Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3a2f34382d3438203d3e203630393030.roa
File:                     323630323a663530633a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          4KFIyMavS9Qbt5suC5dMsG8jxvh3fhjwja7tMo/jWUI=
Subject key identifier:   52:51:2C:4D:C2:61:40:2F:20:D9:F7:7C:C1:7D:2C:84:1A:8D:D3:9B
Certificate issuer:       /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Certificate serial:       0FDF78F1CCBA350DD7D3CC54BE6B1DDDC61C6AF4
Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3a2f34382d3438203d3e203630393030.roa
Signing time:             Fri 31 Oct 2025 15:13:19 +0000
ROA not before:           Fri 31 Oct 2025 15:08:19 +0000
ROA not after:            Fri 30 Oct 2026 15:13:19 +0000
asID:                     60900
IP address blocks:        2602:f50c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:df:78:f1:cc:ba:35:0d:d7:d3:cc:54:be:6b:1d:dd:c6:1c:6a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
        Validity
            Not Before: Oct 31 15:08:19 2025 GMT
            Not After : Oct 30 15:13:19 2026 GMT
        Subject: CN=52512C4DC261402F20D9F77CC17D2C841A8DD39B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:42:9b:5a:30:03:e2:98:0c:fc:38:96:ed:a6:
                    4e:32:9e:a3:9c:ad:1f:87:82:5b:47:f9:ab:3b:c7:
                    47:06:aa:e0:bf:5b:21:1e:d4:23:4a:86:45:84:37:
                    de:86:54:92:48:9b:a3:a2:0e:16:6e:2e:3d:ae:a7:
                    2b:bb:e3:ec:20:c6:88:06:d6:b2:6e:af:15:d4:91:
                    5b:25:5f:9b:96:87:f2:67:3f:8d:a1:f3:b6:3b:a7:
                    6c:ce:15:50:1a:08:93:00:d7:3a:4b:55:30:29:2c:
                    dc:db:81:29:c5:4b:f6:47:12:96:d5:db:d3:f0:70:
                    f1:84:57:23:8f:9d:02:13:8a:8f:be:90:ae:22:9b:
                    61:17:52:e4:55:49:0a:b5:5a:7a:92:61:c6:50:1c:
                    87:29:fb:51:99:26:c0:ca:31:7c:95:ab:28:76:35:
                    d7:78:69:1b:c9:59:bc:37:96:48:ad:26:78:7a:9c:
                    d2:10:d2:01:ea:55:ac:ab:37:8b:e3:9f:a3:ce:eb:
                    50:70:1a:b4:e6:3f:83:8f:97:36:40:ef:c8:d3:c9:
                    5d:8e:85:83:bb:57:6e:ee:65:5f:4f:e0:b6:47:ea:
                    26:7d:69:6e:de:f3:bc:8c:6f:9d:70:2c:66:d6:66:
                    4a:4f:0f:01:cc:09:9a:18:83:e7:10:75:ea:11:19:
                    5e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:51:2C:4D:C2:61:40:2F:20:D9:F7:7C:C1:7D:2C:84:1A:8D:D3:9B
            X509v3 Authority Key Identifier:
                keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f50c::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:4c:30:a1:5d:b5:ae:0e:93:5e:f2:0e:69:ae:82:56:52:6c:
         3f:0e:7b:18:fa:ef:7f:1c:be:8d:81:5f:1d:92:49:c2:d6:cf:
         6f:55:f3:75:8d:c1:31:74:8f:37:5f:97:12:c2:bd:34:8a:6f:
         96:9a:89:5e:94:77:fc:17:02:55:eb:f2:1c:05:80:73:2a:b1:
         af:5c:52:1e:44:6a:ae:d6:d7:66:1c:e3:6f:e3:dc:ba:05:b2:
         c9:8b:a9:4c:0a:09:54:52:af:cb:28:55:c4:ad:69:6e:a1:d4:
         d1:83:d4:ce:cf:30:a7:53:5c:0c:64:78:ed:9c:13:fd:f3:0b:
         a2:ce:fa:5d:b3:7c:44:a1:b5:f8:b0:37:0d:43:db:3d:01:1a:
         be:e1:f4:d8:d7:72:e9:c7:3a:2c:bd:83:58:9b:d7:4f:04:da:
         7f:4f:9c:d4:8d:96:de:89:8c:c9:f3:f3:76:14:84:03:5b:83:
         57:11:2b:3f:86:b8:bd:a7:0c:79:ba:c3:71:8e:e3:c1:4c:10:
         84:e8:b4:19:ea:e4:f8:8a:92:61:65:79:03:5f:b6:a7:4d:3a:
         c3:79:26:b2:10:7f:80:10:61:2b:22:9c:ee:74:47:cf:dd:1c:
         27:b4:10:74:31:8d:0e:bb:0d:69:4c:18:f2:05:2f:95:9d:0b:
         03:e7:c7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:34:38 2025 by rpki-client