Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365363a3a2f34382d3438203d3e20323132363138.roa
File:                     323630323a663734333a3365363a3a2f34382d3438203d3e20323132363138.roa (raw, json)
Hash identifier:          ecSfK1paxN9rNcIN8qQtQucmt4r6hrWYh2ItFgdxKlM=
Subject key identifier:   C0:C1:EC:45:CB:80:00:70:C1:DC:C7:CE:40:E0:D5:B2:47:1C:42:6B
Certificate issuer:       /CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
Certificate serial:       5F81DE0C28E1E6228D285810A7FD00E3BA483648
Authority key identifier: 30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365363a3a2f34382d3438203d3e20323132363138.roa
Signing time:             Wed 15 Oct 2025 22:55:11 +0000
ROA not before:           Wed 15 Oct 2025 22:50:11 +0000
ROA not after:            Wed 14 Oct 2026 22:55:11 +0000
asID:                     212618
IP address blocks:        2602:f743:3e6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl
                          rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 03:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:81:de:0c:28:e1:e6:22:8d:28:58:10:a7:fd:00:e3:ba:48:36:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
        Validity
            Not Before: Oct 15 22:50:11 2025 GMT
            Not After : Oct 14 22:55:11 2026 GMT
        Subject: CN=C0C1EC45CB800070C1DCC7CE40E0D5B2471C426B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:f8:bb:69:58:4e:77:6f:00:f7:aa:f1:b0:
                    cb:b2:89:98:a1:31:7c:bd:4b:9c:94:1d:0e:d6:6a:
                    a3:58:d3:22:35:9e:ae:59:14:bd:56:de:17:5a:9f:
                    08:9d:dd:d8:ac:a6:31:f9:e1:cc:9b:01:a2:0e:09:
                    30:b4:f8:f4:63:4d:98:e8:be:db:d5:6f:b8:a2:c5:
                    10:0d:3f:4e:72:d1:23:8a:b7:c7:84:13:1b:bf:6c:
                    a5:0f:a1:34:88:97:f5:78:88:7e:bd:41:37:a9:58:
                    66:3e:f1:f0:8e:3e:f0:5f:64:2a:5b:d1:56:f8:54:
                    95:43:cb:9d:6c:f5:08:8e:5a:3c:8c:e5:eb:35:87:
                    02:19:0b:2f:66:8a:4f:18:5b:96:1c:34:7d:f9:f8:
                    e6:b1:0e:b3:b9:dd:f5:27:3f:c2:49:64:2c:e0:82:
                    dc:d6:c2:b2:2f:c9:72:54:dc:f5:b8:9f:ac:ec:ab:
                    65:3e:d5:da:40:7b:5d:20:63:e0:0e:04:34:40:e7:
                    8b:46:d1:9f:fa:52:2c:12:91:b5:62:dd:4a:e3:17:
                    94:bc:76:d7:6f:61:71:5c:17:b2:b1:54:0f:02:b9:
                    9c:d4:5b:7c:04:d8:33:4a:28:2d:3a:1e:60:d2:73:
                    88:3c:d5:43:cb:9c:c6:a1:fe:a5:51:c5:12:9f:de:
                    a3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C1:EC:45:CB:80:00:70:C1:DC:C7:CE:40:E0:D5:B2:47:1C:42:6B
            X509v3 Authority Key Identifier:
                keyid:30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365363a3a2f34382d3438203d3e20323132363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f743:3e6::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:dd:13:b6:a2:0a:09:da:a3:53:33:93:93:b4:78:18:8f:f7:
