Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3230303a3a2f34302d3430203d3e20343031363832.roa
File:                     323630343a6361303a3230303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier:          HLH08KLqKk2ONlv8rlOLspTEL0Uutrmud81KP4EksAg=
Subject key identifier:   69:69:18:15:79:5E:6B:2C:29:25:60:DE:AB:54:E2:83:72:5F:FD:A2
Certificate issuer:       /CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
Certificate serial:       32A9372E46A5B2EBF8A77E47ABF803EBC6FF9C6F
Authority key identifier: 7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3230303a3a2f34302d3430203d3e20343031363832.roa
Signing time:             Fri 30 May 2025 20:26:19 +0000
ROA not before:           Fri 30 May 2025 20:21:19 +0000
ROA not after:            Fri 29 May 2026 20:26:19 +0000
asID:                     401682
IP address blocks:        2604:ca0:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a9:37:2e:46:a5:b2:eb:f8:a7:7e:47:ab:f8:03:eb:c6:ff:9c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
        Validity
            Not Before: May 30 20:21:19 2025 GMT
            Not After : May 29 20:26:19 2026 GMT
        Subject: CN=69691815795E6B2C292560DEAB54E283725FFDA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8c:db:1a:42:a1:d3:77:7e:e6:af:71:59:e2:
                    e5:80:85:37:63:07:52:c9:d0:4e:f0:f3:3e:80:ab:
                    fd:cc:df:14:22:23:93:5a:9b:22:67:6f:43:b7:a2:
                    88:f5:9c:c1:57:24:c6:4e:11:3b:fb:33:86:6a:3f:
                    9f:b0:cc:d0:f3:96:46:96:6a:cc:95:b2:ab:c7:11:
                    10:7c:a8:0a:c8:ea:c6:bf:b7:58:d0:16:00:70:92:
                    a6:dc:e0:b4:89:14:c3:4a:49:57:fa:36:d2:c2:bd:
                    56:22:00:07:6a:e0:ab:fe:dc:33:12:27:0f:24:e2:
                    13:9c:86:f6:47:4b:0f:82:b5:f9:dc:e5:4d:2c:79:
                    9c:f9:a9:f4:40:57:77:35:c9:ed:d8:61:3f:b3:52:
                    63:e2:ba:72:22:de:a1:43:6b:56:fe:d1:61:f5:a4:
                    52:32:d7:ab:97:78:a0:5a:71:76:bf:f7:8b:92:ad:
                    24:5d:64:f9:48:5f:8f:29:51:34:5b:27:cd:d6:6e:
                    08:b9:30:95:b4:b9:9a:f1:27:c3:44:c6:97:fc:0f:
                    99:9a:f9:69:4d:96:c3:31:f7:f7:ac:ea:0c:19:ea:
                    09:55:07:7a:5b:58:6f:fe:24:9a:95:56:a5:1c:58:
                    5b:73:7d:a3:73:91:1d:ed:79:f5:c3:04:63:29:21:
                    e8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:69:18:15:79:5E:6B:2C:29:25:60:DE:AB:54:E2:83:72:5F:FD:A2
            X509v3 Authority Key Identifier:
                keyid:7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3230303a3a2f34302d3430203d3e20343031363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ca0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         a1:e8:4c:e6:15:0d:fe:b5:5b:81:49:50:36:04:f3:87:af:13:
         47:9e:b5:5d:17:79:10:99:c4:05:66:81:a0:53:f2:79:8e:54:
         8d:85:99:0d:0c:5c:8d:d9:01:70:3a:68:ff:31:9f:55:08:d3:
         84:22:99:f3:17:53:01:be:d5:e7:c5:84:1f:4b:88:a1:c2:b1:
         bc:41:ec:2d:8e:d3:e7:59:0f:37:a5:50:e8:ec:c4:a1:b2:c7:
         ca:ed:d9:d3:f9:71:ac:e1:f8:a1:7c:db:2a:62:20:07:f1:19:
         c4:b0:6f:31:22:2a:7d:44:5c:8c:bd:5d:9d:05:79:6d:3d:8a:
         64:cd:de:9d:4f:4d:ae:cb:a2:22:68:d9:b6:bc:be:74:89:1d:
         7f:83:6b:b9:8c:81:2b:fb:b6:a3:b9:32:89:c1:db:2d:22:f6:
         81:2b:55:ef:fe:79:36:a1:46:00:1b:de:a3:25:61:ff:6b:88:
         e8:09:74:0d:b6:9d:1e:02:ae:7c:a2:16:da:df:36:cb:e7:6b:
         40:83:c7:1a:10:b6:a2:52:2d:39:a8:30:06:76:92:4b:f4:a9:
         56:ce:ee:04:ba:03:6e:09:f5:e1:55:88:1a:2c:17:9a:ec:10:
         62:01:06:5e:9d:0e:86:2e:30:e4:38:0a:16:ba:cd:17:10:e7:
         b5:bf:b3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:45:30 2025 by rpki-client