Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a373a3a2f34382d3438203d3e20323039313039.roa
File:                     323630323a663764633a373a3a2f34382d3438203d3e20323039313039.roa (raw, json)
Hash identifier:          Q3yONVjVhjvIliDp/89mdYJPnYy4O2mW7tuQBoqGry8=
Subject key identifier:   37:61:7B:8E:BA:F3:3E:34:55:D1:85:5C:A2:C4:39:BF:8B:A2:FB:E3
Certificate issuer:       /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial:       274549690507A2A2D1817FFD3620DCEF6494BE45
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a373a3a2f34382d3438203d3e20323039313039.roa
Signing time:             Mon 27 Oct 2025 15:00:26 +0000
ROA not before:           Mon 27 Oct 2025 14:55:26 +0000
ROA not after:            Mon 26 Oct 2026 15:00:26 +0000
asID:                     209109
IP address blocks:        2602:f7dc:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:45:49:69:05:07:a2:a2:d1:81:7f:fd:36:20:dc:ef:64:94:be:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
        Validity
            Not Before: Oct 27 14:55:26 2025 GMT
            Not After : Oct 26 15:00:26 2026 GMT
        Subject: CN=37617B8EBAF33E3455D1855CA2C439BF8BA2FBE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2e:5d:c2:02:01:9b:15:93:2f:c3:c8:0a:be:
                    3d:60:dd:02:1a:c9:80:4e:33:47:44:db:fd:06:44:
                    5a:bc:9f:44:14:61:b9:52:27:3a:b1:56:c4:73:d1:
                    71:50:06:72:0f:90:58:cc:ac:a3:0d:a9:8d:c6:e9:
                    3e:e6:74:79:a0:d5:a0:04:56:5d:0f:c1:32:d2:43:
                    38:b9:74:27:d1:aa:34:cb:2b:47:ad:4b:63:a8:f1:
                    15:ee:48:9e:77:10:27:04:75:25:b5:0e:11:20:ea:
                    dc:8a:4a:45:22:59:c0:9e:f7:ec:e1:2f:b0:a7:9a:
                    44:c5:f5:d4:38:6a:71:e7:76:c2:af:31:77:df:a0:
                    dd:bc:df:bd:b6:80:6c:bf:bd:22:49:d7:f4:75:7a:
                    75:6e:b7:f2:97:8c:3b:11:94:f5:f7:e8:c1:80:77:
                    5a:f6:c7:6f:b4:b8:32:ea:ed:ec:f3:c7:0f:e0:4a:
                    72:c7:c7:41:ff:15:d5:61:f1:20:30:4a:32:2e:70:
                    a5:92:a4:81:fc:24:a3:70:f7:d6:aa:23:8c:06:a1:
                    42:50:d4:c0:0b:13:cd:5c:5a:be:e4:02:0a:47:3e:
                    78:46:e0:c7:16:28:c0:32:2e:1c:7b:c4:38:7f:24:
                    b6:47:e2:78:09:b7:9a:f7:a4:51:f0:8b:35:fe:3b:
                    aa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:61:7B:8E:BA:F3:3E:34:55:D1:85:5C:A2:C4:39:BF:8B:A2:FB:E3
            X509v3 Authority Key Identifier:
                keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a373a3a2f34382d3438203d3e20323039313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7dc:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:10:6f:27:bc:cc:3d:1a:f3:54:50:44:67:8a:d1:3c:64:0a:
