Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3231323a3a2f34382d3438203d3e203630393030.roa
File:                     323630323a663530633a3231323a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          ONDXMZsFOZ8j19rR4Xmo0DCAkEghl4dt58OQWAL5QS4=
Subject key identifier:   C4:D6:98:16:45:B5:DF:02:45:FE:95:60:39:6C:05:DE:EB:E9:2B:B4
Certificate issuer:       /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Certificate serial:       46931D86FA2D2F1961FB4682FFDC9C77F342A5D1
Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3231323a3a2f34382d3438203d3e203630393030.roa
Signing time:             Fri 31 Oct 2025 15:13:52 +0000
ROA not before:           Fri 31 Oct 2025 15:08:52 +0000
ROA not after:            Fri 30 Oct 2026 15:13:52 +0000
asID:                     60900
IP address blocks:        2602:f50c:212::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:93:1d:86:fa:2d:2f:19:61:fb:46:82:ff:dc:9c:77:f3:42:a5:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
        Validity
            Not Before: Oct 31 15:08:52 2025 GMT
            Not After : Oct 30 15:13:52 2026 GMT
        Subject: CN=C4D6981645B5DF0245FE9560396C05DEEBE92BB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ce:b3:15:fe:b9:1b:63:f2:5d:a2:ea:02:44:
                    ec:72:8e:2c:33:4f:99:b7:cf:00:20:ea:9f:cf:33:
                    ad:af:7f:19:8c:23:25:d7:50:24:dc:4e:f8:6c:a1:
                    42:c6:2f:ec:a9:1d:a4:86:3c:ae:22:c7:f0:c5:a8:
                    9e:db:ea:f5:67:57:92:4f:93:92:86:2d:c9:05:32:
                    4e:3a:33:4e:02:77:06:a9:b4:5f:4b:52:93:74:02:
                    fe:55:f9:c2:a5:b8:c7:24:3d:30:69:ea:16:a8:71:
                    af:2d:cf:e4:28:68:2c:d2:09:16:58:16:bd:d4:16:
                    22:9e:8d:79:bb:7e:a0:bd:50:5c:b7:92:6d:3e:b1:
                    14:a1:b2:07:8f:ed:46:96:af:2b:91:fb:97:f4:82:
                    d3:57:6c:04:a3:70:77:38:fa:8f:05:28:71:19:b4:
                    08:11:04:a8:9e:74:26:ce:f2:33:61:bd:09:21:60:
                    82:85:ca:54:1b:82:20:3f:ab:a3:6a:b0:9c:47:4e:
                    dc:35:5f:97:d5:cf:1f:67:af:08:67:05:93:49:38:
                    e9:17:a4:67:1e:71:bc:9e:7e:19:e9:87:7a:e5:fc:
                    4a:e2:46:b3:fd:7d:ce:15:b8:97:2f:77:85:49:2e:
                    2e:5d:28:27:83:c5:f8:6f:a1:c0:0b:2e:b3:e4:14:
                    f8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D6:98:16:45:B5:DF:02:45:FE:95:60:39:6C:05:DE:EB:E9:2B:B4
            X509v3 Authority Key Identifier:
                keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3231323a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f50c:212::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:d1:06:24:68:4b:4b:6f:40:b7:14:f9:cf:7d:23:95:7c:f6:
