Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3130633a3a2f34382d3438203d3e20313430363832.roa
File:                     323630323a663962613a3130633a3a2f34382d3438203d3e20313430363832.roa (raw, json)
Hash identifier:          fcuwzxDSUe05Y3jOQdUEgUUlIzc4YpoiP5a1OTUazUg=
Subject key identifier:   4B:03:CA:D4:9C:C5:71:E7:D2:49:A1:1B:55:FD:65:6D:39:58:7F:8E
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       65FEB2FA902C19D3B646D57B9288E301559EC9CC
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3130633a3a2f34382d3438203d3e20313430363832.roa
Signing time:             Wed 16 Jul 2025 09:13:35 +0000
ROA not before:           Wed 16 Jul 2025 09:08:35 +0000
ROA not after:            Wed 15 Jul 2026 09:13:35 +0000
asID:                     140682
IP address blocks:        2602:f9ba:10c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:fe:b2:fa:90:2c:19:d3:b6:46:d5:7b:92:88:e3:01:55:9e:c9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jul 16 09:08:35 2025 GMT
            Not After : Jul 15 09:13:35 2026 GMT
        Subject: CN=4B03CAD49CC571E7D249A11B55FD656D39587F8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3a:37:c6:9e:cd:e4:07:56:9c:4f:5a:b9:4c:
                    0e:7e:09:5d:b4:e3:1c:18:1e:89:bf:8b:69:6d:60:
                    a3:0e:ba:2b:ca:5d:c2:e7:9a:8b:7b:44:31:37:41:
                    e6:71:a3:77:e3:50:1a:01:17:69:5a:24:8a:c6:15:
                    5f:1b:7b:4d:0c:e9:24:34:a4:4a:9f:68:16:95:17:
                    2f:c5:67:87:29:0d:c3:61:d2:b5:21:c9:81:ce:1f:
                    e1:fe:f4:da:03:fd:fa:f0:b2:40:14:ed:75:a7:0d:
                    61:ba:d5:8c:b9:75:05:78:61:04:8e:c4:15:3d:e8:
                    86:02:23:06:9f:8f:99:d0:50:95:91:bc:68:2d:6a:
                    84:e4:54:5b:52:87:21:98:6e:63:25:1e:ae:cf:82:
                    74:4f:15:0b:ed:97:c9:a9:36:64:33:b1:31:d3:57:
                    4f:35:4d:34:17:95:26:4b:0e:75:40:ce:44:82:fc:
                    b9:a7:4e:b7:2a:d0:b5:e0:0b:27:40:85:3e:6b:70:
                    b3:b1:0a:a2:ff:50:8c:94:0c:bd:9f:38:9a:79:be:
                    6a:79:ce:8e:69:c5:d2:1a:73:b5:8a:4b:a1:3d:ad:
                    ba:c0:7b:55:37:00:dd:f4:1a:ff:63:a6:c5:51:fe:
                    f7:a1:d9:70:cd:a9:10:36:6a:b4:3f:84:a3:07:2e:
                    82:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:03:CA:D4:9C:C5:71:E7:D2:49:A1:1B:55:FD:65:6D:39:58:7F:8E
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3130633a3a2f34382d3438203d3e20313430363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:10c::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:cf:10:d5:8a:98:c9:a6:20:ee:ae:fb:a2:1d:0f:b4:ec:85:
         39:70:fa:f1:1f:e4:83:07:9c:43:7e:85:2b:5d:49:7c:b9:00:
