Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/323630323a3239313a61613a3a2f34382d3438203d3e203139333330.roa
File:                     323630323a3239313a61613a3a2f34382d3438203d3e203139333330.roa (raw, json)
Hash identifier:          DvmdL0xTv6HeLZrQ7dLuK33f6EXSTxGj++sY2iJvstA=
Subject key identifier:   CD:D1:67:A1:37:24:86:0C:9C:F9:D0:F7:D8:80:04:5B:E1:9B:69:01
Certificate issuer:       /CN=0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323
Certificate serial:       4C5A766D19824E9D538A9D5AD62372A2075352D0
Authority key identifier: 9C:94:AA:A9:AE:FF:B5:82:9D:3F:7E:80:33:9F:4A:33:EC:AC:54:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/323630323a3239313a61613a3a2f34382d3438203d3e203139333330.roa
Signing time:             Wed 16 Jul 2025 09:13:33 +0000
ROA not before:           Wed 16 Jul 2025 09:08:33 +0000
ROA not after:            Wed 15 Jul 2026 09:13:33 +0000
asID:                     19330
IP address blocks:        2602:291:aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:47:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5a:76:6d:19:82:4e:9d:53:8a:9d:5a:d6:23:72:a2:07:53:52:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323
        Validity
            Not Before: Jul 16 09:08:33 2025 GMT
            Not After : Jul 15 09:13:33 2026 GMT
        Subject: CN=CDD167A13724860C9CF9D0F7D880045BE19B6901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:7c:3c:b2:22:92:11:c5:63:73:ba:00:16:
                    a6:da:41:08:69:d9:7c:7e:bc:33:02:5b:ab:1d:46:
                    9a:3b:b0:4c:80:03:24:f3:f8:e9:a3:84:38:ff:b8:
                    5d:b8:27:25:73:c0:55:f6:f4:98:b2:23:70:b5:8d:
                    b9:f9:13:ea:33:a1:16:0a:87:b9:02:0e:83:e4:c5:
                    ec:f0:83:0e:5d:62:91:27:f2:ff:e8:39:13:84:2e:
                    7b:37:33:78:d0:7d:7b:5a:1a:f0:cc:e6:e7:44:7a:
                    c8:d8:bf:58:70:1d:d3:ff:ca:41:de:9a:a2:f2:7d:
                    1b:20:7b:e0:81:2c:4b:6c:8e:ef:db:e9:e8:b6:65:
                    d7:97:9a:57:ff:55:bf:05:6c:74:53:02:ef:fd:6b:
                    10:6e:24:6d:82:5e:f8:21:96:2b:bf:c5:78:86:2a:
                    58:50:dc:0f:d2:5e:a0:89:77:92:5d:35:94:5a:90:
                    dc:34:a7:62:34:b1:38:7b:cd:ac:e2:a1:a1:b1:60:
                    98:ce:f5:97:05:d9:f3:7d:ee:8d:90:3b:21:2d:03:
                    ae:e5:b8:58:b3:7b:6f:5d:17:26:fa:f8:ce:67:4f:
                    0a:5d:30:49:fd:ee:cf:5b:b9:32:06:83:60:2c:c7:
                    57:90:3a:a5:8e:a1:1b:40:bc:24:ca:7c:f2:b5:60:
                    bf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D1:67:A1:37:24:86:0C:9C:F9:D0:F7:D8:80:04:5B:E1:9B:69:01
            X509v3 Authority Key Identifier:
                keyid:9C:94:AA:A9:AE:FF:B5:82:9D:3F:7E:80:33:9F:4A:33:EC:AC:54:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/323630323a3239313a61613a3a2f34382d3438203d3e203139333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:291:aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:b9:13:f4:38:62:91:eb:90:7b:c8:8d:40:cc:f0:9e:6f:50:
         b0:f0:44:51:db:e3:6f:46:ec:67:5e:c4:08:e4:e9:f6:ea:8e:
         33:54:12:ac:12:c3:17:6a:30:30:3c:3d:da:4e:f8:87:1d:25:
         ec:28:a1:4a:2a:e1:c8:2b:68:f9:41:d0:cd:34:81:a6:55:b5:
         b9:fb:50:06:5c:b7:4d:db:5c:16:d9:9c:80:b0:0c:fc:f3:7f:
         46:f1:6d:a8:4f:d1:3e:7b:20:3c:e1:b3:5b:3a:1d:45:03:56:
         4e:a4:d2:90:a0:29:ab:2d:fb:67:56:c8:88:96:45:51:16:d3:
         0f:a3:6e:1c:5c:ef:35:cc:30:ce:e2:d5:98:f5:3c:03:76:88:
         ea:e1:a0:18:30:aa:8f:16:74:c7:7e:67:87:96:cd:be:45:be:
         7a:a8:3d:99:36:d2:ef:99:da:de:e0:a2:cf:db:d2:29:bd:95:
         ca:8c:46:db:a0:b3:44:c0:61:9c:15:27:cb:55:69:74:d7:d4:
         5e:7a:75:77:d8:67:bf:41:a6:0a:aa:fc:e0:9b:88:b9:a6:f5:
         d0:6c:01:f5:4c:3c:82:c0:39:8f:d2:83:64:68:49:84:17:34:
         e6:6b:80:15:b5:04:6b:ae:f8:42:e1:4b:a2:b1:29:ec:0b:b8:
         8a:da:d2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:23:52 2025 by rpki-client