Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138343a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3138343a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          8n9toVwkDDGy5cHsjTrYAhHjkSeso2wI9dyBbIabR/Y=
Subject key identifier:   9E:72:41:F7:B5:F8:87:16:72:2D:23:4A:B4:7F:DF:2A:15:34:FE:69
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       4294FADC6B0FE8D173F396F3E2E986D435E6CD30
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138343a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 05 May 2025 15:28:32 +0000
ROA not before:           Mon 05 May 2025 15:23:32 +0000
ROA not after:            Mon 04 May 2026 15:28:32 +0000
asID:                     29802
IP address blocks:        2602:ff62:184::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 14:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:94:fa:dc:6b:0f:e8:d1:73:f3:96:f3:e2:e9:86:d4:35:e6:cd:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  5 15:23:32 2025 GMT
            Not After : May  4 15:28:32 2026 GMT
        Subject: CN=9E7241F7B5F88716722D234AB47FDF2A1534FE69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f3:49:74:11:10:d6:b6:77:ac:b2:8e:f0:0e:
                    f8:cc:3f:37:c7:30:69:1a:65:2b:80:f5:26:39:e2:
                    1e:79:96:23:d4:82:ea:d3:83:e4:ac:a8:ae:7d:5f:
                    f6:80:e6:1c:22:9c:8a:59:71:19:9a:37:93:c1:2f:
                    98:16:6b:29:fc:92:c7:05:8f:3f:cc:37:91:9e:87:
                    73:a4:04:1c:7e:60:7b:d6:7c:0c:2c:fa:6d:2e:5c:
                    71:ef:34:a3:db:90:ec:db:0c:63:fb:d3:df:53:78:
                    1a:01:b5:d6:bf:48:6e:9b:60:43:4f:39:a7:11:4b:
                    c8:ff:21:98:82:79:48:f8:a6:d8:f0:97:72:4f:97:
                    5d:f2:69:55:4c:10:3e:47:e6:9c:12:48:b4:61:f7:
                    6d:ee:85:eb:28:d6:c6:30:d8:e7:f4:9e:6e:61:cc:
                    43:bd:bb:d0:97:dd:ac:5b:47:2e:1d:07:0b:7d:c3:
                    34:d6:9d:8b:a4:cf:a9:07:07:a5:86:e3:4c:97:a2:
                    90:cc:2f:bf:4e:9a:b4:cc:06:ef:5e:a3:3f:72:fd:
                    51:b8:ad:a4:7a:66:1a:4f:c6:3a:de:b8:5c:e3:31:
                    04:cd:9a:28:b3:ff:5d:24:4e:e8:92:bc:a1:43:f2:
                    d3:33:e4:e4:4b:e3:7b:59:25:48:c6:b8:97:d5:84:
                    53:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:72:41:F7:B5:F8:87:16:72:2D:23:4A:B4:7F:DF:2A:15:34:FE:69
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138343a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:184::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:eb:5e:86:a1:25:43:1a:32:2f:f4:0f:6a:51:77:79:c9:5c:
         e7:b8:7c:dd:2c:0c:44:4e:29:b9:63:77:b1:03:e6:c5:82:ca:
         e4:42:38:27:94:e4:a4:52:c2:f8:a5:27:14:0c:8d:29:0b:30:
         e0:98:5b:dc:36:49:23:a5:f1:8f:8e:e5:65:19:f4:64:ff:23:
         eb:84:57:28:6b:d8:1f:1a:63:78:3a:3d:94:17:4f:80:70:a9:
         22:e2:66:1a:f2:82:b4:07:dd:e4:01:fe:2c:e2:86:77:b2:8f:
         81:8e:fa:d8:2a:6a:d4:20:73:19:4b:71:03:fa:14:18:99:7d:
         0f:94:ea:ed:72:53:96:37:68:f1:3c:e8:e0:3d:33:b2:ce:c1:
         06:bf:eb:c8:fe:7a:04:ee:7f:3c:4d:f4:c8:82:9a:95:1d:98:
         74:6a:68:94:78:3f:af:33:df:9a:33:91:f5:ad:a1:1e:2d:54:
         8b:93:9c:22:a3:6c:d4:32:48:84:04:dc:35:db:39:dc:30:5e:
         41:62:15:51:ba:b7:9b:56:e7:73:c2:29:d5:e6:48:e8:85:fe:
         e2:d6:27:0e:bd:db:e7:65:0f:c0:3a:6a:c3:7a:32:f1:59:89:
         67:87:82:17:ad:21:32:ba:a6:2b:b4:be:24:97:fd:b2:2a:a2:
         d6:47:3c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:50:59 2025 by rpki-client