         5c:20:78:22:d4:82:ef:27:1c:f4:79:01:fc:47:69:17:75:95:
         80:26:bd:39:51:eb:ef:fc:56:78:ae:2a:bc:a0:4c:6f:2f:58:
         9e:dd:6f:94:f7:7b:78:46:f5:6c:76:0b:27:4b:07:c4:b3:14:
         66:10:22:57:35:4a:76:55:21:15:b5:33:a5:49:e4:6d:f4:8c:
         1d:0a:08:e8:bd:58:39:68:df:5a:83:ad:ca:7f:24:66:07:4a:
         51:59:6f:b0:ea:56:d4:34:52:58:d0:c6:de:09:eb:b4:c0:5c:
         cc:ec:29:4d:cb:ba:fd:08:ad:ed:bf:2c:59:c2:44:83:13:73:
         4d:f8:c7:e7:60:ba:27:d4:0e:9e:90:9d:51:53:a2:2b:57:0f:
         86:48:f7:98:c1:b1:46:78:a0:37:57:0f:97:54:98:fc:e3:08:
         b5:d6:7e:da:6f:20:ca:6e:9d:a6:f2:94:13:48:93:88:33:58:
         69:a5:a5:ea:78:1d:db:76:0d:43:7d:c2:1b:25:b5:de:f7:98:
         87:eb:9e:3c:bf:30:cd:32:b9:de:f3:47:01:6f:9b:1f:74:20:
         4c:3d:a2:b9:85:a7:06:e6:34:1b:d0:e4:ce:39:79:fa:bd:8c:
         af:1a:88:0b
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUX4HeDCjh5iKNKFgQp/0A47pINkgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDM3MjE1OTRkYTk0MjRiOTQ5ZDdjNjk1ZjAyZGVhZDdh
YmZmNDBiYTQyNmEyZTQxZjMwHhcNMjUxMDE1MjI1MDExWhcNMjYxMDE0MjI1NTEx
WjAzMTEwLwYDVQQDEyhDMEMxRUM0NUNCODAwMDcwQzFEQ0M3Q0U0MEUwRDVCMjQ3
MUM0MjZCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK/4u2lYTndv
APeq8bDLsomYoTF8vUuclB0O1mqjWNMiNZ6uWRS9Vt4XWp8Ind3YrKYx+eHMmwGi
DgkwtPj0Y02Y6L7b1W+4osUQDT9OctEjirfHhBMbv2ylD6E0iJf1eIh+vUE3qVhm
PvHwjj7wX2QqW9FW+FSVQ8udbPUIjlo8jOXrNYcCGQsvZopPGFuWHDR9+fjmsQ6z
ud31Jz/CSWQs4ILc1sKyL8lyVNz1uJ+s7KtlPtXaQHtdIGPgDgQ0QOeLRtGf+lIs
EpG1Yt1K4xeUvHbXb2FxXBeysVQPArmc1Ft8BNgzSigtOh5g0nOIPNVDy5zGof6l
UcUSn96j2QIDAQABo4ICvTCCArkwHQYDVR0OBBYEFMDB7EXLgABwwdzHzkDg1bJH
HEJrMB8GA1UdIwQYMBaAFDBrdBpLMqK968y0xz2yUsUszz9RMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzI1ODg2YmM1OTJkZTRiMDU5NjU5YmI3OWVjMDhiYWNiLzAv
MzA2Qjc0MUE0QjMyQTJCREVCQ0NCNEM3M0RCMjUyQzUyQ0NGM0Y1MS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzU2NWY1NDM1LTVjZDEtNDhlNC05Y2ZjLTg0NGZjZDA2ZWZlMS80Mzcy
MTU5NGRhOTQyNGI5NDlkN2M2OTVmMDJkZWFkN2FiZmY0MGJhNDI2YTJlNDFmMy5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8yNTg4NmJjNTkyZGU0YjA1OTY1OWJi
NzllYzA4YmFjYi8wLzMyMzYzMDMyM2E2NjM3MzQzMzNhMzM2NTM2M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzMTMyMzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3QwPmMA0G
CSqGSIb3DQEBCwUAA4IBAQCQ3RO2ogoJ2qNTM5OTtHgYj/dcIHgi1ILvJxz0eQH8
R2kXdZWAJr05Uevv/FZ4riq8oExvL1ie3W+U93t4RvVsdgsnSwfEsxRmECJXNUp2
VSEVtTOlSeRt9IwdCgjovVg5aN9ag63KfyRmB0pRWW+w6lbUNFJY0MbeCeu0wFzM
7ClNy7r9CK3tvyxZwkSDE3NN+MfnYLon1A6ekJ1RU6IrVw+GSPeYwbFGeKA3Vw+X
VJj84wi11n7abyDKbp2m8pQTSJOIM1hppaXqeB3bdg1DfcIbJbXe95iH6548vzDN
Mrne80cBb5sfdCBMPaK5hacG5jQb0OTOOXn6vYyvGogL
-----END CERTIFICATE-----
Generated at Tue Oct 21 10:46:03 2025 by rpki-client