Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3930303a3a2f34302d3430203d3e20343031363832.roa
File:                     323630343a6361303a3930303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier:          21gwnGYecflwK24oxWos3a+20tsv50hjbHt8jct2qfU=
Subject key identifier:   92:81:27:07:3F:5A:B8:19:9D:36:3C:CF:01:A0:81:D1:2D:98:C3:8E
Certificate issuer:       /CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
Certificate serial:       7FFC001429E4994972BA5C86EAD2FC9E9F64276D
Authority key identifier: 7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3930303a3a2f34302d3430203d3e20343031363832.roa
Signing time:             Fri 30 May 2025 20:26:38 +0000
ROA not before:           Fri 30 May 2025 20:21:38 +0000
ROA not after:            Fri 29 May 2026 20:26:38 +0000
asID:                     401682
IP address blocks:        2604:ca0:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:fc:00:14:29:e4:99:49:72:ba:5c:86:ea:d2:fc:9e:9f:64:27:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
        Validity
            Not Before: May 30 20:21:38 2025 GMT
            Not After : May 29 20:26:38 2026 GMT
        Subject: CN=928127073F5AB8199D363CCF01A081D12D98C38E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c5:96:2c:ff:18:31:78:a0:b3:24:dc:58:c3:
                    6e:40:70:64:46:39:f8:63:16:d1:1c:3e:73:ba:60:
                    2d:93:ee:f8:ef:7f:36:0a:e9:3b:00:77:1e:49:d9:
                    10:a7:50:55:34:51:17:a4:99:41:2a:0c:17:e7:87:
                    5a:3d:d1:c8:86:77:64:76:98:c3:87:52:46:45:0d:
                    48:38:8f:a6:a7:09:3f:90:f3:f9:b9:28:b3:5e:84:
                    bd:ed:39:d6:6f:ea:68:b0:54:65:3f:e6:f8:f6:35:
                    76:e8:7b:5b:ac:17:80:5c:0a:b3:58:85:c9:b7:49:
                    ff:69:e7:bc:b7:1f:c8:5e:4b:e7:6a:bc:69:b1:16:
                    df:bd:4d:64:3c:fe:56:3c:fc:ce:5e:eb:12:9d:03:
                    66:1f:78:88:72:32:f2:9e:33:39:34:cf:e6:69:4d:
                    52:b9:78:60:f3:44:cb:6f:5b:60:5b:c7:fd:21:72:
                    71:d9:29:47:7f:3c:b0:9c:52:45:fb:0b:fd:1a:14:
                    a7:a7:e9:c8:98:49:25:a2:15:b8:24:01:02:4f:e1:
                    44:04:7c:24:f3:38:f7:71:35:8a:b5:08:ce:e7:16:
                    c6:32:be:aa:90:13:a3:de:b0:38:34:21:05:f0:c2:
                    6a:a4:e8:45:bf:f6:2c:25:67:8b:05:ad:33:57:9a:
                    6b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:81:27:07:3F:5A:B8:19:9D:36:3C:CF:01:A0:81:D1:2D:98:C3:8E
            X509v3 Authority Key Identifier:
                keyid:7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3930303a3a2f34302d3430203d3e20343031363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ca0:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:08:7f:8a:31:4c:e9:e2:14:81:98:74:c9:74:71:ef:09:b9:
