Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130643a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3130643a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          DMGIqyj+cJB1ANqEQTgCFm3WcnUhMv3ax/xcM9nufFQ=
Subject key identifier:   C2:1D:46:A1:29:C8:8F:5A:D9:4F:CC:8C:78:31:BE:29:6A:79:DD:27
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       0601527178614C3AE4FBCF46A6429187ABFD4206
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130643a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 19 May 2025 20:28:33 +0000
ROA not before:           Mon 19 May 2025 20:23:33 +0000
ROA not after:            Mon 18 May 2026 20:28:33 +0000
asID:                     29802
IP address blocks:        2602:ff62:10d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:01:52:71:78:61:4c:3a:e4:fb:cf:46:a6:42:91:87:ab:fd:42:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 19 20:23:33 2025 GMT
            Not After : May 18 20:28:33 2026 GMT
        Subject: CN=C21D46A129C88F5AD94FCC8C7831BE296A79DD27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:72:4f:d2:34:e4:a7:90:9d:9b:b1:42:d8:
                    08:8c:54:a5:96:e4:86:d7:f0:a7:43:66:6a:20:56:
                    f0:dd:77:4e:25:6e:c4:de:fa:f9:d9:02:e3:da:6a:
                    84:42:34:03:86:a0:c3:d0:e6:83:05:79:b8:de:0b:
                    3d:2d:eb:ae:d4:31:0f:0b:50:95:2f:05:ed:6c:44:
                    17:c1:53:50:c0:ee:96:82:21:be:71:67:e8:4f:41:
                    52:5b:cb:e6:5d:9b:e6:fb:6f:c6:a9:87:51:9e:12:
                    8e:92:4d:6f:a9:14:4c:93:e5:95:f6:9f:c7:1a:a5:
                    52:bf:0d:c6:2b:4a:fa:11:d9:a3:43:92:0c:16:0c:
                    ef:61:44:ad:89:87:7e:ff:02:24:cd:8a:dd:75:08:
                    ab:27:df:5b:a1:91:0d:25:b8:ef:1d:4f:b6:9a:24:
                    0f:1a:76:f5:46:12:00:86:52:fd:70:54:3a:26:77:
                    a4:d3:27:ab:28:ba:83:e7:e5:13:3a:79:f9:62:a7:
                    73:5a:a0:24:19:1b:87:e3:45:15:2e:2b:54:64:74:
                    5a:47:74:3b:ec:25:4f:fe:b4:32:da:3d:a2:c9:25:
                    98:b4:8e:22:95:5a:c5:34:c0:e8:12:3b:c3:24:37:
                    a7:5b:01:09:46:85:e1:3b:1b:5d:ef:48:6c:66:c6:
                    55:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1D:46:A1:29:C8:8F:5A:D9:4F:CC:8C:78:31:BE:29:6A:79:DD:27
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130643a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10d::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:9a:d8:8c:5c:39:cb:1f:a2:41:d0:70:0a:d3:01:ce:8a:98:
         4e:a5:9d:71:69:8c:b6:25:1c:0b:20:cd:1c:e9:98:ff:37:30:
         ab:7b:83:81:e2:9c:a4:57:91:d1:5e:7a:db:0c:f5:17:91:b6:
         42:ec:29:da:e6:b0:fe:40:b8:c8:d9:94:23:a5:46:fa:17:41:
         bc:4d:55:f1:07:7b:74:2c:1e:77:78:e5:4b:7b:a8:07:3d:dc:
         dd:b3:f1:01:1a:b1:1d:a7:78:43:7c:92:79:d4:a6:22:22:19:
         7c:7f:0c:3f:20:1a:b2:a2:d1:72:52:d2:a1:45:c5:e9:d8:b4:
         32:7c:2e:47:d0:7e:b4:96:87:de:53:38:f4:59:05:3a:cc:f8:
         e1:9e:d7:d7:27:1a:01:19:14:94:54:f8:d4:1d:f3:09:3d:70:
         e7:43:87:94:d7:d3:98:3a:4c:41:fe:56:cf:3b:87:22:46:ea:
         7d:00:70:6c:f6:63:14:23:b2:b5:12:bd:db:69:05:5f:d0:1c:
         73:d5:62:0c:27:9c:5f:fe:ce:3e:b1:9f:30:09:bf:c5:ab:a3:
         88:de:4b:ed:ff:ff:d1:5f:64:68:9a:61:62:fb:cd:ad:a5:1f:
         3f:a5:b6:86:dc:c1:d3:94:e9:f2:2c:b0:e9:d8:66:8f:7d:ae:
         51:41:eb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:54:20 2025 by rpki-client