Route Origin Authorization

$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/2/323630323a663730343a3830303a3a2f34342d3434203d3e203233353037.roa
File:                     323630323a663730343a3830303a3a2f34342d3434203d3e203233353037.roa (raw, json)
Hash identifier:          hW7Cibb4DB3aJTXMRFNZD+ujtyTy/4U1CRojyyuS1pk=
Subject key identifier:   FB:5D:3D:ED:01:C1:06:EA:20:11:A3:15:B8:BA:85:C9:43:F9:32:67
Certificate issuer:       /CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770
Certificate serial:       413E6D1F813C1C1829C2408909B04E99691D89D0
Authority key identifier: 3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/2/323630323a663730343a3830303a3a2f34342d3434203d3e203233353037.roa
Signing time:             Mon 27 Oct 2025 06:47:35 +0000
ROA not before:           Mon 27 Oct 2025 06:42:35 +0000
ROA not after:            Mon 26 Oct 2026 06:47:35 +0000
asID:                     23507
IP address blocks:        2602:f704:800::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.crl
                          rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 04:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3e:6d:1f:81:3c:1c:18:29:c2:40:89:09:b0:4e:99:69:1d:89:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770
        Validity
            Not Before: Oct 27 06:42:35 2025 GMT
            Not After : Oct 26 06:47:35 2026 GMT
        Subject: CN=FB5D3DED01C106EA2011A315B8BA85C943F93267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3b:f6:84:fc:54:00:dd:9e:14:d9:02:d3:48:
                    4e:1b:7a:4f:c1:fc:cd:40:20:d0:23:b4:b5:56:23:
                    88:6d:5a:0a:93:ee:73:f0:fe:88:80:1e:a4:d7:0d:
                    46:a0:40:82:3a:fa:8f:77:cc:31:d3:40:76:10:22:
                    1d:54:5c:f5:dd:0e:9d:02:ae:7a:34:98:87:71:50:
                    79:76:5b:b3:fd:34:3b:bf:ae:8a:2e:7c:af:5c:30:
                    c8:55:4a:7d:be:a7:24:02:b5:5d:27:19:cf:b4:a1:
                    4d:09:51:0f:3d:41:1b:ac:ff:ef:9a:d5:f2:04:32:
                    c4:52:64:75:bb:e0:dc:12:27:4d:38:a5:be:fb:cc:
                    8c:d6:36:a3:91:f3:f6:be:aa:8a:08:27:35:3a:50:
                    bc:e5:4b:54:89:a1:e2:5e:19:f1:47:2b:f1:ca:a1:
                    d8:26:68:5b:03:03:9a:af:fd:e3:ed:62:bc:87:14:
                    85:8f:4a:46:f4:31:38:a9:0f:c2:49:9d:dc:59:68:
                    1a:9a:1a:61:06:82:50:91:a6:b2:ec:8c:74:31:bf:
                    b8:8a:6f:5f:d2:03:3a:ab:b0:26:81:10:82:ff:10:
                    f4:24:1a:21:98:4f:75:1d:24:20:20:b5:1c:32:f6:
                    9b:c8:0e:11:87:81:f8:41:44:e9:73:f8:10:d0:74:
                    d5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5D:3D:ED:01:C1:06:EA:20:11:A3:15:B8:BA:85:C9:43:F9:32:67
            X509v3 Authority Key Identifier:
                keyid:3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/2/323630323a663730343a3830303a3a2f34342d3434203d3e203233353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f704:800::/44

    Signature Algorithm: sha256WithRSAEncryption
         aa:11:05:b8:f1:d8:3f:45:99:8c:7e:af:3c:4d:4f:04:c3:46:
         20:28:49:e5:38:ee:93:6c:55:57:85:a3:c7:8a:2a:e5:4e:ed:
         8c:65:34:9e:8c:1a:67:37:7a:24:98:7b:a3:5c:48:87:f6:fa:
         c5:0e:44:b8:d3:f4:f9:38:f5:65:96:2b:ff:09:21:16:2a:6f:
         e6:d6:10:4e:49:a8:82:20:30:fd:79:1f:8c:38:eb:14:a6:4f:
         0f:ad:03:ec:84:ba:20:35:14:1d:1e:92:f6:2b:f2:ad:a3:e5:
         98:e5:47:a2:6d:4d:f5:22:1d:ad:1c:15:eb:2c:34:8a:a7:5d:
         3d:cd:5d:50:3f:c7:8a:6a:c9:ab:78:3a:f6:0e:52:59:4e:29:
         d9:95:ab:1a:23:14:af:30:ba:51:ae:f8:ff:06:80:3b:5f:ab:
         2c:3b:76:d2:d7:b9:42:aa:85:6b:0a:2f:d1:3c:ad:85:15:9b:
         bc:7d:d0:6b:40:64:85:29:2c:f3:fe:13:dd:6b:f3:53:c0:d2:
         6d:9b:e6:95:c5:b8:61:d3:8c:71:e9:ed:e2:28:9e:33:7a:af:
         6d:92:01:b6:49:d7:fa:cc:f1:04:fc:9a:ee:d6:83:78:cf:ee:
         e3:16:0a:ec:24:6a:b1:98:ad:d4:61:f6:03:50:ce:b6:78:16:
         67:fa:90:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:52:17 2025 by rpki-client