
IP address blocks:        2602:f78a:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 21:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:99:72:ad:48:8a:cf:38:32:ce:cb:d1:d7:98:cf:6a:0a:3f:68:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Feb 23 08:28:47 2025 GMT
            Not After : Feb 22 08:33:47 2026 GMT
        Subject: CN=9B1DDAB7A81B4A28A3675282110B6B8A0855FF65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d6:26:43:8f:74:e5:6d:9a:11:74:10:72:92:
                    08:f3:07:7e:46:bf:39:b0:2f:58:de:3c:84:54:33:
                    59:97:c2:74:62:b6:cc:b3:63:68:78:ed:5c:16:9c:
                    7e:7a:70:e8:35:dd:66:f3:e4:a7:ec:0a:e9:ea:8b:
                    ac:9a:24:23:3c:55:ac:77:d7:b9:ce:05:a9:09:1c:
                    6e:d4:61:83:b5:5a:d7:65:f9:f4:81:0b:f1:86:10:
                    de:62:8c:f0:e0:1f:b9:00:8a:37:d6:f3:56:b0:9c:
                    1c:70:64:c1:11:97:13:55:25:69:0f:ca:49:6f:fb:
                    05:8f:32:dd:03:e6:b0:39:d1:91:e9:3f:d8:c7:6f:
                    47:7e:d0:e2:93:04:16:5b:e3:f7:7a:a0:7e:26:6e:
                    28:ff:8f:2e:de:06:2f:15:14:b4:ce:6f:af:42:53:
                    4c:9f:58:b2:86:43:5a:bb:2f:c3:20:73:09:a7:f8:
                    99:fe:7c:69:51:88:b1:46:51:71:b2:d3:4c:5c:5f:
                    02:9d:83:a6:0d:ce:ee:74:d5:1e:1d:98:fe:fa:54:
                    bc:64:b6:c2:aa:51:b8:f1:44:03:20:5d:65:e5:4d:
                    9f:fe:70:81:70:77:47:33:1b:f3:fd:6d:b8:d9:0a:
                    63:3a:d7:41:cc:d5:bb:15:8d:a2:21:87:66:8f:8f:
                    6e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1D:DA:B7:A8:1B:4A:28:A3:67:52:82:11:0B:6B:8A:08:55:FF:65
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a323a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:ec:30:ee:1d:05:a3:65:d0:33:b6:dc:6b:e7:b7:f0:1f:f2:
         31:b3:a0:65:3c:7e:86:6e:e6:70:16:36:55:2b:02:2a:ab:81:
         9a:87:e5:90:1a:28:45:5e:49:8d:7a:50:8d:77:63:19:fb:30:
         93:91:e7:4f:e2:99:0d:4b:02:f2:ca:89:9d:5f:63:50:1d:59:
         ce:df:6e:47:40:91:aa:1d:6f:a9:3d:2d:f3:37:be:ab:d8:59:
         f9:b3:a1:10:63:ee:fc:0f:3e:85:ab:42:38:e0:53:a2:da:5f:
         f6:0c:c6:e4:ad:1c:63:6f:4e:28:57:1a:0f:1f:5b:5d:b0:eb:
         45:fa:36:49:4f:2d:5d:fe:93:93:f2:86:06:1b:da:9a:f9:c4:
         01:5d:64:ab:37:a4:a1:02:09:e2:ab:bc:d4:a4:09:9b:63:df:
         2b:b3:b8:54:ed:a7:93:96:42:10:fb:ea:0a:80:d2:a5:33:54:
         a8:39:9e:29:5d:54:c6:cd:6c:09:ca:13:6a:1e:df:3b:0c:bc:
         7d:84:d6:91:17:ae:01:60:fc:5c:e4:b3:c9:a3:e7:8d:61:84:
         87:c8:ae:98:aa:8a:ea:de:ae:2f:fc:39:8a:04:0e:01:00:e7:
         06:23:f3:0e:5c:a5:79:32:f8:cf:31:ed:d6:90:77:0f:09:8d:
         1e:74:80:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:38:25 2025 by rpki-client