Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3631303a3a2f34382d3438203d3e203630393030.roa
File:                     323630323a663530633a3631303a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          O/PPIcD90mIgrmHHXqf3WhStc4e4+IO8YGppN3p3i1M=
Subject key identifier:   12:61:82:B0:90:28:36:70:70:F5:05:C2:44:15:D4:D0:47:3C:3B:F6
Certificate issuer:       /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Certificate serial:       6B7EFFBEE5296C999DEE13CD56ED1F284CCB43EE
Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3631303a3a2f34382d3438203d3e203630393030.roa
Signing time:             Tue 04 Nov 2025 02:43:21 +0000
ROA not before:           Tue 04 Nov 2025 02:38:21 +0000
ROA not after:            Tue 03 Nov 2026 02:43:21 +0000
asID:                     60900
IP address blocks:        2602:f50c:610::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7e:ff:be:e5:29:6c:99:9d:ee:13:cd:56:ed:1f:28:4c:cb:43:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
        Validity
            Not Before: Nov  4 02:38:21 2025 GMT
            Not After : Nov  3 02:43:21 2026 GMT
        Subject: CN=126182B09028367070F505C24415D4D0473C3BF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ef:1a:7e:4a:2d:8f:01:cb:35:66:95:4c:fa:
                    06:f1:a6:95:41:9e:6a:9e:5a:27:ee:f2:0e:69:79:
                    cf:30:05:9e:8d:d2:dc:56:d6:aa:2e:f2:a6:04:f9:
                    08:3b:cf:ce:f2:2e:d3:93:50:8e:07:2d:c0:0d:78:
                    ea:aa:63:04:ba:ba:e3:42:1c:2f:40:88:1d:19:e4:
                    98:41:de:cd:b6:31:c7:78:f6:f5:8e:5b:e7:d9:d1:
                    f7:85:05:0b:23:53:d6:7e:61:82:e5:6e:45:a3:47:
                    8c:c5:cf:31:8d:5e:03:01:56:12:dd:40:9b:29:83:
                    cf:0a:51:78:2b:bf:ef:a8:7a:14:8d:db:2a:cd:0b:
                    3d:62:a7:51:fc:11:57:66:cb:9e:32:c2:4e:44:df:
                    b5:ff:e4:4e:04:1d:01:57:af:a3:46:43:32:9a:22:
                    68:30:1f:db:cd:a7:6d:fc:e0:87:a7:2b:27:72:26:
                    24:af:e8:d7:a6:1d:9c:8d:94:b6:72:8d:da:33:86:
                    89:ed:77:72:5f:b0:50:cb:72:18:06:b8:9c:18:fb:
                    c7:02:0c:19:78:b1:99:c2:16:c5:5e:a0:01:5e:13:
                    f1:d9:86:d1:3d:c8:5a:de:93:8e:31:f3:5c:c9:0f:
                    d2:21:dd:ae:b0:1f:90:6c:0a:0b:17:f9:ad:06:8d:
                    46:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:61:82:B0:90:28:36:70:70:F5:05:C2:44:15:D4:D0:47:3C:3B:F6
            X509v3 Authority Key Identifier:
                keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3631303a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f50c:610::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:bf:d2:c0:a4:cf:a3:d2:6d:cc:f4:d0:9a:c9:83:39:b9:97:
         35:3f:d7:6a:17:95:bc:24:7d:8a:11:5b:df:45:a8:4b:77:b3:
         3c:3d:6d:c7:3a:01:1f:61:c0:24:05:d5:50:a3:69:58:a6:47:
         58:46:72:3f:e4:c2:73:9e:fb:1a:78:a7:a0:3c:7b:df:5b:bf:
         72:1e:71:74:2f:6b:b9:04:ed:e7:92:18:22:db:e9:20:dc:ec:
         70:ab:b3:7c:e6:63:83:59:24:23:95:5c:13:8d:ee:ec:91:1f:
         16:8c:d8:87:47:a9:a8:50:bc:81:a9:7e:58:3e:ba:e7:81:40:
         f2:89:c7:85:c5:5f:0b:03:d5:93:0f:33:de:33:b4:89:31:ac:
         b3:a7:1a:2e:96:69:92:61:0d:56:b1:f7:08:6a:f2:35:7b:64:
         2d:0c:a7:17:89:6f:56:3c:f4:96:72:ea:19:f0:6a:4b:c8:ad:
         df:7f:4c:28:fc:32:c8:6d:ca:a4:12:93:77:48:fa:17:1b:c3:
         00:81:85:39:fc:3b:dd:11:ae:7e:11:94:75:bd:a1:f1:14:61:
         6f:78:21:ed:8a:5c:da:75:6a:21:a6:31:cf:f9:ff:21:bc:dc:
         be:53:5b:c7:7d:dc:cb:a4:e4:9e:3e:d7:12:b6:f3:5f:be:b7:
         57:86:e0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:33:22 2025 by rpki-client