Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62623a3a2f34382d3438203d3e20333934383339.roa
File:                     323630323a663962613a62623a3a2f34382d3438203d3e20333934383339.roa (raw, json)
Hash identifier:          HX2yhJysVSehaYdcJnBABd1ZNy/QAWJypYbkarYRxwc=
Subject key identifier:   8B:67:D3:F4:68:8E:AB:AB:30:9E:D8:E6:18:87:3B:D5:20:DF:EB:D1
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       5DBF318778BF85CFF37310F63742CF6E7F540E97
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62623a3a2f34382d3438203d3e20333934383339.roa
Signing time:             Wed 16 Jul 2025 09:13:35 +0000
ROA not before:           Wed 16 Jul 2025 09:08:35 +0000
ROA not after:            Wed 15 Jul 2026 09:13:35 +0000
asID:                     394839
IP address blocks:        2602:f9ba:bb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:bf:31:87:78:bf:85:cf:f3:73:10:f6:37:42:cf:6e:7f:54:0e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jul 16 09:08:35 2025 GMT
            Not After : Jul 15 09:13:35 2026 GMT
        Subject: CN=8B67D3F4688EABAB309ED8E618873BD520DFEBD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:54:21:dd:73:61:bd:1d:38:ce:25:62:58:16:
                    b3:b7:f8:5f:47:5c:ce:02:5a:c4:f3:ca:b9:25:7d:
                    95:ff:6e:d1:a7:dd:97:6a:e0:0d:0c:3e:15:2a:7e:
                    ff:7d:62:10:be:0a:20:19:9e:05:9c:ed:38:17:86:
                    a4:32:e8:32:a7:3c:28:a7:93:a4:49:98:fd:a8:c1:
                    03:9c:79:f7:a8:af:4f:b1:d2:7e:a8:e6:6d:3a:21:
                    71:f8:dc:09:ec:53:4e:e8:0e:30:07:4c:18:0b:71:
                    e2:63:2f:fc:45:1c:62:21:12:d9:46:d8:cc:d9:4e:
                    e5:af:ef:7a:bf:b2:50:9c:8a:da:e7:9c:3a:be:9f:
                    91:5e:52:7a:5c:b7:41:35:9e:cd:7d:1d:be:6a:a2:
                    cd:64:b1:d4:c7:05:ad:94:73:b3:00:62:a7:cb:34:
                    8d:50:f8:6c:5c:8d:aa:b0:0c:3f:5b:27:7f:4d:26:
                    1a:c6:55:0f:60:49:9f:6c:52:1d:bb:cc:e8:bf:51:
                    d9:0b:5b:b0:85:49:6a:ce:e8:59:da:ca:5b:8a:1a:
                    ef:c4:1c:d1:36:17:b6:97:f2:e8:86:7a:08:eb:e7:
                    e4:21:92:76:a7:f0:5d:08:e7:c4:63:3f:43:55:c2:
                    0a:93:97:0d:b1:c7:9d:53:3e:ac:53:5b:a3:74:90:
                    1b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:67:D3:F4:68:8E:AB:AB:30:9E:D8:E6:18:87:3B:D5:20:DF:EB:D1
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62623a3a2f34382d3438203d3e20333934383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:bb::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:e1:cb:e8:9c:10:16:40:e4:3a:53:0c:4d:a5:56:cd:e5:45:
         0e:2f:ee:b3:58:ba:c2:c6:1f:0d:05:9d:e1:99:65:ac:24:69:
         4a:64:f1:96:4e:93:c8:6b:f0:14:d8:88:9b:58:c6:42:73:30:
         c1:00:91:c3:ae:be:2b:b8:c3:74:c5:b9:bb:15:7b:28:c9:1b:
         02:6c:eb:36:13:38:fb:5c:dd:d8:8b:90:82:1f:e7:9b:98:07:
         99:e6:64:aa:ab:90:8d:a4:8b:70:ea:5e:06:a1:b5:93:cb:69:
         20:2b:88:0c:36:66:68:88:70:68:aa:96:d4:35:97:56:3a:ff:
         19:b4:01:10:e7:f0:3c:40:d6:ba:99:77:6d:9c:db:22:08:01:
         3f:44:b6:2f:fd:13:cf:7b:79:25:1d:ea:b7:5a:e4:b5:2e:a1:
         ab:71:80:a7:c0:ac:ed:fe:6d:5c:29:ab:76:66:e2:ba:fa:3b:
         9f:74:16:23:2c:7d:a6:49:d9:24:89:cc:c8:f1:d1:ff:34:33:
         ec:2f:36:b4:38:e1:94:5f:2b:28:7c:43:31:6f:57:84:e6:6e:
         fb:b3:1f:b8:8c:3f:85:1d:f2:6f:40:7b:c6:d3:01:20:25:72:
         c2:42:8c:34:3d:2a:89:6a:5f:4e:71:06:40:d5:d7:73:f8:41:
         dc:e7:16:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:53 2025 by rpki-client