Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/323632303a64393a323030303a3a2f34382d3438203d3e203434333534.roa
File:                     323632303a64393a323030303a3a2f34382d3438203d3e203434333534.roa (raw, json)
Hash identifier:          NhV49WH11DspcvwVpMRxrvX2O+i6iBkXVZUSwhqfpeA=
Subject key identifier:   00:23:38:6B:A8:30:43:C9:A7:A2:DB:93:CD:A8:BD:CB:78:C6:67:DA
Certificate issuer:       /CN=cb1ee00ccae4705dab326a95a429cd234025a167151c2a6faf
Certificate serial:       7AA8A53642B00DC2B8BA72FEA333FB4606072210
Authority key identifier: EA:01:8B:25:10:4B:F7:51:B2:B8:90:0C:54:B2:13:3F:C3:C7:9C:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccae4705dab326a95a429cd234025a167151c2a6faf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/323632303a64393a323030303a3a2f34382d3438203d3e203434333534.roa
Signing time:             Tue 10 Jun 2025 18:26:16 +0000
ROA not before:           Tue 10 Jun 2025 18:21:16 +0000
ROA not after:            Tue 09 Jun 2026 18:26:16 +0000
asID:                     44354
IP address blocks:        2620:d9:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/EA018B25104BF751B2B8900C54B2133FC3C79CEC.crl
                          rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/EA018B25104BF751B2B8900C54B2133FC3C79CEC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccae4705dab326a95a429cd234025a167151c2a6faf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a8:a5:36:42:b0:0d:c2:b8:ba:72:fe:a3:33:fb:46:06:07:22:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb1ee00ccae4705dab326a95a429cd234025a167151c2a6faf
        Validity
            Not Before: Jun 10 18:21:16 2025 GMT
            Not After : Jun  9 18:26:16 2026 GMT
        Subject: CN=0023386BA83043C9A7A2DB93CDA8BDCB78C667DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:6d:ee:16:4c:99:8f:17:0e:2d:28:87:54:
                    85:c7:89:76:32:8a:78:da:8f:ca:10:e6:d9:f6:3d:
                    04:11:89:f4:ce:98:80:68:03:02:fb:dd:6d:3d:d2:
                    1a:18:2d:84:f2:bf:01:d0:f6:91:ed:d1:8e:68:62:
                    f3:86:36:17:01:37:ac:3c:0e:4d:fc:c7:7f:ca:d3:
                    e4:bc:9f:f7:fc:fa:87:c2:79:4b:04:d0:dc:66:1e:
                    49:36:58:c1:a1:ad:c8:c1:ae:b7:ca:e2:ee:b6:e8:
                    71:02:30:bd:7b:03:4f:da:a4:d0:bb:02:a7:35:11:
                    4c:02:56:24:53:07:84:30:d8:e3:82:dc:02:78:84:
                    d5:91:d4:82:fa:d1:fd:a1:fc:05:d6:ca:67:2d:9d:
                    e3:6c:33:46:7f:04:3b:82:04:a1:96:b9:97:7c:ab:
                    42:1c:3c:a3:22:c5:75:12:03:de:8a:0f:8f:6a:eb:
                    bf:af:d6:c2:7b:07:04:51:8c:7e:bf:27:6d:9e:53:
                    ac:ea:0f:bb:e9:21:60:dc:8a:9c:c9:09:67:85:77:
                    2a:9c:26:da:e8:db:6e:76:de:92:8e:2a:9d:6e:de:
                    8b:9a:09:0e:ef:2a:15:2e:dc:8f:af:35:c6:10:b1:
                    48:b8:d7:b7:63:b2:e0:3d:cc:12:29:13:13:fe:fb:
                    c3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:23:38:6B:A8:30:43:C9:A7:A2:DB:93:CD:A8:BD:CB:78:C6:67:DA
            X509v3 Authority Key Identifier:
                keyid:EA:01:8B:25:10:4B:F7:51:B2:B8:90:0C:54:B2:13:3F:C3:C7:9C:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/EA018B25104BF751B2B8900C54B2133FC3C79CEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccae4705dab326a95a429cd234025a167151c2a6faf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/323632303a64393a323030303a3a2f34382d3438203d3e203434333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:d9:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:cb:46:0b:00:03:68:ed:de:1e:e0:6e:aa:89:ff:88:2a:93:
         db:01:84:02:3d:da:db:eb:c5:c3:e6:0d:b2:30:68:d7:78:c0:
         8d:1e:97:0f:6c:0e:7e:d7:cc:9a:7d:d0:80:08:9b:a2:fb:72:
         e9:5f:66:98:47:6e:a1:9f:12:27:58:72:c5:6b:03:31:f9:c2:
         94:28:60:21:28:60:ba:86:27:8d:bf:10:c2:8f:e1:ab:d3:14:
         4f:14:0d:9c:79:f3:57:09:09:df:b3:0b:ac:c1:c6:42:b0:c5:
         35:7a:ee:bc:cc:d2:ce:b3:69:66:29:11:b1:7c:a0:d1:36:be:
         a5:0f:3d:81:22:fd:90:ac:e4:85:91:13:13:29:9c:20:07:2b:
         a0:b0:d5:47:e3:a0:4c:56:f7:78:70:d9:bc:0d:b0:be:97:16:
         3b:83:bd:f8:ac:12:2a:59:23:d5:16:32:d2:9f:fc:df:e1:6a:
         65:37:0c:a4:df:59:a7:b4:f4:d5:d1:06:d1:3e:0c:41:62:c8:
         7f:5d:7b:c5:72:41:f3:70:58:da:54:f5:a2:c6:94:6c:ba:02:
         55:69:9b:1c:30:a3:5b:44:1d:8b:d1:2c:0d:84:9d:71:1a:b5:
         6b:4e:5e:7f:35:ef:84:78:61:e0:64:6e:2d:5d:df:9b:d3:32:
         20:6e:a8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:38:05 2025 by rpki-client