Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130643a3a2f34382d3438203d3e20333936333536.roa
File:                     323630323a666636323a3130643a3a2f34382d3438203d3e20333936333536.roa (raw, json)
Hash identifier:          p7pDUFF75OTunS4FOfIDXbkxkycxNWlQOOpA/CQaSrE=
Subject key identifier:   2E:80:A6:D2:1F:CB:A7:93:7D:B2:8D:87:16:59:35:15:83:F2:13:FA
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       6DED65A8DD57DF2E5D9BC6D94E527C31A00E1290
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130643a3a2f34382d3438203d3e20333936333536.roa
Signing time:             Tue 13 May 2025 10:28:33 +0000
ROA not before:           Tue 13 May 2025 10:23:33 +0000
ROA not after:            Tue 12 May 2026 10:28:33 +0000
asID:                     396356
IP address blocks:        2602:ff62:10d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 14:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ed:65:a8:dd:57:df:2e:5d:9b:c6:d9:4e:52:7c:31:a0:0e:12:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 13 10:23:33 2025 GMT
            Not After : May 12 10:28:33 2026 GMT
        Subject: CN=2E80A6D21FCBA7937DB28D871659351583F213FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:4b:7b:da:6c:cd:8f:27:d4:1c:cd:c9:a4:
                    4e:1f:06:17:23:66:50:fd:aa:30:37:77:c9:2e:fb:
                    f8:36:52:16:7f:ff:21:ff:97:f9:08:ba:fb:5a:bb:
                    cd:d4:1f:25:61:4f:0a:fa:03:04:aa:f4:e0:2f:46:
                    a5:22:e2:f9:5f:9e:0e:30:70:08:15:0f:98:7a:da:
                    9f:5f:80:a2:71:07:f9:2d:52:03:a8:a5:32:e0:e7:
                    0c:21:17:ef:5a:eb:bb:60:17:52:f0:94:60:e3:ce:
                    a1:e8:4d:c9:df:66:fa:b2:c5:69:d0:05:ba:f5:05:
                    45:e8:3e:8f:c3:f5:cc:12:f8:86:4b:19:50:4c:8c:
                    e6:4b:41:b1:95:67:55:e3:c8:0a:76:75:80:47:8d:
                    29:b0:e0:c2:50:af:17:f6:c3:87:3a:f2:1f:a9:52:
                    fd:ef:b6:52:be:44:d0:99:b7:3a:2d:0c:7b:75:24:
                    33:9a:4c:a2:cd:0a:b1:a8:ba:43:14:2c:06:08:47:
                    73:58:9a:7d:67:d3:2c:f8:2e:8c:3a:d3:b6:b5:32:
                    2d:ca:21:3c:a7:bb:28:38:c9:47:78:45:44:ac:4b:
                    20:af:28:5a:df:de:ff:c4:c5:e4:ee:3e:9e:dc:22:
                    70:2a:f3:9f:59:e1:dc:86:8b:48:64:6a:af:8b:1c:
                    5b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:80:A6:D2:1F:CB:A7:93:7D:B2:8D:87:16:59:35:15:83:F2:13:FA
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130643a3a2f34382d3438203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10d::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:20:3b:1e:ed:51:c3:a0:88:a8:70:1f:6a:fd:44:26:e0:61:
         c9:26:75:66:55:48:e0:dc:7a:50:dc:e6:47:ac:81:c5:c7:db:
         98:dd:25:d8:63:0f:82:af:8e:2f:21:7e:a2:91:b2:db:d6:b8:
         83:4a:e1:6c:95:ef:39:16:07:7d:e9:dc:e9:95:95:88:db:df:
         a7:67:2e:47:6b:cd:f7:95:3e:5f:2f:de:43:44:b8:fa:eb:fe:
         94:18:08:6b:41:fb:85:52:e5:cb:d5:e9:ec:79:42:a3:09:5d:
         07:dc:67:b9:9e:9e:6e:d0:b4:fe:9a:9e:a1:d5:c2:9e:2c:87:
         d5:f7:9e:fe:1d:53:0a:4c:57:70:74:8f:d4:d2:ea:d3:cc:30:
         a3:26:3d:34:41:36:91:1d:e1:94:81:13:15:cd:f0:0c:9a:b8:
         55:05:fc:22:6b:9f:03:0f:f2:30:6c:c7:84:2f:9e:09:3c:c4:
         33:ee:d7:b6:66:be:0d:0d:be:bb:3e:07:3e:92:4c:8e:76:fa:
         51:4d:92:8a:ed:4b:92:88:de:87:bf:92:e8:18:d3:0c:20:4f:
         d8:2f:a2:e7:6d:c7:b9:ed:c2:07:e3:94:3d:28:69:47:b7:32:
         1b:c0:59:e5:e0:ae:6b:de:8d:7b:05:36:05:b2:11:f8:a3:32:
         af:0e:9d:f7
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUbe1lqN1X3y5dm8bZTlJ8MaAOEpAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjUwNTEzMTAyMzMzWhcNMjYwNTEyMTAyODMz
WjAzMTEwLwYDVQQDEygyRTgwQTZEMjFGQ0JBNzkzN0RCMjhEODcxNjU5MzUxNTgz
RjIxM0ZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAridLe9pszY8n
1BzNyaROHwYXI2ZQ/aowN3fJLvv4NlIWf/8h/5f5CLr7WrvN1B8lYU8K+gMEqvTg
L0alIuL5X54OMHAIFQ+YetqfX4CicQf5LVIDqKUy4OcMIRfvWuu7YBdS8JRg486h
6E3J32b6ssVp0AW69QVF6D6Pw/XMEviGSxlQTIzmS0GxlWdV48gKdnWAR40psODC
UK8X9sOHOvIfqVL977ZSvkTQmbc6LQx7dSQzmkyizQqxqLpDFCwGCEdzWJp9Z9Ms
+C6MOtO2tTItyiE8p7soOMlHeEVErEsgryha397/xMXk7j6e3CJwKvOfWeHchotI
ZGqvixxbvwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFC6AptIfy6eTfbKNhxZZNRWD
8hP6MB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzMDY0M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM2MzMzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL/YgENMA0G
CSqGSIb3DQEBCwUAA4IBAQAHIDse7VHDoIiocB9q/UQm4GHJJnVmVUjg3HpQ3OZH
rIHFx9uY3SXYYw+Cr44vIX6ikbLb1riDSuFsle85Fgd96dzplZWI29+nZy5Ha833
lT5fL95DRLj66/6UGAhrQfuFUuXL1enseUKjCV0H3Ge5np5u0LT+mp6h1cKeLIfV
957+HVMKTFdwdI/U0urTzDCjJj00QTaRHeGUgRMVzfAMmrhVBfwia58DD/IwbMeE
L54JPMQz7te2Zr4NDb67Pgc+kkyOdvpRTZKK7UuSiN6Hv5LoGNMMIE/YL6Lnbce5
7cIH45Q9KGlHtzIbwFnl4K5r3o17BTYFshH4ozKvDp33
-----END CERTIFICATE-----
Generated at Tue Jun 17 22:09:30 2025 by rpki-client