Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130663a3a2f34382d3438203d3e20333936333536.roa
File:                     323630323a666636323a3130663a3a2f34382d3438203d3e20333936333536.roa (raw, json)
Hash identifier:          52/hgZKTiyC9ZmrTGlBq3KPp2CQB+COetKKEvahPCoI=
Subject key identifier:   3B:69:C1:CE:D4:31:6C:80:9A:8D:AE:DF:96:45:69:FE:52:B5:5E:70
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       6D426B880EC00241E76F65007A6F6EC01BF6BF3A
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130663a3a2f34382d3438203d3e20333936333536.roa
Signing time:             Tue 13 May 2025 10:28:33 +0000
ROA not before:           Tue 13 May 2025 10:23:33 +0000
ROA not after:            Tue 12 May 2026 10:28:33 +0000
asID:                     396356
IP address blocks:        2602:ff62:10f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 14:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:42:6b:88:0e:c0:02:41:e7:6f:65:00:7a:6f:6e:c0:1b:f6:bf:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 13 10:23:33 2025 GMT
            Not After : May 12 10:28:33 2026 GMT
        Subject: CN=3B69C1CED4316C809A8DAEDF964569FE52B55E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:16:52:3b:17:fe:5f:1c:73:92:e2:ae:92:80:
                    ba:e1:23:86:45:5f:8e:e3:30:02:e6:99:c1:a8:76:
                    44:35:c6:6f:1d:c4:c1:4d:72:d0:5f:f6:4d:61:e6:
                    2b:21:f0:46:92:d1:45:cb:d3:45:77:a2:d0:83:ec:
                    8e:1c:5b:e2:5f:b1:6e:dd:d2:9c:44:14:ce:57:83:
                    23:a6:fd:94:e2:aa:fd:d1:86:bd:e9:6b:a0:19:0c:
                    65:f7:12:06:73:b3:3a:2f:ba:77:d8:68:93:d9:e8:
                    c1:98:4b:f4:e3:f3:42:aa:9c:5c:75:b3:c6:f5:3e:
                    b5:5f:cb:83:f4:bf:c8:2f:5a:e4:d7:73:43:07:f8:
                    a2:65:38:b4:d7:81:59:11:ec:f0:50:82:e8:7b:0d:
                    4a:ec:94:3c:d7:c6:4e:4e:22:a1:4e:43:ff:a3:bc:
                    ab:58:56:ef:24:ab:2d:21:91:5d:f2:6d:ce:1f:06:
                    0c:52:cf:85:94:b2:0f:47:cf:82:59:82:40:29:98:
                    d2:62:2b:36:63:8d:e4:8c:32:d5:1f:80:99:b4:bf:
                    b0:d1:25:37:2a:47:e1:19:72:3e:46:4a:c1:a4:34:
                    76:50:54:a6:0b:92:51:94:3f:50:8c:ed:f2:48:51:
                    01:04:43:31:10:f6:21:50:c5:94:e6:0b:be:24:58:
                    db:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:69:C1:CE:D4:31:6C:80:9A:8D:AE:DF:96:45:69:FE:52:B5:5E:70
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130663a3a2f34382d3438203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10f::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:cd:64:dd:10:8a:85:1e:3b:bd:ce:55:7b:b6:07:fd:51:b3:
         d2:4c:c1:22:94:f4:84:2f:e8:f6:09:c5:c5:9a:d2:a1:e2:6d:
         d0:50:bf:64:26:a2:1a:63:84:04:cb:c6:c5:42:f3:a9:e7:69:
         e0:fb:24:d0:db:3e:2a:3f:eb:38:3c:f6:96:ad:65:28:f8:59:
         25:44:21:d1:21:a7:f5:4e:32:b6:84:d2:9b:57:6b:95:82:e1:
         3e:e2:55:ec:61:cd:54:6b:33:2d:d4:1a:66:4f:1e:57:bc:a9:
         f0:ba:c0:4a:f2:01:f9:c2:0e:b2:c8:74:15:b9:72:2b:d2:41:
         be:ec:8a:eb:9c:b9:e0:83:39:85:a5:5f:c1:19:43:f4:9c:bd:
         e4:2d:64:a0:10:1a:44:8a:45:c1:3d:22:0e:95:3e:29:dd:b6:
         98:e3:b3:3b:1e:38:1c:29:4d:2d:30:62:8a:fb:c0:d5:d2:24:
         b9:9e:6d:3b:9c:09:9e:4f:96:36:5e:08:87:e3:a9:98:99:56:
         0e:69:15:22:0f:08:bd:b6:8b:90:37:76:52:be:06:3b:e4:a9:
         5a:83:23:cb:77:b4:0f:3d:5d:fb:8f:1c:b3:ad:78:bc:b5:bb:
         f3:79:14:95:b9:d5:9d:cf:80:59:1a:79:70:64:e1:15:0a:c5:
         a0:31:ae:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:28:20 2025 by rpki-client