Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/323630323a663766663a323a3a2f34382d3438203d3e203133383532.roa
File:                     323630323a663766663a323a3a2f34382d3438203d3e203133383532.roa (raw, json)
Hash identifier:          1L/xcBNyBErPAFeSMNJ8mVgaRlXPIB2y/+56UnIlo1w=
Subject key identifier:   70:97:41:74:69:F0:D3:01:08:7B:60:14:F2:4E:D3:25:64:9A:C4:DF
Certificate issuer:       /CN=f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac
Certificate serial:       4E5C559409A0FEA2F4963D04855A47431C045DEA
Authority key identifier: 2E:08:38:3B:BD:F8:9E:0A:4C:9A:C0:DF:33:DC:D0:1B:A1:9B:AB:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/323630323a663766663a323a3a2f34382d3438203d3e203133383532.roa
Signing time:             Thu 10 Apr 2025 08:02:22 +0000
ROA not before:           Thu 10 Apr 2025 07:57:22 +0000
ROA not after:            Thu 09 Apr 2026 08:02:22 +0000
asID:                     13852
IP address blocks:        2602:f7ff:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/2E08383BBDF89E0A4C9AC0DF33DCD01BA19BAB01.crl
                          rsync://rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/2E08383BBDF89E0A4C9AC0DF33DCD01BA19BAB01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 08:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5c:55:94:09:a0:fe:a2:f4:96:3d:04:85:5a:47:43:1c:04:5d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac
        Validity
            Not Before: Apr 10 07:57:22 2025 GMT
            Not After : Apr  9 08:02:22 2026 GMT
        Subject: CN=7097417469F0D301087B6014F24ED325649AC4DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:8d:ac:00:9a:3a:ed:e3:c8:73:c1:d8:bb:
                    47:ce:5d:cf:6e:1b:89:40:ca:43:69:bc:4d:6a:dc:
                    46:38:f2:9d:1c:83:3c:d5:fc:a6:ae:66:e5:29:c1:
                    0d:cd:a4:4b:53:30:78:99:34:86:ed:42:bd:b3:43:
                    7a:bf:f4:7a:90:23:7a:90:b2:d5:cf:3c:43:ce:01:
                    f2:ad:0b:fa:9b:b2:af:12:df:80:98:64:01:2c:f3:
                    65:05:fd:51:05:f1:06:58:cc:65:59:e7:c8:7b:c7:
                    dd:cf:e6:1b:b7:22:46:eb:b3:89:2b:9b:6a:9c:53:
                    2e:e5:a8:c8:8b:22:cd:84:a5:c7:46:24:51:9c:c7:
                    2b:ce:56:46:fb:dd:f0:30:29:4b:a8:38:49:35:59:
                    79:33:11:e8:bc:56:db:eb:b1:e4:4f:8b:e2:5a:42:
                    c5:b2:8a:07:d6:ca:90:17:ae:b5:f7:d4:09:3a:5d:
                    f2:81:e8:df:5c:88:0d:4d:d1:3d:98:21:5c:a1:9a:
                    4f:0f:02:b5:f3:11:31:b4:70:31:64:80:ed:20:0d:
                    67:a4:6c:21:aa:0c:cf:46:9a:8a:20:af:ff:0a:fe:
                    6a:56:9a:54:b8:a6:a8:27:a0:b8:ca:34:b6:26:81:
                    bb:31:f1:ee:15:03:0d:c2:69:2e:e9:35:42:6e:c9:
                    7f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:97:41:74:69:F0:D3:01:08:7B:60:14:F2:4E:D3:25:64:9A:C4:DF
            X509v3 Authority Key Identifier:
