Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132353a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132353a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          Ab3j6zRGLaAERJktCMSR63U7DBlmBSQ8koWMJMbdm88=
Subject key identifier:   07:14:DB:90:FF:8F:62:03:13:BF:1D:B9:31:F3:A9:34:13:2F:2D:98
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       2D4CA75D6FB76F6818D71B80342AA1EA55C76EAF
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132353a3a2f34382d3438203d3e203239383032.roa
Signing time:             Fri 16 May 2025 15:28:33 +0000
ROA not before:           Fri 16 May 2025 15:23:33 +0000
ROA not after:            Fri 15 May 2026 15:28:33 +0000
asID:                     29802
IP address blocks:        2602:ff62:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4c:a7:5d:6f:b7:6f:68:18:d7:1b:80:34:2a:a1:ea:55:c7:6e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 16 15:23:33 2025 GMT
            Not After : May 15 15:28:33 2026 GMT
        Subject: CN=0714DB90FF8F620313BF1DB931F3A934132F2D98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9e:2a:cf:db:58:1f:f5:7d:e6:b2:54:e4:aa:
                    1c:0e:9d:eb:ac:ac:b4:08:6a:80:c2:d2:e9:f5:df:
                    30:13:49:3c:ac:a1:9f:d7:d4:7e:d3:40:08:2f:e3:
                    88:7b:6d:88:11:6a:a5:55:72:c1:5c:96:dc:69:0a:
                    0e:57:8b:4d:98:fd:44:aa:29:40:f1:01:d9:c2:36:
                    18:da:b8:b4:48:c1:21:1d:ba:33:d8:cc:2a:0b:50:
                    8f:2a:0b:0e:67:67:41:d4:56:51:fd:01:33:fc:86:
                    22:38:15:f8:01:a3:90:8e:be:2b:e0:7a:cd:13:1d:
                    d8:bb:27:b0:d4:77:25:d8:eb:53:51:f0:57:6a:5e:
                    5b:4c:6b:f1:b6:6f:a7:5a:a0:57:bf:1c:fc:45:86:
                    51:4b:f8:5d:32:fa:71:a8:f7:12:52:48:cb:97:89:
                    b1:2f:ce:e7:6f:d6:91:1a:70:45:28:4a:f8:0b:67:
                    dd:d1:0b:9a:2f:3a:da:61:d5:84:69:66:21:a8:0d:
                    e7:0b:6c:f5:43:21:6f:cf:e3:9a:28:f1:24:8a:45:
                    04:0a:05:ea:64:d9:d6:6b:22:54:74:7b:94:e1:da:
                    c9:fb:bb:4a:9b:cb:c8:c9:88:e2:f6:81:ad:73:f3:
                    64:48:43:b5:d6:7d:c7:a3:14:53:a7:ca:f5:99:d3:
                    86:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:14:DB:90:FF:8F:62:03:13:BF:1D:B9:31:F3:A9:34:13:2F:2D:98
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132353a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:125::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:fa:7f:a7:1d:ff:11:f4:89:cb:6d:3c:10:1f:57:b7:1b:b7:
         9c:3b:ec:45:6f:fb:93:44:b7:c5:98:5d:fb:2a:54:92:43:69:
         c0:25:1e:ac:83:93:87:c2:53:8c:e5:43:49:85:20:84:c4:b1:
         39:1c:87:8b:d9:d2:e9:4b:86:d4:ae:81:6d:e4:77:df:0c:86:
         21:9c:61:49:bf:89:bc:ab:c4:64:a0:4f:d2:01:66:67:8d:e1:
         14:a8:be:62:e9:a0:6d:10:ea:42:e3:2a:d1:87:82:4c:48:0a:
         ea:7f:1b:8a:fa:d5:08:08:ff:81:c5:1c:89:6c:c1:3f:1c:77:
         fb:2b:12:f3:bd:ae:e1:f1:20:d5:cf:a9:68:b7:c9:4d:d9:fa:
         32:82:99:66:89:ea:41:c3:af:25:7d:10:64:f9:8d:f2:13:9d:
         26:c4:f3:15:5f:79:20:8f:4d:d8:aa:86:64:03:dd:ff:74:d2:
         71:fe:c7:af:08:cc:b4:b6:99:57:a9:97:48:0b:d1:f1:ff:71:
         13:d1:cd:2d:4d:d6:f0:c0:03:23:0d:ba:34:75:b9:e6:1f:e2:
         63:90:a4:f4:66:8d:0c:58:9f:1e:ef:dc:b1:d2:fe:57:ab:b9:
         14:e0:4c:df:ad:6d:81:49:ec:fb:b8:df:49:1b:53:26:29:7b:
         e1:5a:c0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:45:59 2025 by rpki-client