Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3530303a3a2f34302d3430203d3e20323133313234.roa
File:                     323630323a663962613a3530303a3a2f34302d3430203d3e20323133313234.roa (raw, json)
Hash identifier:          gEB1kHaoSV+lH6eJkdYlGnNaFyc6oCIhaqRyXZo9y7U=
Subject key identifier:   A2:51:CE:8F:DD:34:EF:69:A5:C9:0A:81:50:8E:23:0C:6E:62:54:5F
Certificate issuer:       /CN=8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43
Certificate serial:       1D8972BF095FCBB232F7FDA4B0FBAA80855213B5
Authority key identifier: CD:BC:A8:B0:E7:B6:83:42:F6:E8:52:C6:E4:9C:97:62:19:46:8A:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3530303a3a2f34302d3430203d3e20323133313234.roa
Signing time:             Wed 11 Jun 2025 22:33:51 +0000
ROA not before:           Wed 11 Jun 2025 22:28:51 +0000
ROA not after:            Wed 10 Jun 2026 22:33:51 +0000
asID:                     213124
IP address blocks:        2602:f9ba:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 10:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:89:72:bf:09:5f:cb:b2:32:f7:fd:a4:b0:fb:aa:80:85:52:13:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43
        Validity
            Not Before: Jun 11 22:28:51 2025 GMT
            Not After : Jun 10 22:33:51 2026 GMT
        Subject: CN=A251CE8FDD34EF69A5C90A81508E230C6E62545F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:3e:47:57:6a:eb:81:95:18:f2:b5:b1:8f:
                    c2:cc:0f:6c:e1:96:84:38:0e:bc:ea:63:ce:78:77:
                    e6:75:cd:b2:60:5a:bc:79:48:6f:17:b8:bf:38:b7:
                    37:ca:e8:bc:32:03:b0:b6:be:c2:b5:2b:e9:55:13:
                    a8:b5:9a:a8:1d:2b:b1:de:af:a5:f3:91:8a:47:93:
                    f1:c1:0e:46:64:72:e0:87:1a:00:ab:52:9b:06:c7:
                    a6:db:f3:ba:a7:6a:09:30:d8:79:3a:40:99:06:01:
                    35:a7:6d:c8:9a:ab:0d:16:0c:d5:42:eb:2a:8d:c9:
                    a4:33:54:e3:5c:d0:df:68:d1:fd:d9:d7:3d:6b:21:
                    45:9c:1b:98:14:11:88:e0:32:00:c4:d9:62:18:53:
                    e0:a4:f3:14:02:e2:6b:b1:2a:b0:4e:c5:59:3d:97:
                    50:d2:c0:30:fb:2b:69:aa:b4:a6:5b:a3:33:bf:15:
                    16:92:46:be:ab:bb:ef:f0:4e:d8:b6:f7:88:86:aa:
                    fe:b4:d1:fb:35:04:ab:b8:cf:de:c3:3b:b9:bd:29:
                    dd:e8:9e:5b:0e:38:71:09:b0:54:61:d9:9c:e9:9c:
                    d9:13:dd:15:31:d0:a2:8c:df:04:32:9b:4f:ae:8e:
                    9b:2e:a2:09:b4:4e:e3:1d:dd:c4:c3:d8:df:ab:df:
                    ae:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:51:CE:8F:DD:34:EF:69:A5:C9:0A:81:50:8E:23:0C:6E:62:54:5F
            X509v3 Authority Key Identifier:
                keyid:CD:BC:A8:B0:E7:B6:83:42:F6:E8:52:C6:E4:9C:97:62:19:46:8A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3530303a3a2f34302d3430203d3e20323133313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:b7:3a:30:f9:6f:7e:34:11:c8:ae:ac:4f:2f:7c:f4:d0:61:
         81:92:e9:e0:6e:92:66:4f:ca:1b:e4:72:c5:83:dd:69:d1:28:
         95:1a:0a:cd:77:da:a4:e4:2a:3f:dd:81:98:c3:4d:f6:cb:eb:
         0b:01:3d:0a:31:d5:2c:24:42:1f:8c:01:88:2a:30:ee:63:bf:
         bd:c3:8a:a8:bb:18:a6:36:e4:04:be:df:d9:b5:af:bf:46:19:
         61:cd:ea:98:d0:37:a8:86:19:67:6a:5c:0f:07:f9:54:8e:64:
         67:59:d6:9b:7f:b2:63:95:79:f6:01:cf:cd:8b:73:c8:4e:e1:
         df:dc:5b:98:63:da:08:78:b8:c4:2d:bb:3c:06:7a:c5:86:bb:
         f9:15:13:ea:d6:a8:ef:82:15:8a:fa:a9:5e:a0:b5:41:2c:69:
         ab:2c:bb:2b:a6:1a:4f:48:c9:73:4f:8d:ff:6c:bb:e3:ff:a2:
         eb:06:25:61:9e:11:d9:39:86:7b:19:d7:ee:d0:5c:c9:4d:08:
         c0:3a:ed:95:ba:40:e9:9b:f1:42:52:61:63:c8:cd:bf:d8:6f:
         b6:89:31:74:e5:66:3c:47:e2:f8:9c:8c:d0:68:dd:96:0b:a7:
         5e:de:cb:b8:43:ed:2a:f5:9b:54:63:7f:f2:fa:24:b2:6b:c0:
         33:4d:d9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:02:56 2025 by rpki-client