         78:ba:f0:f0:83:3e:1f:ef:f9:48:9f:9d:04:19:5e:75:6c:86:
         e7:aa:38:60:db:02:b7:4e:1d:34:90:9a:b7:6f:dd:73:bf:f4:
         03:36:15:46:d4:1e:e5:a3:82:4a:18:02:a1:cd:0a:21:35:2a:
         3c:1e:d2:1e:5d:b0:a6:48:8b:1f:3d:43:cc:c8:e9:b5:64:8b:
         66:8d:b7:a1:72:ec:b9:39:98:32:98:f1:2a:d5:57:3b:6c:5c:
         f1:d0:d0:95:0a:df:96:7d:d2:32:1c:3b:82:8d:62:c9:8b:ab:
         0f:93:5d:c8:e3:b4:e2:65:fc:6d:06:26:a6:3b:19:1c:9b:6a:
         bf:08:bd:54:6d:78:8a:3b:87:47:6e:06:a0:c3:45:ec:14:93:
         c6:8a:a6:3a:e9:cd:ad:5f:55:a2:2a:78:3a:7f:37:8a:2d:9d:
         18:76:93:37:a8:23:5e:8d:28:c9:0c:28:59:54:63:ad:2f:74:
         a7:0b:f6:6b:89:64:b3:05:31:91:90:4e:3e:1d:50:6a:47:b5:
         19:2e:e3:37:b4:db:39:04:39:b2:83:9a:22:1a:1c:a1:4e:51:
         46:28:66:c1:65:76:de:38:81:16:2b:e3:ef:d0:39:70:8d:b3:
         ed:53:31:1b
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIURpMdhvotLxlh+0aC/9ycd/NCpdEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmVjZmRmZGJkYjU2ZDNmYmZhMjYxYmIyODdiZjBjNDE4
NTU3MmQwYzIxYjY0ZTFmNzQwHhcNMjUxMDMxMTUwODUyWhcNMjYxMDMwMTUxMzUy
WjAzMTEwLwYDVQQDEyhDNEQ2OTgxNjQ1QjVERjAyNDVGRTk1NjAzOTZDMDVERUVC
RTkyQkI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns6zFf65G2Py
XaLqAkTsco4sM0+Zt88AIOqfzzOtr38ZjCMl11Ak3E74bKFCxi/sqR2khjyuIsfw
xaie2+r1Z1eST5OShi3JBTJOOjNOAncGqbRfS1KTdAL+VfnCpbjHJD0waeoWqHGv
Lc/kKGgs0gkWWBa91BYino15u36gvVBct5JtPrEUobIHj+1Glq8rkfuX9ILTV2wE
o3B3OPqPBShxGbQIEQSonnQmzvIzYb0JIWCChcpUG4IgP6ujarCcR07cNV+X1c8f
Z68IZwWTSTjpF6RnHnG8nn4Z6Yd65fxK4kaz/X3OFbiXL3eFSS4uXSgng8X4b6HA
Cy6z5BT44QIDAQABo4ICuzCCArcwHQYDVR0OBBYEFMTWmBZFtd8CRf6VYDlsBd7r
6Su0MB8GA1UdIwQYMBaAFHW/F2dWTXxExb05X2pqIZDS3dcIMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2NhMmIxMmFmYzQyODQzZGJhZTRiMDVjZjM2MGQ5NTJkLzAv
NzVCRjE3Njc1NjREN0M0NEM1QkQzOTVGNkE2QTIxOTBEMkRERDcwOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDll
ZjFiNGUyL2M0MTU2NDRhLWE1YTQtNDg0OS1hYmE5LTE5ODA4NmZkMTU0ZC9mZWNm
ZGZkYmRiNTZkM2ZiZmEyNjFiYjI4N2JmMGM0MTg1NTcyZDBjMjFiNjRlMWY3NC5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jYTJiMTJhZmM0Mjg0M2RiYWU0YjA1
Y2YzNjBkOTUyZC8wLzMyMzYzMDMyM2E2NjM1MzA2MzNhMzIzMTMyM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzYzMDM5MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC9QwCEjANBgkq
hkiG9w0BAQsFAAOCAQEAYdEGJGhLS29AtxT5z30jlXz2eLrw8IM+H+/5SJ+dBBle
dWyG56o4YNsCt04dNJCat2/dc7/0AzYVRtQe5aOCShgCoc0KITUqPB7SHl2wpkiL
Hz1DzMjptWSLZo23oXLsuTmYMpjxKtVXO2xc8dDQlQrfln3SMhw7go1iyYurD5Nd
yOO04mX8bQYmpjsZHJtqvwi9VG14ijuHR24GoMNF7BSTxoqmOunNrV9Voip4On83
ii2dGHaTN6gjXo0oyQwoWVRjrS90pwv2a4lkswUxkZBOPh1Qake1GS7jN7TbOQQ5
soOaIhocoU5RRihmwWV23jiBFivj79A5cI2z7VMxGw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:45:48 2025 by rpki-client