Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a31333a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a31333a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          Doxx0w0FuEsOFgJ1BNn3ZXbn7UeGopD0ndaFklWC3c0=
Subject key identifier:   20:13:49:F6:44:B2:5A:77:D0:30:4D:D9:42:EB:3F:FC:43:58:8E:7E
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       3A1A81A04D383C0F78E81C8143A502249B4BF128
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a31333a3a2f34382d3438203d3e203534313438.roa
Signing time:             Fri 13 Jun 2025 01:59:45 +0000
ROA not before:           Fri 13 Jun 2025 01:54:45 +0000
ROA not after:            Fri 12 Jun 2026 01:59:45 +0000
asID:                     54148
IP address blocks:        2602:fa43:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:1a:81:a0:4d:38:3c:0f:78:e8:1c:81:43:a5:02:24:9b:4b:f1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Jun 13 01:54:45 2025 GMT
            Not After : Jun 12 01:59:45 2026 GMT
        Subject: CN=201349F644B25A77D0304DD942EB3FFC43588E7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4d:25:81:64:6d:ab:84:78:e5:44:7c:27:98:
                    16:4d:0e:d1:ad:99:cf:d0:f0:e3:3a:0a:1d:b9:5e:
                    09:37:f0:75:77:59:bf:f7:41:df:bb:17:75:ae:75:
                    5a:fa:69:67:8e:ef:8b:de:86:26:63:2c:bf:e1:9b:
                    a5:89:d7:1c:69:ab:26:c6:e0:a9:bd:3a:91:7f:e1:
                    eb:a5:0c:e9:00:2e:ee:9e:16:2a:c9:92:44:2a:e3:
                    62:0d:08:bf:d0:74:e9:54:d0:6f:2f:2b:e0:5c:0e:
                    82:94:90:fc:8e:0a:7c:ce:04:da:7b:db:08:49:da:
                    19:ab:9a:dd:28:a4:5b:ef:e3:6c:b4:42:e4:58:75:
                    16:71:a4:18:3f:ba:c4:c1:b4:11:52:78:02:ef:25:
                    08:77:a5:f6:64:9e:f9:6b:da:a7:53:82:28:28:c7:
                    05:20:7c:3d:19:43:69:4a:cb:f6:ea:b3:31:22:6f:
                    06:ee:b3:0d:50:46:30:ee:0b:8b:47:0e:41:94:c7:
                    85:89:50:3c:f9:f1:8a:10:2e:75:8e:f0:97:6d:7f:
                    8e:e6:9e:ce:eb:61:8c:22:04:ce:d2:fd:75:14:58:
                    7e:00:71:0e:a4:8d:12:02:bf:73:7e:0d:f2:7e:24:
                    da:64:05:fc:18:ce:93:13:f7:5e:be:dd:56:cf:16:
                    cd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:13:49:F6:44:B2:5A:77:D0:30:4D:D9:42:EB:3F:FC:43:58:8E:7E
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a31333a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:ca:53:34:88:c6:0f:2e:48:86:aa:15:37:47:c8:72:a4:85:
         17:21:ef:df:42:d7:1e:bf:f3:0c:ae:5e:74:01:bf:5d:84:97:
         4b:f2:30:06:f4:67:f6:40:3e:88:dd:37:da:47:7f:46:0b:ab:
         57:ed:67:fa:8e:35:2f:46:9a:ce:c7:7a:6f:5c:c7:a1:ef:21:
         b5:8d:4b:4a:7c:86:fd:83:12:86:b3:97:ac:2a:75:16:c1:74:
         21:cb:75:f8:63:0b:3e:02:a1:7c:f6:dc:d5:2d:b4:ef:47:96:
         4e:28:02:4d:1e:95:2c:04:3a:b2:a6:e6:1b:38:38:77:90:62:
         53:a0:e3:71:6a:63:bc:73:0c:92:aa:da:31:0b:e6:c1:bf:73:
         d7:76:ae:9e:2c:22:8c:0d:a3:2a:f3:26:08:b6:e9:4b:95:c1:
         f1:61:2a:5e:d2:de:02:7e:b3:93:2a:28:fd:c0:79:64:21:c8:
         c5:23:6e:71:4f:15:23:23:1b:ca:43:1f:19:8a:d2:5d:32:70:
         8c:e7:b0:da:67:21:68:d1:70:ff:2d:5e:f3:79:2e:52:db:cd:
         21:e2:90:85:a8:3f:7a:40:01:7a:02:25:57:5e:25:05:cb:c9:
         3b:3f:be:58:c2:ec:18:6a:f6:b9:25:01:65:42:d2:8b:04:92:
         fb:59:29:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:10:47 2025 by rpki-client