                keyid:2E:08:38:3B:BD:F8:9E:0A:4C:9A:C0:DF:33:DC:D0:1B:A1:9B:AB:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/2E08383BBDF89E0A4C9AC0DF33DCD01BA19BAB01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/323630323a663766663a323a3a2f34382d3438203d3e203133383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ff:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:3b:1a:7d:64:7f:c1:11:26:ce:10:e8:2b:cc:de:3d:17:25:
         5e:6b:70:20:7b:61:f5:7b:27:50:c8:55:b8:de:23:21:8d:9c:
         56:09:e2:6b:66:df:8a:30:ef:8e:50:d2:28:b9:86:dd:73:2c:
         6a:e8:b2:16:d8:54:08:b1:3c:8d:c9:c4:2c:4a:27:56:6f:a1:
         f4:dd:64:6b:92:80:a2:3d:0e:3d:26:06:36:af:c6:f6:66:f2:
         13:95:c2:d3:dd:fe:e7:da:cd:90:fd:f1:4a:c9:69:01:b2:4e:
         31:ad:a4:6e:16:62:55:c0:69:f4:18:6b:58:b4:1a:03:3c:17:
         b3:e5:ce:9a:5a:3b:77:c6:c0:08:fe:8f:75:15:4c:12:0f:f4:
         b2:48:6d:64:02:3e:11:63:2d:1c:0f:02:af:2b:ae:29:37:d1:
         9e:3e:84:56:6b:31:55:22:ef:15:2b:06:e6:a1:db:64:03:a4:
         df:5e:03:58:0f:0c:e1:b6:68:24:ad:ed:b5:f4:2e:21:c0:4c:
         be:96:eb:1e:81:f6:b4:1d:24:49:b9:1e:85:cd:f5:e5:ee:2d:
         4b:f8:b8:a7:bb:7b:06:e6:87:f4:91:46:94:7c:79:6e:41:35:
         b8:e0:4f:26:c4:5a:27:d1:bf:2d:95:de:4e:85:ec:9a:e7:27:
         93:9e:56:7a
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUTlxVlAmg/qL0lj0EhVpHQxwEXeowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjlkNGJkODNlZDM1NWI0N2Q4N2YxM2YxYjY4MDAyYmI0
YjBmMTkxZWYwZTYyNzk4YWMwHhcNMjUwNDEwMDc1NzIyWhcNMjYwNDA5MDgwMjIy
WjAzMTEwLwYDVQQDEyg3MDk3NDE3NDY5RjBEMzAxMDg3QjYwMTRGMjRFRDMyNTY0
OUFDNERGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0+NrACaOu3j
yHPB2LtHzl3PbhuJQMpDabxNatxGOPKdHIM81fymrmblKcENzaRLUzB4mTSG7UK9
s0N6v/R6kCN6kLLVzzxDzgHyrQv6m7KvEt+AmGQBLPNlBf1RBfEGWMxlWefIe8fd
z+YbtyJG67OJK5tqnFMu5ajIiyLNhKXHRiRRnMcrzlZG+93wMClLqDhJNVl5MxHo
vFbb67HkT4viWkLFsooH1sqQF66199QJOl3ygejfXIgNTdE9mCFcoZpPDwK18xEx
tHAxZIDtIA1npGwhqgzPRpqKIK//Cv5qVppUuKaoJ6C4yjS2JoG7MfHuFQMNwmku
6TVCbsl/SwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFHCXQXRp8NMBCHtgFPJO0yVk
msTfMB8GA1UdIwQYMBaAFC4IODu9+J4KTJrA3zPc0Buhm6sBMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzAyNmNlNGQzYTU0ZjRhMTFhZTVhYmE5ODMzNDEwNzAxLzAv
MkUwODM4M0JCREY4OUUwQTRDOUFDMERGMzNEQ0QwMUJBMTlCQUIwMS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1LzZlODNmYmYyLWI2NGItNGM1NS1iYTI4LWNhODRhZDBhZjVhYi9mOWQ0
YmQ4M2VkMzU1YjQ3ZDg3ZjEzZjFiNjgwMDJiYjRiMGYxOTFlZjBlNjI3OThhYy5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8wMjZjZTRkM2E1NGY0YTExYWU1YWJh
OTgzMzQxMDcwMS8wLzMyMzYzMDMyM2E2NjM3NjY2NjNhMzIzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMTMzMzgzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3/wACMA0GCSqGSIb3
DQEBCwUAA4IBAQBpOxp9ZH/BESbOEOgrzN49FyVea3Age2H1eydQyFW43iMhjZxW
CeJrZt+KMO+OUNIouYbdcyxq6LIW2FQIsTyNycQsSidWb6H03WRrkoCiPQ49JgY2
r8b2ZvITlcLT3f7n2s2Q/fFKyWkBsk4xraRuFmJVwGn0GGtYtBoDPBez5c6aWjt3
xsAI/o91FUwSD/SySG1kAj4RYy0cDwKvK64pN9GePoRWazFVIu8VKwbmodtkA6Tf
XgNYDwzhtmgkre219C4hwEy+lusegfa0HSRJuR6FzfXl7i1L+Linu3sG5of0kUaU
fHluQTW44E8mxFon0b8tld5Oheya5yeTnlZ6
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:53:27 2025 by rpki-client