         3d:35:ee:45:0e:c8:d0:ab:84:1c:8b:0c:d9:21:0c:98:05:7c:
         c4:83:b5:e2:0f:ac:bc:c8:3b:81:00:31:64:1c:0d:61:0d:3c:
         88:e3:e2:8b:bf:62:55:9c:ae:9f:2b:99:f3:e0:c3:dc:c0:2f:
         dd:dc:5e:34:21:9d:f9:69:7e:03:43:9e:a7:d1:95:bd:8f:9f:
         68:18:19:21:64:d7:1d:12:2b:7c:56:e2:06:ad:3c:00:fb:e0:
         14:81:aa:04:4e:5b:cf:a1:20:b7:9b:75:5f:f4:74:07:9d:c4:
         fa:a0:8a:57:fd:d4:61:a5:cb:7c:84:d1:9a:21:a2:e5:0d:02:
         3e:80:62:f2:ca:e7:22:c1:ce:dd:e3:fd:fe:c4:5d:19:2f:94:
         cd:36:01:07:96:9e:cc:d2:40:09:c1:db:e4:03:9c:ea:a3:c3:
         db:3e:52:f4:58:fd:18:cd:e9:01:51:cb:e0:27:a2:6b:e0:de:
         8e:63:3b:00:ee:65:60:32:34:ed:12:38:46:71:e4:cc:dd:3e:
         58:07:82:19:02:b6:d7:0a:10:7a:ad:90:b5:25:b1:a5:30:69:
         4a:9a:8a:08:f1:12:d8:a3:23:f1:b2:47:19:40:ed:d2:de:8b:
         10:14:79:26
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUJ0VJaQUHoqLRgX/9NiDc72SUvkUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMGNjODU3ZDA1ZWZiYjM1MDIzMDUyMGQwOGM4ZDdmNDVl
MzRlM2JmZjNjYjUxNmU1NTYwHhcNMjUxMDI3MTQ1NTI2WhcNMjYxMDI2MTUwMDI2
WjAzMTEwLwYDVQQDEygzNzYxN0I4RUJBRjMzRTM0NTVEMTg1NUNBMkM0MzlCRjhC
QTJGQkUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi5dwgIBmxWT
L8PICr49YN0CGsmATjNHRNv9BkRavJ9EFGG5Uic6sVbEc9FxUAZyD5BYzKyjDamN
xuk+5nR5oNWgBFZdD8Ey0kM4uXQn0ao0yytHrUtjqPEV7kiedxAnBHUltQ4RIOrc
ikpFIlnAnvfs4S+wp5pExfXUOGpx53bCrzF336DdvN+9toBsv70iSdf0dXp1brfy
l4w7EZT19+jBgHda9sdvtLgy6u3s88cP4Epyx8dB/xXVYfEgMEoyLnClkqSB/CSj
cPfWqiOMBqFCUNTACxPNXFq+5AIKRz54RuDHFijAMi4ce8Q4fyS2R+J4Cbea96RR
8Is1/juqZQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFDdhe4668z40VdGFXKLEOb+L
ovvjMB8GA1UdIwQYMBaAFKsu+I8kdJ9aEg363mfJGOTHEMU+MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyOTA4YjNlMjg1MTRhLzAv
QUIyRUY4OEYyNDc0OUY1QTEyMERGQURFNjdDOTE4RTRDNzEwQzUzRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1L2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2LWQxM2JlOTdkOTFhMi8wY2M4
NTdkMDVlZmJiMzUwMjMwNTIwZDA4YzhkN2Y0NWUzNGUzYmZmM2NiNTE2ZTU1Ni5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5Mjkw
OGIzZTI4NTE0YS8wLzMyMzYzMDMyM2E2NjM3NjQ2MzNhMzczYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMjMwMzkzMTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvfcAAcwDQYJKoZI
hvcNAQELBQADggEBALgQbye8zD0a81RQRGeK0TxkCj017kUOyNCrhByLDNkhDJgF
fMSDteIPrLzIO4EAMWQcDWENPIjj4ou/YlWcrp8rmfPgw9zAL93cXjQhnflpfgND
nqfRlb2Pn2gYGSFk1x0SK3xW4gatPAD74BSBqgROW8+hILebdV/0dAedxPqgilf9
1GGly3yE0ZohouUNAj6AYvLK5yLBzt3j/f7EXRkvlM02AQeWnszSQAnB2+QDnOqj
w9s+UvRY/RjN6QFRy+Anomvg3o5jOwDuZWAyNO0SOEZx5MzdPlgHghkCttcKEHqt
kLUlsaUwaUqaigjxEtijI/GyRxlA7dLeixAUeSY=
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:05:18 2025 by rpki-client