Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3130303a3a2f34302d3430203d3e203137313339.roa
File:                     323630373a666361383a3130303a3a2f34302d3430203d3e203137313339.roa (raw, json)
Hash identifier:          0qm9gtZ2V6H3o4ZPzo0IX01Kq9zInw34dQGn736kbZQ=
Subject key identifier:   B9:59:A3:37:FA:B8:74:2E:B4:75:01:41:40:22:BC:04:12:2D:CE:95
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       1552ACBE2113C6A1E40EE978ABA35C83988007FA
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3130303a3a2f34302d3430203d3e203137313339.roa
Signing time:             Wed 16 Jul 2025 18:51:48 +0000
ROA not before:           Wed 16 Jul 2025 18:46:48 +0000
ROA not after:            Wed 15 Jul 2026 18:51:48 +0000
asID:                     17139
IP address blocks:        2607:fca8:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:52:ac:be:21:13:c6:a1:e4:0e:e9:78:ab:a3:5c:83:98:80:07:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul 16 18:46:48 2025 GMT
            Not After : Jul 15 18:51:48 2026 GMT
        Subject: CN=B959A337FAB8742EB47501414022BC04122DCE95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:46:4e:61:b4:8b:0d:fc:df:c9:57:eb:da:76:
                    80:44:d5:13:d2:38:c9:bb:b0:11:c3:e0:83:78:2e:
                    c0:05:8d:72:c6:04:5e:ea:14:6e:ca:96:15:bc:97:
                    73:8f:21:81:cc:06:16:97:18:26:c9:c8:87:48:eb:
                    00:41:cc:a9:b6:f1:8e:87:93:49:75:fa:53:1d:54:
                    eb:0a:b9:f5:ee:fd:23:ee:0e:71:5e:24:52:3c:3f:
                    77:8f:d4:97:9b:63:f6:e0:24:d9:f6:cb:3d:b7:a7:
                    4f:d7:bc:37:30:47:76:30:8c:c0:a3:1c:4d:de:b0:
                    35:0d:f9:c7:57:bc:bb:fe:08:3a:16:1b:d1:8a:b9:
                    c3:b7:44:03:28:ab:77:d3:42:ed:1f:04:84:00:a2:
                    a8:80:d5:b1:d2:ef:83:c0:a1:93:85:46:e1:c6:ab:
                    36:37:c5:cf:cb:94:e7:dd:52:5c:91:89:54:15:c8:
                    54:61:9c:30:45:b5:c0:3c:51:eb:74:f3:e4:3b:f2:
                    8a:4c:6f:76:10:33:1a:a1:ba:2c:7c:2a:2f:e3:47:
                    28:da:c2:24:fe:a3:46:5b:8a:d9:08:41:17:08:41:
                    7c:a0:03:ba:22:e2:b6:7a:f8:07:d1:5b:83:85:7a:
                    a3:e5:24:2b:18:d8:b8:b3:64:f2:ac:4d:91:0c:37:
                    d5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:59:A3:37:FA:B8:74:2E:B4:75:01:41:40:22:BC:04:12:2D:CE:95
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3130303a3a2f34302d3430203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fca8:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         24:29:c1:1d:1c:d4:2a:bd:23:fe:7b:3e:c1:2a:a5:ee:a7:72:
         ef:07:6b:4c:8e:e7:0f:6a:00:cf:04:24:b6:03:dd:17:72:6a:
         38:8e:71:7e:c7:61:d5:7f:b3:e7:02:0c:26:b8:a8:7d:7a:19:
         84:e1:b7:3b:67:6e:f9:8b:9c:af:4b:66:8e:c6:7a:e5:54:d7:
         60:2f:69:ce:b8:0c:ed:92:1e:57:19:63:f6:95:73:d5:ce:5e:
         18:4b:88:5b:e8:2e:fe:17:98:58:54:36:15:74:ec:77:8b:3f:
         4c:a0:ca:11:f7:d1:36:b7:26:21:c9:71:03:36:e3:1a:3c:6a:
         b9:14:70:dc:1b:f5:55:35:49:e8:b3:0e:32:85:6b:48:dc:b2:
         ee:16:7f:d3:5f:5b:07:43:b0:c6:43:81:34:f3:d1:99:06:2b:
         12:c6:e2:38:06:7f:f2:4c:6c:2d:2c:50:b1:fb:42:d1:52:54:
         3c:fc:01:c6:6a:0a:64:0f:2e:e3:8f:a5:0e:86:e2:28:b7:99:
         fe:74:b4:3a:82:7c:eb:c1:9c:71:c2:b0:be:22:ba:b0:6b:83:
         c7:01:fb:80:53:12:ec:0b:05:f9:59:1f:b3:14:a9:1f:17:92:
         2a:49:c5:db:d1:24:50:88:0b:23:92:90:7e:c6:31:26:f7:a6:
         2e:85:6d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:16:52 2025 by rpki-client