Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3130633a3a2f34382d3438203d3e20313430363832.roa
File:                     323630323a663962613a3130633a3a2f34382d3438203d3e20313430363832.roa (raw, json)
Hash identifier:          Ee7W8FtMAMf8APjoTXQJjdflokC9BhZtmRLlaPWJkTk=
Subject key identifier:   F5:5A:75:89:2E:EC:52:DF:9E:C0:08:4F:FC:2C:FB:3F:90:40:10:BC
Certificate issuer:       /CN=8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43
Certificate serial:       30A75D6257974932416FD1613141579B5689148F
Authority key identifier: CD:BC:A8:B0:E7:B6:83:42:F6:E8:52:C6:E4:9C:97:62:19:46:8A:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3130633a3a2f34382d3438203d3e20313430363832.roa
Signing time:             Wed 11 Jun 2025 22:33:40 +0000
ROA not before:           Wed 11 Jun 2025 22:28:40 +0000
ROA not after:            Wed 10 Jun 2026 22:33:40 +0000
asID:                     140682
IP address blocks:        2602:f9ba:10c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 10:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a7:5d:62:57:97:49:32:41:6f:d1:61:31:41:57:9b:56:89:14:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43
        Validity
            Not Before: Jun 11 22:28:40 2025 GMT
            Not After : Jun 10 22:33:40 2026 GMT
        Subject: CN=F55A75892EEC52DF9EC0084FFC2CFB3F904010BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8f:44:9c:8a:d5:99:e0:23:19:69:02:e7:36:
                    65:3d:1d:05:4f:ab:60:2a:b4:a9:a6:63:9e:8b:1a:
                    6d:73:2c:03:ba:96:49:eb:c8:46:1c:ae:9d:23:81:
                    57:f6:ad:82:b9:1a:08:d2:d4:d1:f1:be:75:c5:f4:
                    04:ed:5a:cf:e9:35:68:6d:21:10:0a:69:a8:ee:a6:
                    40:af:18:ea:9b:3b:c1:94:02:ea:67:f9:44:2b:7f:
                    ff:c0:47:33:ae:1b:50:71:10:ef:d9:36:b3:26:e1:
                    c5:1c:3a:8b:c4:e5:59:c8:a1:cc:e8:1a:d1:93:3d:
                    1a:39:5e:76:83:00:f2:ed:ea:ee:7d:0e:65:54:e6:
                    e7:e8:ce:7b:ea:06:81:7c:a5:03:bc:6b:08:4d:dd:
                    be:17:e6:12:2e:1e:fb:9f:0c:27:12:b2:5f:84:10:
                    dc:6b:8a:92:22:70:1a:1c:a9:2a:c8:e6:5d:63:2c:
                    c8:84:cf:dc:2d:aa:55:41:b1:cf:73:09:61:41:56:
                    fd:e0:4b:b9:fc:b4:aa:93:48:26:a2:97:10:48:ad:
                    5e:10:84:0c:6e:2a:80:27:63:7c:84:4d:c9:cd:83:
                    bd:bd:ff:e8:8f:72:91:e1:b0:86:51:2b:a6:85:1d:
                    da:eb:2f:53:04:bf:d4:24:e6:ad:ca:8c:9c:eb:88:
                    b3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5A:75:89:2E:EC:52:DF:9E:C0:08:4F:FC:2C:FB:3F:90:40:10:BC
            X509v3 Authority Key Identifier:
                keyid:CD:BC:A8:B0:E7:B6:83:42:F6:E8:52:C6:E4:9C:97:62:19:46:8A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3130633a3a2f34382d3438203d3e20313430363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:10c::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:b8:b7:ae:c9:98:26:c9:91:81:8a:97:46:37:37:bd:8a:eb:
         24:c9:a4:15:9b:7e:2a:24:8a:51:52:ab:89:df:38:57:91:7d:
         49:5f:bf:e9:fd:ec:45:7d:3c:18:62:44:2f:65:c8:38:a5:54:
         12:c3:76:6f:98:a8:2f:b0:0e:02:47:7c:35:16:b3:d3:90:62:
         2e:be:3a:06:8a:c1:45:cc:ab:13:dc:1c:69:ee:90:93:b3:2b:
         e0:95:b6:93:3c:e1:34:d0:60:2e:92:27:62:95:58:4e:a0:a4:
         cf:7d:5d:79:dd:e7:1e:66:7d:30:16:bb:8b:f5:6d:9f:e4:00:
         91:df:f8:54:59:6c:21:66:99:2f:f1:25:85:5d:3a:5f:64:c5:
         5c:37:33:60:79:ea:44:72:9e:56:20:1a:35:33:34:cd:65:05:
         f4:91:f7:84:b0:04:15:82:c3:2d:7b:9a:24:67:1b:1b:07:bd:
         eb:2e:28:c0:d4:27:01:05:2e:5b:1d:70:d9:86:e8:7d:f9:83:
         89:d4:e5:d6:57:14:76:28:22:28:4d:fa:49:43:31:3b:68:91:
         a2:a1:8f:30:c3:0c:ce:2c:66:ae:c3:e0:18:9d:0f:1d:e2:f2:
         ba:66:73:64:83:a5:da:2e:51:94:aa:fd:15:f3:7e:6a:48:53:
         c5:7b:28:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:03:06 2025 by rpki-client