Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3a2f33362d313238203d3e20333933353737.roa
File:                     323630323a663962613a3a2f33362d313238203d3e20333933353737.roa (raw, json)
Hash identifier:          /8juPWTuuyG0AWwuKC/5Sp50LwdhEF/ol3V55UOCt3Y=
Subject key identifier:   B7:6D:6C:94:9B:97:A1:A7:1F:07:0B:E9:68:B9:3A:24:DB:7D:5C:35
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       73CB59F45772CD9787229EFC221AF6148B38B5AA
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3a2f33362d313238203d3e20333933353737.roa
Signing time:             Wed 16 Jul 2025 09:13:36 +0000
ROA not before:           Wed 16 Jul 2025 09:08:36 +0000
ROA not after:            Wed 15 Jul 2026 09:13:36 +0000
asID:                     393577
IP address blocks:        2602:f9ba::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 01:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:cb:59:f4:57:72:cd:97:87:22:9e:fc:22:1a:f6:14:8b:38:b5:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jul 16 09:08:36 2025 GMT
            Not After : Jul 15 09:13:36 2026 GMT
        Subject: CN=B76D6C949B97A1A71F070BE968B93A24DB7D5C35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:01:3b:64:c0:1c:ad:85:f3:ac:00:78:11:a2:
                    73:75:4b:ab:8a:c7:a1:92:41:e4:71:95:bb:92:99:
                    c4:e4:89:45:d8:4a:36:36:16:8c:a2:7d:13:db:64:
                    76:04:9c:e0:b8:fe:c7:4b:fc:e3:f4:79:2f:b7:0f:
                    2b:07:35:ce:b6:f9:08:67:29:91:8a:60:40:d4:d9:
                    12:76:0f:dd:20:86:5f:4f:2a:ad:2a:98:e4:1f:41:
                    81:47:e3:85:de:4b:68:e9:c2:3a:e4:05:37:ee:b4:
                    1e:b5:e3:7e:26:d5:94:15:3a:e5:05:f3:1d:39:d3:
                    f8:20:74:02:6e:3b:68:5d:c3:a4:57:8a:29:51:5c:
                    81:a2:30:9d:f3:6d:8b:98:61:95:c2:50:81:39:0a:
                    3a:b6:03:42:e5:70:70:a7:37:a5:80:48:b2:4c:25:
                    25:3b:cd:b0:0d:d1:72:df:b3:1f:9b:9e:40:fa:77:
                    01:6b:16:7e:f8:0f:c4:dc:f7:29:43:1b:e3:7b:8a:
                    2a:f3:40:4a:09:f0:00:0f:d2:97:54:1f:5d:42:b0:
                    e9:45:2f:17:cb:d7:a7:43:bd:82:d8:40:b0:44:58:
                    c8:25:7d:53:5b:58:75:7a:cb:d4:fe:ab:81:bb:e0:
                    67:cb:be:0e:05:11:3c:bb:b2:8f:77:d3:ac:d5:6d:
                    d4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6D:6C:94:9B:97:A1:A7:1F:07:0B:E9:68:B9:3A:24:DB:7D:5C:35
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3a2f33362d313238203d3e20333933353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba::/36

    Signature Algorithm: sha256WithRSAEncryption
         5d:5d:01:7d:42:cb:92:32:12:2c:fd:ae:4c:1d:fc:f6:78:1c:
         b0:42:24:47:0d:62:2d:29:8b:d2:cc:6f:35:d5:65:10:bc:13:
         24:28:e3:d9:d9:2a:3d:c3:8d:3e:9a:a2:cd:85:08:0c:22:5a:
         c1:65:52:78:ac:61:2f:f2:3f:6c:e9:99:62:7b:ae:15:f7:3f:
         0c:33:e0:85:6e:7f:a7:32:e0:3d:cc:f7:4c:e3:1b:d1:b6:13:
         e7:99:e2:8a:ed:8f:a2:4f:49:4c:ba:1d:c3:c5:83:c0:6a:9d:
         92:b8:4b:87:fd:8e:b0:cf:fc:ec:b0:d5:8a:21:3f:df:e0:c7:
         e9:76:c2:8c:25:2e:06:bf:f1:f2:6f:a5:cb:8e:f8:00:56:24:
         bc:90:ad:4b:a4:53:6b:0d:f5:b8:fc:fe:b8:cd:dd:6d:44:36:
         8b:9e:7c:95:19:ca:2c:46:15:0c:8e:83:bd:6a:de:c4:ae:73:
         1b:ee:40:c3:11:9e:3a:76:a4:cd:fe:56:6a:87:b2:bf:5e:19:
         2f:77:6a:a1:34:8e:d7:33:22:c5:64:46:91:45:ee:b5:6e:73:
         e7:f1:3e:c1:12:33:f6:26:04:33:e4:ab:df:08:64:97:8d:b5:
         91:69:28:7b:80:84:d8:6d:a2:fd:49:57:4f:3a:e8:39:d4:76:
         46:2b:7d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:55:06 2025 by rpki-client