Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a63303a3a2f34382d313238203d3e20333933353737.roa
File:                     323630323a663962613a63303a3a2f34382d313238203d3e20333933353737.roa (raw, json)
Hash identifier:          diHUiFSI5JwKOCbm2WCv2rF2zJ6teToW3q82t0IJyLE=
Subject key identifier:   6E:DD:38:64:8A:D1:0B:B6:76:7E:AB:91:54:19:6C:39:EC:63:70:37
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       69EFD187CCCB8ACFAE67BA47E87D46FF34776458
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a63303a3a2f34382d313238203d3e20333933353737.roa
Signing time:             Wed 16 Jul 2025 09:13:37 +0000
ROA not before:           Wed 16 Jul 2025 09:08:37 +0000
ROA not after:            Wed 15 Jul 2026 09:13:37 +0000
asID:                     393577
IP address blocks:        2602:f9ba:c0::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 01:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ef:d1:87:cc:cb:8a:cf:ae:67:ba:47:e8:7d:46:ff:34:77:64:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jul 16 09:08:37 2025 GMT
            Not After : Jul 15 09:13:37 2026 GMT
        Subject: CN=6EDD38648AD10BB6767EAB9154196C39EC637037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:91:fc:23:06:2a:70:b5:0b:f4:2e:ef:94:
                    b3:c5:2a:56:3d:42:40:53:91:31:10:7b:ca:91:e6:
                    45:fc:87:4f:9f:61:60:d2:68:cb:c1:d8:95:f8:45:
                    b9:a5:e6:65:66:6e:50:72:5a:cf:12:e4:83:69:3a:
                    79:bf:63:3f:b6:3b:24:e2:75:fb:73:fd:99:bd:00:
                    0e:1f:d8:72:27:f5:a8:f0:52:dc:34:88:eb:e2:43:
                    fe:cb:54:c6:20:68:5b:48:4a:ea:e6:53:54:8c:16:
                    7f:bd:ce:67:5f:c1:3e:88:8e:54:69:94:50:70:80:
                    10:be:49:c2:7b:85:64:29:d2:46:94:f6:cb:9b:34:
                    02:c7:45:a1:15:78:ac:1b:b4:2a:28:9a:2f:22:86:
                    8b:39:25:52:5c:32:ab:48:ae:f0:8d:ac:52:f4:65:
                    9e:ca:08:a5:71:fa:7a:39:d5:e6:5d:46:6d:1d:fe:
                    07:51:14:6f:f3:0d:42:f7:19:cb:cd:1a:2e:24:41:
                    e6:c0:35:ab:3a:5b:f2:6b:d6:25:ca:05:f2:85:a0:
                    65:0b:d0:e8:ed:f7:67:21:51:34:ba:87:cd:fd:1d:
                    26:2a:63:31:9b:77:fb:15:e1:29:90:79:08:ea:28:
                    ea:ea:ee:8f:b8:cd:18:c9:18:9d:8c:8b:38:ce:5d:
                    0f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DD:38:64:8A:D1:0B:B6:76:7E:AB:91:54:19:6C:39:EC:63:70:37
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a63303a3a2f34382d313238203d3e20333933353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:01:cf:6f:9a:81:ae:73:10:7e:f5:f5:47:b1:cb:d2:76:c3:
         7c:00:4e:d2:06:78:78:f8:86:8a:a7:e2:4d:e2:00:5f:74:bc:
         fd:c8:30:bd:6b:ea:4e:b8:3c:98:81:f8:82:f7:90:c3:50:a6:
         49:8c:76:09:ca:ab:26:f9:9b:05:e4:b6:d3:44:d0:5e:47:7e:
         ea:9c:f6:b3:be:41:c9:d8:a0:ce:cb:db:61:23:80:53:63:3e:
         65:18:64:c6:40:15:00:46:b1:e9:2a:c2:73:79:c2:98:a0:0b:
         c9:dd:dc:15:31:34:c3:53:29:2d:68:94:de:20:be:19:77:11:
         79:15:f3:0c:e7:b6:6a:dd:72:b4:8b:ab:39:af:9f:50:b2:2e:
         9c:e8:a2:43:fb:8c:94:17:a5:56:88:0e:0c:2d:44:f5:9a:4d:
         b4:d5:c1:8b:e3:f3:6c:d4:24:03:5b:7e:c3:e2:3a:d9:f3:44:
         67:3b:95:7b:84:da:eb:b9:f2:cd:54:e7:b3:9e:68:07:9e:1a:
         a3:0c:be:67:64:cd:34:a5:d3:5e:83:e4:eb:50:7e:ca:6a:17:
         b4:48:f3:d1:fa:68:c2:93:3a:2c:4e:69:8d:8a:09:1d:35:c4:
         24:a9:e1:fb:fa:a2:4d:e8:a4:9a:b6:45:e0:ee:8d:36:d5:af:
         a7:8d:6f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:08:43 2025 by rpki-client