Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3530303a3a2f34302d3430203d3e20323133313234.roa
File:                     323630323a663962613a3530303a3a2f34302d3430203d3e20323133313234.roa (raw, json)
Hash identifier:          QduC4ElMNk6kSDyJMxqAOuSobHd2xclGSyuNrCD6Mys=
Subject key identifier:   1C:E5:33:DD:CE:DD:86:E6:88:72:93:00:F0:CC:B3:DA:C1:9A:F9:00
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       2D3BA5E21F0D7650093FFCF79B3858027266B61B
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3530303a3a2f34302d3430203d3e20323133313234.roa
Signing time:             Wed 16 Jul 2025 09:13:38 +0000
ROA not before:           Wed 16 Jul 2025 09:08:38 +0000
ROA not after:            Wed 15 Jul 2026 09:13:38 +0000
asID:                     213124
IP address blocks:        2602:f9ba:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 14:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3b:a5:e2:1f:0d:76:50:09:3f:fc:f7:9b:38:58:02:72:66:b6:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jul 16 09:08:38 2025 GMT
            Not After : Jul 15 09:13:38 2026 GMT
        Subject: CN=1CE533DDCEDD86E688729300F0CCB3DAC19AF900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:99:cf:b1:75:10:62:13:18:46:be:dc:93:cf:
                    0c:eb:0c:42:fc:7a:59:21:7b:ff:b2:ef:1d:b9:07:
                    b4:d1:18:86:d9:03:b4:78:cf:89:c8:7b:95:45:26:
                    30:eb:11:c7:a9:af:84:f2:c4:e2:4d:e3:53:b1:fb:
                    76:7b:8c:b4:68:86:fa:c2:21:30:48:aa:91:65:c4:
                    7d:30:5d:0a:64:33:77:3c:0e:11:1c:ed:e0:30:8c:
                    1b:96:d9:be:69:34:8f:64:d1:1f:2e:23:c0:7e:ee:
                    1c:b0:08:9c:8e:9e:5a:48:88:5b:7b:ea:ac:bb:47:
                    c4:60:ca:f3:58:42:66:0f:ff:e8:da:17:fb:5f:fd:
                    a2:09:bd:c2:13:c2:1c:62:a2:3d:c3:4b:9c:ca:9d:
                    3a:f1:23:42:51:ae:30:7f:95:d6:83:76:e2:6d:3a:
                    99:7e:1e:66:85:29:3d:78:c1:62:15:fb:e9:7b:25:
                    12:68:29:36:2d:fc:7d:a7:6f:ba:19:c8:81:0c:41:
                    f4:70:92:b5:c7:6b:51:0c:e9:b4:5c:14:72:b1:8b:
                    08:d9:c9:fb:f6:89:e4:72:1d:7d:33:36:a5:3b:1c:
                    7b:6c:0e:aa:f4:b0:87:a6:b1:4c:12:0d:ef:ca:aa:
                    57:91:43:d4:ae:27:a0:8b:a0:59:d9:35:42:17:3d:
                    1f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E5:33:DD:CE:DD:86:E6:88:72:93:00:F0:CC:B3:DA:C1:9A:F9:00
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3530303a3a2f34302d3430203d3e20323133313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:dd:c1:80:6a:b5:09:d4:eb:6d:49:67:a4:d3:6e:31:1e:68:
         ca:dc:4c:0c:62:8f:41:fa:32:15:44:4d:99:0f:83:49:d5:01:
         96:5a:40:ea:4c:17:f3:f1:2f:51:08:ac:17:5f:f8:1d:4b:59:
         b9:70:fb:3c:83:7d:e1:10:9b:f7:61:f7:9a:03:7e:20:75:79:
         d4:63:ef:64:b2:4d:91:0f:cd:74:a2:6f:8b:5c:16:e7:d9:57:
         72:ad:c1:e6:89:2d:f2:c6:41:99:e7:03:f9:8a:9c:5b:f0:79:
         28:1e:df:0a:ea:5d:bd:34:45:01:9f:83:65:ec:6b:97:23:b2:
         31:ce:1c:1c:69:62:63:d2:52:3e:33:bb:7d:7e:df:37:b2:e6:
         03:90:29:c8:95:f3:09:5c:45:16:c1:12:5c:8d:fa:64:47:9a:
         65:91:2f:0f:ca:41:c8:44:18:dc:99:47:ec:b0:51:62:d7:ad:
         cd:00:93:03:71:3c:2a:a2:03:95:1d:e6:a1:2e:7d:c6:78:6e:
         45:f8:53:fd:7f:c7:61:9a:a7:f7:08:b7:c4:ae:90:45:5b:75:
         b1:fb:97:99:2f:9a:07:c7:20:c0:1f:f3:e0:8e:8b:86:c5:f1:
         5a:94:fb:73:81:81:45:50:cb:57:2e:53:27:36:69:ea:08:7b:
         55:7c:59:39
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIULTul4h8NdlAJP/z3mzhYAnJmthswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGQ4YTY3MmRkNzk2ZTVhZmQ5NTg3NmU5YjU2ODU2NWFl
ZjJiMGI3NmI4MzgyZWEyMmEwHhcNMjUwNzE2MDkwODM4WhcNMjYwNzE1MDkxMzM4
WjAzMTEwLwYDVQQDEygxQ0U1MzNERENFREQ4NkU2ODg3MjkzMDBGMENDQjNEQUMx
OUFGOTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5nPsXUQYhMY
Rr7ck88M6wxC/HpZIXv/su8duQe00RiG2QO0eM+JyHuVRSYw6xHHqa+E8sTiTeNT
sft2e4y0aIb6wiEwSKqRZcR9MF0KZDN3PA4RHO3gMIwbltm+aTSPZNEfLiPAfu4c
sAicjp5aSIhbe+qsu0fEYMrzWEJmD//o2hf7X/2iCb3CE8IcYqI9w0ucyp068SNC
Ua4wf5XWg3bibTqZfh5mhSk9eMFiFfvpeyUSaCk2Lfx9p2+6GciBDEH0cJK1x2tR
DOm0XBRysYsI2cn79onkch19MzalOxx7bA6q9LCHprFMEg3vyqpXkUPUriegi6BZ
2TVCFz0fxwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFBzlM93O3YbmiHKTAPDMs9rB
mvkAMB8GA1UdIwQYMBaAFHa/RHyTUISUnbBG/3c4seV8gk/5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzlhNjg5NjRmNWZmNjQwZWJhZDEwMGRlZWE3YzliYTQ2LzEv
NzZCRjQ0N0M5MzUwODQ5NDlEQjA0NkZGNzczOEIxRTU3QzgyNEZGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzhkMzdhMDcyLTE1YWUtNDkwNS04MTBlLTk5MWZjNjIwMWI0NS84ZDhh
NjcyZGQ3OTZlNWFmZDk1ODc2ZTliNTY4NTY1YWVmMmIwYjc2YjgzODJlYTIyYS5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS85YTY4OTY0ZjVmZjY0MGViYWQxMDBk
ZWVhN2M5YmE0Ni8xLzMyMzYzMDMyM2E2NjM5NjI2MTNhMzUzMDMwM2EzYTJmMzQz
MDJkMzQzMDIwM2QzZTIwMzIzMTMzMzEzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5ugUwDQYJ
KoZIhvcNAQELBQADggEBAJXdwYBqtQnU621JZ6TTbjEeaMrcTAxij0H6MhVETZkP
g0nVAZZaQOpMF/PxL1EIrBdf+B1LWblw+zyDfeEQm/dh95oDfiB1edRj72SyTZEP
zXSib4tcFufZV3KtweaJLfLGQZnnA/mKnFvweSge3wrqXb00RQGfg2Xsa5cjsjHO
HBxpYmPSUj4zu31+3zey5gOQKciV8wlcRRbBElyN+mRHmmWRLw/KQchEGNyZR+yw
UWLXrc0AkwNxPCqiA5Ud5qEufcZ4bkX4U/1/x2Gap/cIt8SukEVbdbH7l5kvmgfH
IMAf8+COi4bF8VqU+3OBgUVQy1cuUyc2aeoIe1V8WTk=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:13 2025 by rpki-client