         57:6f:78:b7:a6:e9:b8:d1:22:a9:76:bf:b3:8d:42:5e:ec:9b:
         56:15:66:ea:95:07:42:a1:3d:dd:96:38:7e:42:b1:26:ee:33:
         96:4d:36:6d:e5:cd:10:78:7b:12:6d:73:99:78:17:01:6b:2f:
         85:49:76:ff:5d:4c:09:b4:83:fc:21:d9:95:0c:f6:02:01:2a:
         9c:1b:21:9a:b5:fe:ad:c9:99:a6:b2:ca:d9:49:16:b7:6a:0f:
         81:da:98:2f:fc:c5:87:5a:6a:ae:75:eb:33:25:0b:c0:36:36:
         f3:53:8d:ec:a8:ac:12:a9:21:0c:e7:ce:69:92:03:73:a5:bc:
         7b:2c:10:88:4c:aa:74:73:74:38:f5:fe:ce:4c:a3:d5:c9:47:
         91:e5:54:4f:1f:7d:0b:c8:98:7e:f0:6a:f9:c4:fb:17:8b:48:
         d7:b7:fa:ed:66:62:0d:ea:e7:d1:b3:a0:88:49:f6:d9:5d:c9:
         56:59:9b:f6:f7:dd:de:f0:68:21:ec:69:bd:d2:f1:1a:b3:36:
         dc:e4:af:d0:69:fd:c0:f0:ff:48:1d:50:c4:04:d1:10:dc:0c:
         b7:7a:38:73
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUZf6y+pAsGdO2RtV7kojjAVWeycwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGQ4YTY3MmRkNzk2ZTVhZmQ5NTg3NmU5YjU2ODU2NWFl
ZjJiMGI3NmI4MzgyZWEyMmEwHhcNMjUwNzE2MDkwODM1WhcNMjYwNzE1MDkxMzM1
WjAzMTEwLwYDVQQDEyg0QjAzQ0FENDlDQzU3MUU3RDI0OUExMUI1NUZENjU2RDM5
NTg3RjhFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7To3xp7N5AdW
nE9auUwOfgldtOMcGB6Jv4tpbWCjDroryl3C55qLe0QxN0HmcaN341AaARdpWiSK
xhVfG3tNDOkkNKRKn2gWlRcvxWeHKQ3DYdK1IcmBzh/h/vTaA/368LJAFO11pw1h
utWMuXUFeGEEjsQVPeiGAiMGn4+Z0FCVkbxoLWqE5FRbUochmG5jJR6uz4J0TxUL
7ZfJqTZkM7Ex01dPNU00F5UmSw51QM5Egvy5p063KtC14AsnQIU+a3CzsQqi/1CM
lAy9nziaeb5qec6OacXSGnO1ikuhPa26wHtVNwDd9Br/Y6bFUf73odlwzakQNmq0
P4SjBy6CXwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFEsDytScxXHn0kmhG1X9ZW05
WH+OMB8GA1UdIwQYMBaAFHa/RHyTUISUnbBG/3c4seV8gk/5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzlhNjg5NjRmNWZmNjQwZWJhZDEwMGRlZWE3YzliYTQ2LzEv
NzZCRjQ0N0M5MzUwODQ5NDlEQjA0NkZGNzczOEIxRTU3QzgyNEZGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzhkMzdhMDcyLTE1YWUtNDkwNS04MTBlLTk5MWZjNjIwMWI0NS84ZDhh
NjcyZGQ3OTZlNWFmZDk1ODc2ZTliNTY4NTY1YWVmMmIwYjc2YjgzODJlYTIyYS5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS85YTY4OTY0ZjVmZjY0MGViYWQxMDBk
ZWVhN2M5YmE0Ni8xLzMyMzYzMDMyM2E2NjM5NjI2MTNhMzEzMDYzM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzEzNDMwMzYzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5ugEMMA0G
CSqGSIb3DQEBCwUAA4IBAQCBzxDVipjJpiDurvuiHQ+07IU5cPrxH+SDB5xDfoUr
XUl8uQBXb3i3pum40SKpdr+zjUJe7JtWFWbqlQdCoT3dljh+QrEm7jOWTTZt5c0Q
eHsSbXOZeBcBay+FSXb/XUwJtIP8IdmVDPYCASqcGyGatf6tyZmmssrZSRa3ag+B
2pgv/MWHWmqudeszJQvANjbzU43sqKwSqSEM585pkgNzpbx7LBCITKp0c3Q49f7O
TKPVyUeR5VRPH30LyJh+8Gr5xPsXi0jXt/rtZmIN6ufRs6CISfbZXclWWZv2993e
8Ggh7Gm90vEaszbc5K/Qaf3A8P9IHVDEBNEQ3Ay3ejhz
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:43 2025 by rpki-client