Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/323630323a3239313a3a2f33362d313238203d3e20333933353737.roa
File:                     323630323a3239313a3a2f33362d313238203d3e20333933353737.roa (raw, json)
Hash identifier:          FYvAClqmZqc5eGXP2I1xmgl23atijXL7WxL9TQ72wAw=
Subject key identifier:   A5:FC:A0:63:D1:C2:67:77:09:3B:FE:0B:27:38:F3:68:4A:D2:98:D1
Certificate issuer:       /CN=0735111c25496db3ae70272cbbfc4973e5fb6ae2bc8628e470
Certificate serial:       0135FFACF8B817FB9631625AD276A86C98E8FC38
Authority key identifier: 00:1F:62:BF:34:17:95:C8:2E:A8:06:7E:1C:2E:28:C9:07:FB:E2:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25496db3ae70272cbbfc4973e5fb6ae2bc8628e470.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/323630323a3239313a3a2f33362d313238203d3e20333933353737.roa
Signing time:             Wed 11 Jun 2025 22:34:26 +0000
ROA not before:           Wed 11 Jun 2025 22:29:26 +0000
ROA not after:            Wed 10 Jun 2026 22:34:26 +0000
asID:                     393577
IP address blocks:        2602:291::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/001F62BF341795C82EA8067E1C2E28C907FBE2EB.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/001F62BF341795C82EA8067E1C2E28C907FBE2EB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25496db3ae70272cbbfc4973e5fb6ae2bc8628e470.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 17:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:35:ff:ac:f8:b8:17:fb:96:31:62:5a:d2:76:a8:6c:98:e8:fc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735111c25496db3ae70272cbbfc4973e5fb6ae2bc8628e470
        Validity
            Not Before: Jun 11 22:29:26 2025 GMT
            Not After : Jun 10 22:34:26 2026 GMT
        Subject: CN=A5FCA063D1C26777093BFE0B2738F3684AD298D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:61:3d:37:dd:26:4d:cd:ee:5e:72:e2:df:
                    11:a2:f6:33:05:24:fc:ce:d9:30:de:13:1f:88:02:
                    65:d6:ba:07:20:87:2d:6d:fc:7c:41:f2:28:98:5f:
                    d2:b8:83:d2:ae:62:73:93:24:06:a8:fd:81:fd:3a:
                    57:92:89:2a:da:ab:77:21:aa:95:39:82:07:b1:80:
                    dd:75:72:20:f7:37:23:43:00:ad:71:03:04:7a:a6:
                    a0:37:47:ac:2f:cb:22:4e:e8:73:e7:55:b5:7e:24:
                    65:2b:91:0b:84:9f:66:ce:a9:22:b9:9e:4c:de:e4:
                    d2:a7:ef:40:fd:6b:03:ea:d0:eb:d3:6c:f4:e2:2c:
                    d5:1f:89:29:91:c5:29:a6:9c:26:28:fa:cf:c2:eb:
                    d4:29:5c:ca:1b:db:5d:de:6c:f2:1e:33:66:e3:99:
                    98:de:51:71:6d:59:de:02:e2:00:e7:24:58:d3:26:
                    0c:ce:26:99:d6:9b:ef:c8:53:3e:34:bd:0f:e4:f1:
                    e4:f4:fd:27:42:0b:37:64:05:b4:a9:18:93:04:ec:
                    55:d3:84:77:84:11:e8:53:c6:60:9e:18:9a:e1:37:
                    21:78:0f:87:f0:12:3b:c6:b3:35:ce:72:2c:b2:cb:
                    f5:bc:44:47:23:0a:38:08:2b:c8:bd:7f:18:e8:05:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FC:A0:63:D1:C2:67:77:09:3B:FE:0B:27:38:F3:68:4A:D2:98:D1
            X509v3 Authority Key Identifier:
                keyid:00:1F:62:BF:34:17:95:C8:2E:A8:06:7E:1C:2E:28:C9:07:FB:E2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/001F62BF341795C82EA8067E1C2E28C907FBE2EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25496db3ae70272cbbfc4973e5fb6ae2bc8628e470.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/323630323a3239313a3a2f33362d313238203d3e20333933353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:291::/36

    Signature Algorithm: sha256WithRSAEncryption
         7c:03:bb:ad:72:df:86:0f:1e:d5:ee:0c:4f:2e:d2:33:84:7f:
         95:0b:01:d8:fd:9b:f1:08:2d:ff:c0:21:1b:ec:2f:92:a0:af:
         78:46:5b:4f:23:ad:1d:44:f2:25:0d:e9:2d:cb:e5:7c:fd:db:
         af:51:84:d6:5d:cb:ba:ff:0b:d5:95:61:66:2e:e0:57:17:86:
         37:6f:ea:bc:0e:db:27:c6:58:79:3b:e2:5f:d1:21:3b:34:78:
         e6:64:dc:cd:8d:89:bf:3e:76:ad:c0:8a:33:16:97:a3:52:d3:
         8c:1c:69:65:a1:59:c9:3c:bd:37:f6:7a:b5:f9:f0:6c:59:21:
         1e:53:b4:b4:64:09:3e:dc:3e:03:23:cf:86:7e:df:68:3a:bd:
         bf:9a:3a:97:f8:bf:d3:d1:bb:22:36:a1:52:84:d6:c9:32:f6:
         c0:2c:8e:37:a9:70:59:39:c8:a4:f4:9b:87:aa:e4:8c:0b:36:
         a8:05:8f:1f:f5:ee:71:69:d2:06:ee:58:d5:5c:91:71:7d:4a:
         ee:b9:95:b0:9e:d3:7d:7b:10:e5:88:35:d0:e8:87:70:69:8d:
         8d:92:7f:3b:1a:72:de:d3:cf:83:1a:00:3f:b8:ed:13:d3:26:
         55:7b:0c:8e:ef:61:24:05:26:9f:f0:e9:b6:7d:2e:39:a0:18:
         b6:81:14:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:22:49 2025 by rpki-client