Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a36393a3a2f34382d3438203d3e203136393039.roa
File:                     323630323a663738613a36393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          scUvRjw6G3u5h1iqAu0ZVtkvplwUYL8UidD8vjaUozo=
Subject key identifier:   C0:A2:D4:1C:4E:33:A4:80:24:D4:2F:46:5D:F7:C0:4C:8B:16:E2:D2
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       0C9D5DE738C69B4E4284CA057BAF3BE2ECA2EB9D
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a36393a3a2f34382d3438203d3e203136393039.roa
Signing time:             Tue 13 May 2025 17:23:25 +0000
ROA not before:           Tue 13 May 2025 17:18:25 +0000
ROA not after:            Tue 12 May 2026 17:23:25 +0000
asID:                     16909
IP address blocks:        2602:f78a:69::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 04:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9d:5d:e7:38:c6:9b:4e:42:84:ca:05:7b:af:3b:e2:ec:a2:eb:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: May 13 17:18:25 2025 GMT
            Not After : May 12 17:23:25 2026 GMT
        Subject: CN=C0A2D41C4E33A48024D42F465DF7C04C8B16E2D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:ce:ca:75:83:c4:8b:9f:d2:55:8a:58:18:
                    ea:65:f1:a6:da:74:49:3f:59:78:13:49:2b:17:9c:
                    c4:4d:25:11:6d:c8:d8:96:31:c1:cb:c2:31:43:68:
                    55:5f:ab:5d:cc:28:be:70:90:09:80:7c:d4:37:7d:
                    0e:94:81:4c:82:92:68:45:50:b9:17:8e:42:12:fe:
                    dd:3e:a2:0b:d2:b1:56:c7:e5:f2:d8:10:08:eb:99:
                    9b:59:7e:c8:e6:49:61:81:29:ae:91:9c:2c:67:80:
                    9b:f2:04:84:7c:56:83:39:e5:a4:82:78:9f:2c:a6:
                    29:73:58:b2:1c:5f:cb:91:19:43:46:ee:51:c8:a3:
                    23:63:12:d3:6d:62:b9:ab:ae:35:b2:f1:96:a8:96:
                    a8:06:6c:23:99:66:96:ee:9f:a0:7d:a1:f9:1a:72:
                    79:7a:c0:b0:62:f0:61:e7:3d:f3:3b:eb:06:bb:70:
                    0f:a8:c9:c3:a5:c6:71:fc:05:a8:a5:fa:17:cd:61:
                    34:0c:af:30:3a:dc:d7:cb:96:d6:00:fd:c1:78:1d:
                    0c:60:9f:93:23:d8:48:2c:9f:25:62:96:0d:2d:5e:
                    f5:0e:f3:2e:27:6b:44:75:5e:d0:2e:08:cf:8e:bb:
                    9d:9d:d0:c7:aa:ee:19:cb:80:bb:d0:e7:06:03:a0:
                    de:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A2:D4:1C:4E:33:A4:80:24:D4:2F:46:5D:F7:C0:4C:8B:16:E2:D2
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a36393a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:69::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:c2:ed:d8:e8:44:ad:68:52:b0:5d:1c:0a:fa:5b:d2:53:bf:
         46:16:e4:bb:f2:2a:9d:97:ff:65:89:77:62:42:64:61:7a:ab:
         a4:69:ae:ef:b3:73:53:87:e1:ed:ec:96:4f:e8:05:98:b4:59:
         3c:c4:eb:59:b5:00:35:8a:d3:a4:01:9e:e9:98:b3:c6:23:b2:
         e2:d0:36:59:a9:fd:61:43:e0:ab:42:f7:f0:55:4c:b1:fe:49:
         42:c9:42:1f:4d:84:05:a9:c0:6d:1d:97:3c:93:22:8b:1d:39:
         50:c9:f4:4d:1e:37:80:f9:61:df:3e:fa:27:52:d4:36:e2:26:
         04:e1:db:2d:fa:48:80:29:4a:c0:8b:f7:ad:8d:c6:66:51:30:
         88:b5:28:ea:5b:43:bf:77:d1:8a:31:01:57:43:c1:27:d6:b2:
         09:c0:2b:dc:b6:9a:81:30:1b:1f:94:2b:97:b3:ee:8f:b7:17:
         88:75:fb:0f:d1:32:31:35:f7:96:9b:22:a3:4a:7f:7e:ce:0a:
         11:c3:4b:90:0e:dd:3c:9f:e3:20:fd:fa:89:cf:85:8c:fe:d5:
         80:44:8c:f3:84:18:d7:71:01:e3:87:fa:c0:89:83:4d:9a:6c:
         17:63:e5:0a:73:c1:d2:27:1b:dc:c9:0c:3e:14:0d:1b:49:9a:
         ae:38:4b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:07:34 2025 by rpki-client