Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61383a3a2f34382d3438203d3e20313337393038.roa
File:                     323630323a663962613a61383a3a2f34382d3438203d3e20313337393038.roa (raw, json)
Hash identifier:          CawC+CslC0ktsZTRarwOhsMH/I/Kb5OJgJ287edm/H0=
Subject key identifier:   CB:D6:07:E9:D6:5A:9B:D5:1B:D8:3D:D3:1B:32:B0:25:A5:39:0D:D2
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       36E233092A7E9DB7C4A7A75846BA860519600AF1
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61383a3a2f34382d3438203d3e20313337393038.roa
Signing time:             Wed 16 Jul 2025 09:13:36 +0000
ROA not before:           Wed 16 Jul 2025 09:08:36 +0000
ROA not after:            Wed 15 Jul 2026 09:13:36 +0000
asID:                     137908
IP address blocks:        2602:f9ba:a8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 01:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e2:33:09:2a:7e:9d:b7:c4:a7:a7:58:46:ba:86:05:19:60:0a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jul 16 09:08:36 2025 GMT
            Not After : Jul 15 09:13:36 2026 GMT
        Subject: CN=CBD607E9D65A9BD51BD83DD31B32B025A5390DD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2c:ba:d8:7e:94:08:d3:5a:bb:c8:61:bb:da:
                    cf:2b:55:5a:80:c7:8c:47:3d:71:a3:5d:e7:e7:84:
                    e3:83:65:2f:f5:63:1d:0f:9e:2f:62:2f:e2:c1:93:
                    11:14:a1:3b:5b:56:ab:1e:0c:95:5b:94:8c:df:67:
                    5b:fe:03:53:0a:10:ce:44:a4:83:7e:43:49:66:6d:
                    85:9a:be:15:e2:5d:5b:bb:e2:6b:b3:09:37:d9:c8:
                    13:49:85:af:5c:b4:9f:4e:74:a5:65:0d:ce:a8:56:
                    29:f8:27:6d:ac:fb:da:b8:71:22:23:81:54:0a:9b:
                    73:a5:e7:21:e6:af:d7:fa:ca:88:3e:f5:85:fc:88:
                    36:b8:00:2e:ab:92:6c:5c:bf:dc:05:d6:f0:44:29:
                    b6:c7:07:15:37:d0:a5:4a:f6:4f:85:5a:4c:c6:b5:
                    c0:d2:e6:0e:cf:52:f4:30:4b:4d:d2:05:97:e1:fd:
                    fd:4d:05:15:63:1a:3a:c7:3f:88:33:cb:d8:9d:50:
                    7c:cb:8b:58:9c:78:fd:6c:45:46:ed:81:f8:09:39:
                    99:46:e7:47:5f:55:ad:56:f0:c4:2c:0f:1d:69:97:
                    8c:a5:82:d6:c2:2c:e2:fe:ee:07:32:0d:46:4a:da:
                    fd:57:bc:de:20:6e:ca:87:a2:5b:bc:5e:42:e6:59:
                    6f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D6:07:E9:D6:5A:9B:D5:1B:D8:3D:D3:1B:32:B0:25:A5:39:0D:D2
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61383a3a2f34382d3438203d3e20313337393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:a8::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:a8:f8:ca:c8:29:e9:c8:3a:48:14:af:74:e0:e0:3a:1c:62:
         cd:11:9d:a2:80:67:96:52:90:5e:3a:d3:59:62:94:a7:60:fb:
         f2:b7:03:e2:ec:57:3a:e3:a8:0d:56:d0:28:21:21:94:91:ff:
         61:8b:52:11:f9:a0:5f:07:78:ab:a9:f5:36:c3:01:54:11:74:
         ea:e2:90:88:e8:6e:bb:43:cd:35:7f:3a:57:ef:a8:ee:af:62:
         4e:f7:ea:75:86:53:e0:ca:9f:5a:d4:e0:74:3f:15:c9:2b:3c:
         21:3d:07:33:a6:ac:2e:e0:ac:4e:0f:24:24:19:0f:9f:d6:53:
         90:20:a5:dc:93:61:f2:2d:d6:b9:1b:e6:e9:0e:63:5f:30:1a:
         ec:43:2c:03:d2:77:f2:62:c1:e1:f6:c8:ed:06:1b:58:09:1f:
         83:6e:b6:c7:68:ef:fb:f2:68:ee:20:39:f4:e4:f6:4a:b9:44:
         09:af:48:78:f3:da:57:36:62:7e:65:b4:c8:09:29:c2:41:84:
         86:53:00:21:40:f3:69:39:16:d7:10:91:77:99:d4:e2:d1:e2:
         21:02:e9:37:91:76:1a:91:b2:b4:4c:fb:f0:a3:61:fa:52:86:
         cd:4c:6e:a8:82:63:84:a5:38:cc:be:4d:a2:12:2f:91:85:9c:
         9d:cf:70:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:35:36 2025 by rpki-client