Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a62313a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a62313a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          OXeiufpbkMa95MZVtSho0i9+JeDjwMmzMicFYglZyb8=
Subject key identifier:   6F:D9:4D:61:A9:7B:1E:A4:97:9A:B7:28:F4:00:6B:34:30:5D:F0:6D
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       01A99BAFCF0AA88AF1A26B8066B05D12B1C018DC
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a62313a3a2f34382d3438203d3e203534313438.roa
Signing time:             Fri 13 Jun 2025 23:54:20 +0000
ROA not before:           Fri 13 Jun 2025 23:49:20 +0000
ROA not after:            Fri 12 Jun 2026 23:54:20 +0000
asID:                     54148
IP address blocks:        2602:fa43:b1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a9:9b:af:cf:0a:a8:8a:f1:a2:6b:80:66:b0:5d:12:b1:c0:18:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Jun 13 23:49:20 2025 GMT
            Not After : Jun 12 23:54:20 2026 GMT
        Subject: CN=6FD94D61A97B1EA4979AB728F4006B34305DF06D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:12:3d:3a:53:b8:4a:64:8d:78:33:5a:c4:f6:
                    6b:32:9b:a8:99:0e:49:aa:ff:88:34:61:49:4f:1b:
                    d3:1b:23:a6:8d:d9:c1:47:c3:95:ae:43:c9:6e:be:
                    bb:6f:ab:a4:47:cc:05:0d:88:03:36:4e:53:e8:dd:
                    e0:0b:dc:94:5d:a3:4a:f3:e8:1b:ec:2f:d5:8c:3c:
                    a7:6d:c2:03:0f:c3:6c:fd:1b:7d:06:ba:7d:52:b9:
                    a2:92:ac:b9:74:f6:aa:60:2e:a6:49:1e:e0:a9:33:
                    bf:30:fe:0d:80:d8:00:2d:6d:06:57:d9:70:97:66:
                    d7:fa:d6:c5:a8:c0:a2:d2:ba:61:29:cf:c2:07:f8:
                    e7:26:17:8c:bb:53:84:5c:cf:5d:cf:00:47:f8:05:
                    d9:e3:d0:f1:b0:91:07:bd:ff:92:4f:35:ac:4a:0f:
                    b0:28:19:dd:1d:84:87:97:eb:26:15:75:b3:d1:b0:
                    d5:71:65:a4:46:91:c9:1f:dc:f3:19:34:dc:56:0a:
                    3b:86:57:2e:06:85:06:52:e1:77:b2:81:ec:f3:31:
                    c9:71:fa:a0:ed:66:88:24:20:79:37:0b:38:66:16:
                    3d:24:46:70:f6:33:63:ca:a6:8c:88:d3:6d:37:ab:
                    b8:28:b3:c9:2f:a8:a9:e0:54:ad:da:a8:2d:f1:27:
                    5f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D9:4D:61:A9:7B:1E:A4:97:9A:B7:28:F4:00:6B:34:30:5D:F0:6D
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a62313a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:b1::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:6b:21:18:b2:ad:ee:62:e0:de:4e:1d:0c:9c:3b:06:a4:76:
         b3:20:83:bc:c3:24:91:29:6d:06:be:91:da:b2:7f:f1:15:7d:
         5f:78:e6:9c:01:82:29:9e:5b:d6:76:05:3b:5d:89:4d:8f:ae:
         f8:71:1a:9e:09:85:43:55:61:b7:c5:dd:50:0a:2e:98:69:37:
         69:9c:fb:05:fe:fd:88:ab:29:01:4f:61:79:d6:c1:14:8e:02:
         a4:42:5f:3b:41:f9:6d:c0:21:91:2d:1c:db:5b:ff:38:10:63:
         54:35:f0:5b:46:8f:3c:09:44:9c:ca:4c:2a:ba:d5:ac:e2:f4:
         af:0c:67:94:06:ce:45:af:d3:c1:c7:79:e3:53:80:c1:58:2c:
         1c:8c:55:5d:d7:17:0b:e2:b1:b3:05:98:b5:76:21:a3:fa:32:
         e5:f1:e1:d2:ad:34:b6:5d:56:b1:27:bd:aa:42:22:3c:6d:9e:
         13:e6:5a:d8:03:65:d3:a0:9a:df:c5:2a:e3:55:c4:ed:90:23:
         aa:1e:7c:b9:31:d4:28:91:1c:7f:69:be:32:c3:71:4e:64:b3:
         08:eb:0d:15:aa:13:a1:14:9c:5f:10:57:1d:5c:cf:f4:cf:c9:
         83:76:c1:25:81:97:94:5f:78:50:bd:e5:37:b2:fb:64:b7:07:
         3b:ab:7f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:36:19 2025 by rpki-client