         3b:f2:75:01:26:81:eb:41:f9:02:94:ba:90:49:06:b7:05:ee:
         e7:eb:b3:0f:fb:34:90:47:e7:89:05:2d:52:f2:16:f6:7c:f2:
         8d:ee:b8:ef:e7:5c:d2:be:32:c3:be:d8:12:ee:12:16:03:2e:
         7e:15:6d:58:87:8f:8c:0d:fa:14:31:be:40:51:36:56:c6:04:
         08:af:f1:9c:80:90:64:cd:66:84:c6:69:61:ca:eb:fb:13:07:
         b8:b9:8c:84:3a:54:36:04:c7:7a:cf:e4:6b:88:f3:3d:4f:e9:
         02:82:7f:81:33:e4:06:6c:e4:7d:86:22:15:97:d0:a9:fd:53:
         f7:ea:63:2b:2a:42:b0:f6:27:e0:f0:7e:51:c0:06:15:51:8c:
         b2:b0:2c:a8:fa:d4:01:04:e2:17:b1:df:eb:64:06:7f:62:89:
         76:15:3f:42:37:81:56:cb:5d:52:fd:f0:eb:54:f0:c6:1b:9d:
         2f:65:8c:a5:1b:8c:bb:68:7f:41:ea:d9:aa:1e:49:1a:bb:c1:
         03:5f:e3:2f:61:4a:86:6a:8e:d6:15:32:ee:34:94:2e:c6:4c:
         3c:09:08:d3:4d:43:c5:2c:fd:b7:ce:ad:56:c7:df:fa:6c:c2:
         a1:89:2d:76
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUf/wAFCnkmUlyulyG6tL8np9kJ20wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTg3NDFhYzRmMTIyOTFlOGRkMjkxMTRjZjAwYmFhODll
NGVlNzdkNjQ0YzI5YzhmYWMwHhcNMjUwNTMwMjAyMTM4WhcNMjYwNTI5MjAyNjM4
WjAzMTEwLwYDVQQDEyg5MjgxMjcwNzNGNUFCODE5OUQzNjNDQ0YwMUEwODFEMTJE
OThDMzhFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosWWLP8YMXig
syTcWMNuQHBkRjn4YxbRHD5zumAtk+747382Cuk7AHceSdkQp1BVNFEXpJlBKgwX
54daPdHIhndkdpjDh1JGRQ1IOI+mpwk/kPP5uSizXoS97TnWb+posFRlP+b49jV2
6HtbrBeAXAqzWIXJt0n/aee8tx/IXkvnarxpsRbfvU1kPP5WPPzOXusSnQNmH3iI
cjLynjM5NM/maU1SuXhg80TLb1tgW8f9IXJx2SlHfzywnFJF+wv9GhSnp+nImEkl
ohW4JAECT+FEBHwk8zj3cTWKtQjO5xbGMr6qkBOj3rA4NCEF8MJqpOhFv/YsJWeL
Ba0zV5prQQIDAQABo4ICujCCArYwHQYDVR0OBBYEFJKBJwc/WrgZnTY8zwGggdEt
mMOOMB8GA1UdIwQYMBaAFHojVPCChJhJzQAHtFDkwbH8W5DaMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3LzEv
N0EyMzU0RjA4Mjg0OTg0OUNEMDAwN0I0NTBFNEMxQjFGQzVCOTBEQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzRlOTYyNzE3LTExMzgtNGQyYi05NDQyLTAzMzJlOTA2MDEzMi9lODc0
MWFjNGYxMjI5MWU4ZGQyOTExNGNmMDBiYWE4OWU0ZWU3N2Q2NDRjMjljOGZhYy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3
NGI0MmNhMTg2Ny8xLzMyMzYzMDM0M2E2MzYxMzAzYTM5MzAzMDNhM2EyZjM0MzAy
ZDM0MzAyMDNkM2UyMDM0MzAzMTM2MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACYEDKAJMA0GCSqG
SIb3DQEBCwUAA4IBAQBWCH+KMUzp4hSBmHTJdHHvCbk78nUBJoHrQfkClLqQSQa3
Be7n67MP+zSQR+eJBS1S8hb2fPKN7rjv51zSvjLDvtgS7hIWAy5+FW1Yh4+MDfoU
Mb5AUTZWxgQIr/GcgJBkzWaExmlhyuv7Ewe4uYyEOlQ2BMd6z+RriPM9T+kCgn+B
M+QGbOR9hiIVl9Cp/VP36mMrKkKw9ifg8H5RwAYVUYyysCyo+tQBBOIXsd/rZAZ/
Yol2FT9CN4FWy11S/fDrVPDGG50vZYylG4y7aH9B6tmqHkkau8EDX+MvYUqGao7W
FTLuNJQuxkw8CQjTTUPFLP23zq1Wx9/6bMKhiS12
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:41:03 2025 by rpki-client