Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a31303a3a2f34382d3438203d3e203136393039.roa
File:                     323630323a663738613a31303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          VtaltjXeX9qRKB24Jxzmt/mzYPmd3OfBG3RWRwWz8vk=
Subject key identifier:   69:AB:9A:F1:75:19:89:F8:58:55:37:5E:47:F7:BF:74:A2:64:04:D8
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       D16727280B7407F7D050AD12F894B559287592
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a31303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 14 Jun 2025 20:17:06 +0000
ROA not before:           Sat 14 Jun 2025 20:12:06 +0000
ROA not after:            Sat 13 Jun 2026 20:17:06 +0000
asID:                     16909
IP address blocks:        2602:f78a:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 19:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d1:67:27:28:0b:74:07:f7:d0:50:ad:12:f8:94:b5:59:28:75:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Jun 14 20:12:06 2025 GMT
            Not After : Jun 13 20:17:06 2026 GMT
        Subject: CN=69AB9AF1751989F85855375E47F7BF74A26404D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:94:f5:5d:60:a1:98:29:58:76:8c:cf:82:25:
                    37:5c:c5:03:f7:f8:ce:6c:12:c5:4b:a3:16:f9:72:
                    fd:93:7d:34:7c:46:a4:61:18:e3:8a:fb:41:17:1c:
                    2c:0f:3f:a1:be:19:5a:69:1c:49:a6:a5:70:e6:58:
                    ce:8c:fc:36:81:f7:6d:49:a2:5b:f0:8c:3d:51:4f:
                    fa:46:5b:44:a4:e3:17:f3:68:2b:df:b3:ab:22:54:
                    da:ac:67:bf:6b:58:02:30:12:9c:56:3e:38:d2:e5:
                    88:35:2a:f5:ca:76:9a:e8:71:a4:7c:95:af:1d:18:
                    0b:56:b2:11:95:6d:3c:ea:ad:26:a3:8f:05:54:a2:
                    29:7c:b2:ec:7c:9e:67:d7:e9:a7:69:16:b5:cd:c4:
                    d9:84:cc:c0:cc:1a:84:4e:58:ec:3b:39:bd:4e:98:
                    69:d7:c0:90:9c:33:8b:e1:8b:8b:3e:64:0a:d1:a5:
                    8f:98:ff:20:57:5a:cb:f2:54:17:73:00:89:a4:87:
                    84:7d:a3:49:30:48:9f:6a:e4:03:01:57:9e:6b:1a:
                    25:af:4a:22:5e:79:49:f1:0e:22:4f:6e:39:79:78:
                    41:ef:45:0a:08:fd:7d:05:17:39:43:b4:2e:b0:f7:
                    67:dd:5c:05:aa:d3:6e:db:f9:ef:03:fb:ec:88:39:
                    fb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AB:9A:F1:75:19:89:F8:58:55:37:5E:47:F7:BF:74:A2:64:04:D8
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a31303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:ec:6a:e0:da:c3:b2:39:41:4d:f6:b5:c5:94:f6:1e:54:c5:
         27:6a:4d:9e:4c:ab:6c:75:4a:cd:04:53:d8:80:85:b1:8a:70:
         d9:e4:00:0b:1f:41:14:9e:4f:c4:db:31:b7:5a:d8:5e:2f:5d:
         9a:b5:e0:8f:58:b6:57:b1:cd:d5:03:20:7b:e8:a4:9e:9a:5b:
         e2:47:b4:29:ba:08:76:79:62:c5:61:5b:00:eb:23:3e:c1:06:
         b8:78:2c:05:f5:18:7f:c3:43:24:89:7d:55:d2:eb:39:e6:ba:
         de:5e:5a:a5:0b:48:70:1e:97:ab:1d:4a:df:a4:19:53:ff:14:
         bb:f0:73:35:b0:4d:08:31:fc:27:e1:38:b0:48:7b:cd:9d:6b:
         62:b4:c0:40:db:a4:4a:9d:aa:d2:7f:6f:78:98:94:51:6a:46:
         96:b3:0b:06:df:8a:bf:22:3d:e0:75:38:8b:78:79:8d:a5:ec:
         6c:17:ef:62:76:b5:5a:56:40:28:84:95:1a:b7:4c:49:a7:d8:
         13:31:a7:1b:eb:27:87:28:89:a9:1d:22:08:8a:e1:bd:bc:ca:
         6c:1c:c5:1e:10:39:3a:55:92:09:f3:92:87:a9:59:70:e2:18:
         80:2f:35:a5:60:35:4d:8b:bf:27:03:70:17:dc:42:42:5c:ed:
         ae:0a:22:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:21:41 2025 by rpki-client