Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a6534303a3a2f34322d3438203d3e20323035393431.roa
File:                     323630323a663530633a6534303a3a2f34322d3438203d3e20323035393431.roa (raw, json)
Hash identifier:          GiqA2nWtlnIe1kTbvTr+IPOwH/NqXfK6AicnEilUXjA=
Subject key identifier:   87:7D:DE:33:D9:9C:35:90:D2:EC:B6:A0:CE:5C:E2:1C:59:40:58:AC
Certificate issuer:       /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Certificate serial:       62CB3F2E338E8EF667511B15B69748BB2B0A2CF5
Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a6534303a3a2f34322d3438203d3e20323035393431.roa
Signing time:             Sun 02 Nov 2025 16:58:09 +0000
ROA not before:           Sun 02 Nov 2025 16:53:09 +0000
ROA not after:            Sun 01 Nov 2026 16:58:09 +0000
asID:                     205941
IP address blocks:        2602:f50c:e40::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:cb:3f:2e:33:8e:8e:f6:67:51:1b:15:b6:97:48:bb:2b:0a:2c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
        Validity
            Not Before: Nov  2 16:53:09 2025 GMT
            Not After : Nov  1 16:58:09 2026 GMT
        Subject: CN=877DDE33D99C3590D2ECB6A0CE5CE21C594058AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:18:02:42:8c:26:7e:0b:8e:35:e8:af:33:ad:
                    ae:c6:e3:b7:b7:57:91:89:3b:e5:cc:8e:f3:c2:73:
                    c8:c4:1b:dc:6b:66:35:ab:8b:c6:a0:b6:96:58:e2:
                    e1:24:b0:c9:4a:1d:76:ed:7d:a7:92:36:ea:75:55:
                    cc:14:de:16:f1:20:37:a7:de:37:e5:05:ef:b9:51:
                    5c:27:46:01:6d:e5:d8:40:49:ce:f4:ac:db:31:59:
                    8e:56:80:0d:6c:e5:59:1a:cb:84:47:8a:06:98:b8:
                    d2:2e:ac:dc:7a:80:36:78:59:b3:bf:5c:be:75:09:
                    63:73:39:ea:0f:4a:60:15:98:70:70:81:69:79:3a:
                    b5:d4:d2:ac:c4:a1:b6:f0:a7:66:97:89:ee:d1:8f:
                    c7:cb:54:23:f9:5a:75:7a:99:d7:c3:26:91:d4:8f:
                    83:78:f1:b2:2e:68:1e:b9:b7:1f:64:31:0a:ee:39:
                    c4:86:9c:6e:55:75:2a:c3:bc:64:38:f3:3a:9b:42:
                    19:e9:c8:62:b3:a7:0d:ce:e9:dc:4b:37:2c:16:37:
                    07:f0:7a:b0:ae:20:19:0b:06:49:22:65:eb:64:76:
                    9f:6c:55:9d:05:48:ad:05:8e:d6:be:b1:f5:87:79:
                    2b:3b:16:42:3c:51:d0:d1:15:d1:d7:61:8d:84:61:
                    02:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7D:DE:33:D9:9C:35:90:D2:EC:B6:A0:CE:5C:E2:1C:59:40:58:AC
            X509v3 Authority Key Identifier:
                keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a6534303a3a2f34322d3438203d3e20323035393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f50c:e40::/42

    Signature Algorithm: sha256WithRSAEncryption
         98:03:29:dc:77:aa:21:ab:82:38:0e:41:c2:33:01:70:27:1d:
         c2:18:b7:39:1e:94:b7:2e:5d:06:37:48:09:dc:3e:09:6d:53:
         09:96:76:41:5e:e3:b4:a3:7e:e5:ea:60:94:63:b4:8d:18:73:
         bb:5b:f5:2f:a8:3a:13:72:43:c7:34:a5:9a:6d:f4:ad:41:85:
         e1:41:4e:37:04:bb:f7:1a:f8:ac:29:22:b0:43:ea:3d:65:b3:
         6b:ac:7f:4d:ab:ce:a3:80:4f:4d:41:dc:74:ae:36:a7:f1:be:
         fd:44:03:3f:3c:56:34:c7:d9:ce:a0:db:3f:f5:31:a1:0e:80:
         4f:bb:8e:cf:17:46:db:2a:72:a4:9d:d7:d9:01:52:8a:7c:83:
         9a:cd:79:ad:ed:82:c0:c2:5a:1c:1b:46:9d:a7:b8:16:65:e9:
         cc:fc:6c:65:d5:9a:59:af:71:b7:96:dd:cf:54:48:17:58:e4:
         df:78:5d:fc:07:73:20:b8:fd:70:c4:ca:46:ab:65:6b:bc:bb:
         03:63:ca:31:b9:47:ff:f3:44:0b:dd:9d:64:23:5c:fd:5b:98:
         f7:c8:55:49:66:5b:22:d3:38:5a:67:04:b9:92:11:14:57:3c:
         48:1d:3a:1a:61:de:9e:b5:4b:df:db:ac:df:12:64:be:fd:83:
         15:67:7e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:36:16 2025 by rpki-client