Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a63333a3a2f34382d3438203d3e20323135363035.roa
File:                     323630323a663962613a63333a3a2f34382d3438203d3e20323135363035.roa (raw, json)
Hash identifier:          R/kb4oBJMH+dikWAu4+Fz+wPAFfci3zvNAqEfQ5QdtM=
Subject key identifier:   EC:17:6B:64:CD:F1:7E:96:7D:94:AB:F9:C9:38:B4:93:4E:D1:B2:D2
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       2505CE9DEC69A59A4F10650F0110EA1EC4B134D7
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a63333a3a2f34382d3438203d3e20323135363035.roa
Signing time:             Wed 16 Jul 2025 09:13:37 +0000
ROA not before:           Wed 16 Jul 2025 09:08:37 +0000
ROA not after:            Wed 15 Jul 2026 09:13:37 +0000
asID:                     215605
IP address blocks:        2602:f9ba:c3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 01:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:05:ce:9d:ec:69:a5:9a:4f:10:65:0f:01:10:ea:1e:c4:b1:34:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jul 16 09:08:37 2025 GMT
            Not After : Jul 15 09:13:37 2026 GMT
        Subject: CN=EC176B64CDF17E967D94ABF9C938B4934ED1B2D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:eb:82:2b:c9:22:a6:3a:ba:fc:2a:4d:55:1e:
                    78:89:4c:05:b1:ca:33:89:05:d0:02:7d:c4:ad:f1:
                    78:7b:46:b8:8a:95:b7:8b:fe:c2:be:ae:0d:4f:d0:
                    aa:41:ce:f2:b5:46:bd:b8:68:2a:46:88:15:0e:b8:
                    9a:58:78:59:ee:c0:a6:4a:4e:a5:d0:87:ec:ab:9d:
                    e2:10:b2:ff:c1:e6:25:de:1b:53:b0:eb:e4:18:fc:
                    ba:f5:a7:33:44:b9:5d:c7:79:67:ba:41:4b:3a:ef:
                    43:eb:12:7c:38:ff:15:e6:4e:5a:d3:fb:9e:80:20:
                    2e:25:c1:62:06:89:bc:51:25:9f:42:61:74:4c:d7:
                    84:c5:e2:d4:a7:61:14:76:93:78:1f:af:62:6b:cf:
                    9c:c0:88:d0:19:61:0d:30:fe:3a:6a:4d:e9:04:5c:
                    6f:a0:07:4f:79:66:64:4f:24:1d:2c:4b:ac:2c:b6:
                    a7:0b:19:ae:60:4d:e9:a3:1c:cf:d6:ce:71:84:bb:
                    59:40:f0:ed:a8:50:1f:2e:70:c6:73:9c:21:8f:dc:
                    d9:fa:87:b0:fb:8c:6f:f8:38:71:35:ec:a7:1b:64:
                    33:85:28:8d:58:f1:3a:fd:ec:aa:e5:5d:46:12:54:
                    bc:68:a0:6c:8c:bd:3f:cf:84:1a:39:9f:63:1a:4f:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:17:6B:64:CD:F1:7E:96:7D:94:AB:F9:C9:38:B4:93:4E:D1:B2:D2
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a63333a3a2f34382d3438203d3e20323135363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:c3::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:81:00:44:e8:41:96:cc:41:c9:be:10:ba:70:35:f1:8f:4f:
         c8:bb:0f:ce:8b:3d:f9:5b:59:fd:32:c6:1c:e0:83:7f:58:82:
         df:9b:a3:60:da:f3:f0:7f:b3:35:10:3f:ca:58:a9:48:c0:52:
         7a:77:a5:3d:79:b7:b1:ad:e3:36:18:6a:17:00:55:8e:15:be:
         1a:06:40:e0:0d:2f:1a:dc:dc:13:b2:34:40:1e:6b:47:4c:cf:
         bc:94:a0:93:d7:1e:fd:3a:80:a2:8a:0b:f4:47:5d:e0:bf:53:
         ac:d3:08:2e:91:8c:58:d7:74:c6:dd:92:35:42:b2:48:3e:33:
         bb:bf:e7:e7:00:6d:a2:62:c4:98:90:b2:1a:12:7f:8e:8b:82:
         15:85:b0:7c:ea:03:0d:2f:d4:1e:5f:f9:f0:2b:e6:4d:dc:fe:
         47:96:9e:fb:95:3d:2c:b2:8e:c2:20:7c:c6:c8:77:af:f3:e6:
         19:04:94:18:5f:c7:48:74:e4:93:24:d5:a2:f1:cb:17:e6:0a:
         28:8a:76:0a:83:21:7d:e7:65:a3:2a:d1:56:fa:74:d2:eb:be:
         76:f3:b5:bf:7d:cf:24:11:14:93:96:40:37:98:c6:1c:0c:5a:
         a3:5a:5b:fd:87:f5:28:d1:e1:ea:d1:f7:6f:f3:d5:9b:a1:da:
         66:0b:cb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:56:29 2025 by rpki-client