Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3630303a3a2f34302d3430203d3e20323134303232.roa
File:                     323630323a663962613a3630303a3a2f34302d3430203d3e20323134303232.roa (raw, json)
Hash identifier:          SyYtgkX7tlWrOmqlC42GJR40h4jCEnHCl5tQlyKR9f8=
Subject key identifier:   CC:90:DD:63:E3:16:19:00:47:97:7A:04:A9:58:A9:15:EA:EC:26:DB
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       2E29C12D87C75155649A4E72BB239157CDFC35C1
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3630303a3a2f34302d3430203d3e20323134303232.roa
Signing time:             Wed 16 Jul 2025 09:13:34 +0000
ROA not before:           Wed 16 Jul 2025 09:08:34 +0000
ROA not after:            Wed 15 Jul 2026 09:13:34 +0000
asID:                     214022
IP address blocks:        2602:f9ba:600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 01:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:29:c1:2d:87:c7:51:55:64:9a:4e:72:bb:23:91:57:cd:fc:35:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jul 16 09:08:34 2025 GMT
            Not After : Jul 15 09:13:34 2026 GMT
        Subject: CN=CC90DD63E316190047977A04A958A915EAEC26DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2f:34:e6:dd:30:49:3b:9b:08:1a:36:d2:09:
                    25:2b:09:5d:4d:61:9c:37:3d:08:51:8e:c6:cc:76:
                    f9:3b:e3:61:3d:99:9b:16:86:39:d9:85:e6:91:eb:
                    04:6b:bb:b1:5f:c7:eb:ca:a9:7e:da:55:2a:14:49:
                    3b:dd:91:9f:ea:53:23:65:ae:4f:63:50:f7:1a:7b:
                    90:92:69:5a:df:bf:52:f5:8a:2c:6b:1f:86:95:a8:
                    e9:df:7a:d3:95:be:69:c3:fb:de:1b:96:14:e1:20:
                    71:28:cd:74:35:3f:a0:8e:92:97:ec:f8:8d:75:a2:
                    9e:34:88:77:a6:1c:d4:60:ec:83:91:25:b3:81:30:
                    8a:8c:86:c3:ba:87:7e:f2:31:69:b8:8f:dd:75:f5:
                    f1:63:18:d4:ad:78:0b:8d:fc:4b:81:5e:54:e6:cf:
                    af:1c:d5:65:7c:f2:f6:c8:b6:90:74:97:28:22:6b:
                    5f:01:12:fc:9a:b4:49:e8:75:bc:0c:6e:43:ee:76:
                    6d:a1:2e:36:2e:12:4d:6f:7f:01:76:91:ea:e1:e2:
                    ee:3b:6d:c8:92:fb:98:7d:6c:3f:4a:f8:55:96:78:
                    ce:1d:9f:4e:06:2d:1f:ff:d6:1f:b9:f2:2e:a1:dc:
                    c1:58:2e:f8:74:e5:f1:82:ae:31:04:aa:5b:2e:fe:
                    8a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:90:DD:63:E3:16:19:00:47:97:7A:04:A9:58:A9:15:EA:EC:26:DB
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3630303a3a2f34302d3430203d3e20323134303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:ba:0c:82:e4:9f:d0:b9:74:6c:7b:48:54:4f:92:c2:47:c0:
         a7:07:a9:0b:09:3e:52:ed:ef:f8:6a:2e:68:bc:ce:c5:f5:d6:
         08:d2:c9:cd:77:9a:1e:c4:10:66:22:8a:3a:76:f2:dd:dc:a2:
         eb:82:11:d0:b3:b1:83:8b:61:4a:e8:35:14:ef:f0:4b:3f:16:
         a3:bb:91:4d:d6:1e:cc:3e:f3:60:d7:5e:ba:c9:87:c2:0e:fc:
         93:cf:03:f0:4c:d1:1a:f0:89:ed:7d:98:e9:1a:db:25:6b:93:
         91:df:f6:db:26:68:91:ed:0a:9e:1a:c6:26:c9:25:2f:f4:12:
         c1:7a:27:0f:f4:d9:94:29:97:21:5a:79:e4:ce:ad:6c:89:84:
         5c:09:0d:4e:2b:be:20:33:bf:fb:8b:43:96:f9:a5:d5:46:57:
         20:91:5e:bd:7b:f7:1d:25:82:9a:47:ce:41:c4:4b:83:5b:e0:
         3a:59:05:90:bc:37:91:7e:2d:50:02:43:a8:7d:43:b1:56:9f:
         d8:1d:34:94:d8:3a:5a:dd:8d:c3:5a:fe:9e:25:9d:60:af:0d:
         d6:a9:58:9c:7a:36:02:0d:39:f3:33:e8:ea:38:0b:21:cc:ad:
         cb:76:a1:4e:bc:b7:e5:aa:88:12:be:f3:e7:57:a2:dc:55:8a:
         2f:03:90:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:27:10 2025 by rpki-client