Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3430303a3a2f34302d3430203d3e20343031363832.roa
File:                     323630343a6361303a3430303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier:          J5akyc+eaIkhVgry/FU32LLJcrfRQ3OeCKcKztOr7h4=
Subject key identifier:   DB:28:71:B7:29:1D:8D:07:3D:DE:F4:2F:41:D5:3A:19:AC:F9:45:44
Certificate issuer:       /CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
Certificate serial:       203BE330E75759CFD4910B89B682E0EC61C01D6A
Authority key identifier: 7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3430303a3a2f34302d3430203d3e20343031363832.roa
Signing time:             Fri 30 May 2025 20:26:24 +0000
ROA not before:           Fri 30 May 2025 20:21:24 +0000
ROA not after:            Fri 29 May 2026 20:26:24 +0000
asID:                     401682
IP address blocks:        2604:ca0:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:27:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3b:e3:30:e7:57:59:cf:d4:91:0b:89:b6:82:e0:ec:61:c0:1d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
        Validity
            Not Before: May 30 20:21:24 2025 GMT
            Not After : May 29 20:26:24 2026 GMT
        Subject: CN=DB2871B7291D8D073DDEF42F41D53A19ACF94544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bd:93:6f:08:de:25:4e:8e:0a:f6:78:73:0d:
                    a7:d3:7c:04:98:d3:70:a9:0d:c5:27:e3:18:74:38:
                    fd:20:ef:d3:51:70:e8:f3:20:65:77:51:63:02:98:
                    b0:2e:d7:25:c7:4c:07:2f:a5:41:03:30:49:04:21:
                    59:6a:f3:a0:97:97:eb:3e:78:b6:29:ff:63:2a:14:
                    5f:aa:09:9b:59:50:21:60:1c:e5:88:1f:3d:3b:5f:
                    a5:f1:9b:4f:76:20:8a:bb:38:dc:30:97:34:73:ba:
                    ce:97:0f:72:c7:6f:88:80:fb:1e:83:d9:ab:a4:3e:
                    f1:60:18:14:4b:2a:17:f2:7c:38:50:4a:04:2c:50:
                    61:53:2b:2a:e5:89:82:3f:5f:36:04:3a:eb:04:f6:
                    ed:63:7f:25:c3:39:cf:63:c5:69:4f:8e:d9:ba:87:
                    2b:b2:56:bd:a3:fd:f9:b6:03:22:60:dd:fc:c5:89:
                    e4:ba:1f:9e:72:1f:e7:b5:7b:94:54:99:04:45:4d:
                    ce:7e:b2:bb:53:c1:d5:96:6b:a7:08:64:f6:51:32:
                    f9:4d:bb:c0:88:f3:80:5b:11:35:1d:1b:24:83:4e:
                    e7:33:9d:ab:b3:67:07:87:56:53:04:b0:15:8a:b0:
                    1c:86:67:af:e1:5a:38:3a:93:99:95:83:fb:07:59:
                    3a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:28:71:B7:29:1D:8D:07:3D:DE:F4:2F:41:D5:3A:19:AC:F9:45:44
            X509v3 Authority Key Identifier:
                keyid:7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3430303a3a2f34302d3430203d3e20343031363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ca0:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:be:f2:a4:f6:58:56:df:88:9f:8b:ad:25:ff:2f:3c:42:ca:
         4e:ec:9c:73:5a:6b:6c:8f:8d:61:76:cb:98:3a:f5:65:15:0c:
         d3:e8:cc:e2:db:73:4c:d9:ac:14:38:9c:58:5e:be:ee:ad:41:
         2e:6f:0b:20:78:f4:80:fa:65:0a:a9:e4:ab:fa:8a:a0:b5:dd:
         b0:c4:b3:3a:b4:65:1d:af:73:32:12:80:de:5d:89:16:47:cc:
         b3:70:b6:5c:17:41:06:46:ae:d7:63:b7:16:91:47:f9:a0:1c:
         65:b2:6e:8b:c4:e8:82:28:d5:4d:15:a7:2e:a0:97:35:7c:90:
         bb:58:2c:90:84:2a:0f:5c:a3:86:43:2e:7b:51:73:7c:a7:c7:
         a2:6f:47:9f:f8:d5:1d:88:09:45:62:14:19:92:3b:10:3f:6b:
         5d:6b:d0:d9:9c:cc:b1:5e:d5:04:71:d7:23:02:ad:c0:0e:63:
         b3:ad:db:79:4e:32:5b:ac:f4:f1:ba:5f:8a:25:cb:a8:d2:41:
         c8:10:b3:3a:76:09:ac:b6:d4:f9:d0:5e:3a:c3:5d:70:8f:2e:
         74:46:69:3e:1c:d6:69:d6:f0:ec:a3:43:ad:bb:0c:9e:aa:06:
         23:d3:40:a1:81:c9:99:26:b1:6a:9e:81:68:f2:2a:13:59:7f:
         42:21:e8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:42:39 2025 by rpki-client