Route Origin Authorization

$ rpki-client -vvf rpki.pudu.be/repo/pudu/4/323630323a663537643a3a2f34302d3438203d3e203437363839.roa
File:                     323630323a663537643a3a2f34302d3438203d3e203437363839.roa (raw, json)
Hash identifier:          S1VRGx5nK8EyzROsUMFn5PVPNE70/8n9CXnNsxAFcmY=
Subject key identifier:   84:FE:24:20:63:A9:27:E5:6A:B3:BA:DB:AE:80:4E:BE:58:47:B2:E8
Certificate issuer:       /CN=4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8
Certificate serial:       476685BD3F714BA130B68D8961DBF67D5ED50E07
Authority key identifier: BE:DC:BA:A0:D6:AC:CB:E9:7C:22:F6:0B:E3:7F:81:2B:6D:69:04:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/4/323630323a663537643a3a2f34302d3438203d3e203437363839.roa
Signing time:             Fri 29 Aug 2025 16:41:27 +0000
ROA not before:           Fri 29 Aug 2025 16:36:27 +0000
ROA not after:            Fri 28 Aug 2026 16:41:27 +0000
asID:                     47689
IP address blocks:        2602:f57d::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.crl
                          rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 15:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:66:85:bd:3f:71:4b:a1:30:b6:8d:89:61:db:f6:7d:5e:d5:0e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8
        Validity
            Not Before: Aug 29 16:36:27 2025 GMT
            Not After : Aug 28 16:41:27 2026 GMT
        Subject: CN=84FE242063A927E56AB3BADBAE804EBE5847B2E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ec:5d:9b:f3:2a:4c:ef:a5:1b:b6:03:a8:75:
                    34:8c:5e:73:e1:3f:c7:78:31:60:9b:97:5e:35:e1:
                    5b:b1:e3:f8:32:d0:22:bf:c2:59:f8:f7:d0:a8:e9:
                    86:9b:5e:e5:97:99:e8:2a:52:a8:1e:14:bf:8c:ad:
                    c3:de:02:ca:54:2a:4a:9d:aa:3e:66:25:f8:a4:75:
                    e6:ed:47:a3:b2:8f:d8:1e:93:f7:25:b6:5a:e6:fc:
                    b5:76:82:7b:94:1d:74:82:2c:3d:71:50:6b:a7:25:
                    93:0c:11:d8:2f:99:86:d9:a5:2a:26:96:5c:75:d3:
                    15:64:40:e9:59:16:8f:65:03:8f:49:a8:fb:65:20:
                    0c:cc:28:7e:01:05:35:01:d7:50:e7:8e:8c:fb:64:
                    88:be:fb:8e:3e:19:74:35:ba:68:12:8e:e0:b0:81:
                    ea:1a:26:a5:70:3b:35:9b:69:d3:32:f9:72:bc:c8:
                    fe:79:ba:8e:61:75:fd:07:ee:59:58:a3:79:f4:5c:
                    3b:41:5a:b4:f1:6f:ec:bd:e4:0d:77:df:e9:a6:67:
                    bf:ba:2a:21:61:35:11:b5:d5:3d:1d:db:76:a6:88:
                    fa:66:8b:38:29:71:75:59:fc:83:93:a5:99:e4:f2:
                    ee:c7:3d:c3:dd:42:b2:85:59:c4:9a:a0:03:53:4f:
                    22:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FE:24:20:63:A9:27:E5:6A:B3:BA:DB:AE:80:4E:BE:58:47:B2:E8
            X509v3 Authority Key Identifier:
                keyid:BE:DC:BA:A0:D6:AC:CB:E9:7C:22:F6:0B:E3:7F:81:2B:6D:69:04:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/4/323630323a663537643a3a2f34302d3438203d3e203437363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f57d::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:55:c2:2f:78:a5:a4:55:30:81:59:09:ea:a2:0b:95:5c:c8:
         8a:51:d7:81:c7:84:a4:a0:ad:44:96:a8:36:c7:25:60:94:68:
         fa:0f:2e:9f:12:02:f8:69:ac:9a:d3:9d:42:26:ac:ff:e4:4a:
         d2:12:e7:ee:9f:45:95:36:6f:05:06:20:7d:c5:06:23:6a:52:
         42:4c:3b:2e:c0:14:99:86:a3:c9:e1:39:85:66:5f:0d:66:a5:
         3f:ba:f3:53:2c:50:da:6e:19:b0:52:ed:f4:1c:52:8f:52:af:
         d2:fb:a5:a0:df:af:3d:4f:a9:ba:d1:af:1d:c3:ef:42:61:e7:
         dc:bc:03:5e:6a:ed:30:0d:2f:de:50:52:d6:21:02:69:95:79:
         e7:b1:bd:4b:c9:9d:58:2d:00:89:62:c1:18:0d:ed:b6:15:8e:
         69:b3:91:ca:a6:a5:ec:4c:aa:9b:c3:7f:4f:7d:3b:da:d5:92:
         fe:53:16:09:fe:c0:de:e8:31:20:83:60:97:85:f5:85:76:ac:
         ff:20:95:30:76:0e:38:d5:be:43:9e:e3:ed:28:14:04:0d:94:
         48:ff:a1:1e:79:57:37:71:7c:1d:8c:29:72:e5:95:ad:6d:bd:
         a9:87:64:f3:86:ba:37:4c:be:93:36:17:8b:24:72:ea:7b:59:
         fb:57:7f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:54:04 2025 by rpki-client