Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a33613a3a2f34372d3438203d3e20323133323933.roa
File:                     323630323a663732653a33613a3a2f34372d3438203d3e20323133323933.roa (raw, json)
Hash identifier:          5ARzVpW+O65Hd6+S5V3trBcXhQlSeO+OXMTyy+zXqyQ=
Subject key identifier:   6A:25:09:1B:86:27:CE:17:8B:A4:D5:79:E9:34:5E:97:11:2B:74:5F
Certificate issuer:       /CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
Certificate serial:       104FFC88D81513BEF68C0EC1B2EAACC79E49BFFC
Authority key identifier: 0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a33613a3a2f34372d3438203d3e20323133323933.roa
Signing time:             Fri 31 Oct 2025 21:30:02 +0000
ROA not before:           Fri 31 Oct 2025 21:25:02 +0000
ROA not after:            Fri 30 Oct 2026 21:30:02 +0000
asID:                     213293
IP address blocks:        2602:f72e:3a::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4f:fc:88:d8:15:13:be:f6:8c:0e:c1:b2:ea:ac:c7:9e:49:bf:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
        Validity
            Not Before: Oct 31 21:25:02 2025 GMT
            Not After : Oct 30 21:30:02 2026 GMT
        Subject: CN=6A25091B8627CE178BA4D579E9345E97112B745F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4e:54:27:7a:dd:67:8a:68:a5:98:f0:a5:67:
                    80:5e:59:ef:b8:c5:9d:f5:11:21:b0:8c:e5:7c:9c:
                    81:a0:11:9f:3e:a5:60:96:e5:ed:29:7e:f6:6f:3e:
                    a6:e4:be:c2:0e:74:18:53:87:06:de:32:3c:c4:48:
                    4c:1e:cf:24:24:c9:1e:40:fe:43:ba:15:ce:8e:6e:
                    df:c4:a9:fa:47:ac:ba:f7:cd:12:79:f6:a2:b4:14:
                    1e:62:e3:62:0b:aa:29:16:e9:68:1b:90:a8:d2:9d:
                    c1:92:01:4d:5c:1d:5c:f1:4c:48:97:7d:03:d6:dc:
                    c4:ef:03:7e:20:c4:0e:66:b2:0b:b5:fa:85:51:42:
                    08:42:06:48:fb:2a:0f:9f:b1:50:bb:78:cc:00:1f:
                    8a:28:a7:cf:21:f1:0e:7d:77:af:b1:49:9d:71:5e:
                    fd:1d:a7:94:54:4c:14:84:6b:8d:25:45:d1:0b:c0:
                    3b:ba:d8:83:3f:e2:d9:bd:b7:c2:46:ef:ff:9c:5a:
                    7c:02:27:83:30:40:38:49:21:8e:c5:18:8a:b3:91:
                    0e:d0:31:8e:d0:47:83:3c:41:7a:e5:26:5e:18:ef:
                    87:25:de:6f:eb:f1:a4:99:9b:2e:1c:1c:95:44:ec:
                    1b:63:03:21:c5:6c:1c:3a:13:73:9a:6d:65:d8:d1:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:25:09:1B:86:27:CE:17:8B:A4:D5:79:E9:34:5E:97:11:2B:74:5F
            X509v3 Authority Key Identifier:
                keyid:0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a33613a3a2f34372d3438203d3e20323133323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:3a::/47

    Signature Algorithm: sha256WithRSAEncryption
         96:2e:ca:56:2c:bd:14:a6:ef:0a:6e:aa:4f:fd:eb:cf:a9:c3:
         4d:f7:f1:c8:0b:64:ef:13:e6:5b:57:83:33:9a:b3:c3:04:39:
         7c:e4:08:69:40:ac:50:6d:9d:b3:85:5c:33:50:8b:2d:31:87:
         a5:f6:0e:8c:dc:87:3a:db:b2:53:d0:3b:71:db:dc:1d:28:c0:
         95:93:5a:8c:7b:2b:cf:a5:4a:65:35:09:33:9b:ff:9c:c7:fb:
         52:fe:2a:aa:3d:4e:96:1a:a7:a7:ab:11:da:72:6f:ca:fe:52:
         13:0e:f1:c3:04:90:d1:6e:85:f2:c9:b6:34:f3:4b:0e:85:d0:
         d0:a1:79:fd:a0:57:58:14:42:49:dd:e4:2e:6c:a2:79:a8:c3:
         a3:db:ef:2e:b6:95:43:a9:d1:60:30:be:c5:a4:f3:ae:6f:6b:
         7c:e9:b9:46:fd:df:b3:a1:d2:7c:38:18:54:dd:52:fe:6d:65:
         7f:00:77:db:f2:73:f1:23:45:65:21:e6:e1:53:c6:4b:f4:21:
         9d:72:d9:58:dc:7c:38:c7:5f:45:b0:b0:ae:d0:41:82:a0:8f:
         4d:80:75:d1:eb:93:25:85:5a:a9:32:d2:0a:87:b4:75:f6:60:
         81:6c:45:42:f9:f4:cb:f4:d5:5d:b1:5d:bf:85:14:c6:12:ba:
         fd:1a:a1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:19:11 2025 by rpki-client