Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3430303a3a2f34302d3430203d3e20333936393933.roa
File:                     323630323a663734333a3430303a3a2f34302d3430203d3e20333936393933.roa (raw, json)
Hash identifier:          N6ab0zmd7oTxCx630BJdazRrXSG0YvSh5EmJD8bQ2qI=
Subject key identifier:   E4:15:A9:31:4A:45:50:7C:04:B3:1A:73:5C:77:47:83:F6:CB:FF:2E
Certificate issuer:       /CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
Certificate serial:       1DEF93273980B43EC13A9DEBBC6C6D16696DC23D
Authority key identifier: 30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3430303a3a2f34302d3430203d3e20333936393933.roa
Signing time:             Sun 12 Oct 2025 01:01:28 +0000
ROA not before:           Sun 12 Oct 2025 00:56:28 +0000
ROA not after:            Sun 11 Oct 2026 01:01:28 +0000
asID:                     396993
IP address blocks:        2602:f743:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl
                          rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 11:09:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ef:93:27:39:80:b4:3e:c1:3a:9d:eb:bc:6c:6d:16:69:6d:c2:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
        Validity
            Not Before: Oct 12 00:56:28 2025 GMT
            Not After : Oct 11 01:01:28 2026 GMT
        Subject: CN=E415A9314A45507C04B31A735C774783F6CBFF2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a9:a0:3e:ba:26:f2:85:12:ef:a5:84:c8:61:
                    a2:01:50:8c:0b:4d:fa:1a:01:b0:c4:27:00:72:cf:
                    84:a5:fb:9d:ff:81:ff:39:28:b1:0e:2d:ac:dc:dc:
                    72:dd:bf:d9:37:60:10:dc:b0:05:90:ab:ce:b9:e4:
                    b3:aa:21:52:0b:b3:4f:3e:eb:85:88:aa:d0:50:aa:
                    5a:b9:69:81:82:7e:18:d1:4e:e8:56:e6:27:85:d1:
                    33:f7:fa:00:d4:45:b2:dd:63:ca:d6:5e:bf:f2:dd:
                    a0:84:3c:f6:9f:87:65:2f:a2:e4:e0:5d:fd:41:a8:
                    ea:43:5b:e2:1b:42:54:03:b7:f7:8d:11:8b:33:ec:
                    68:cb:6e:ee:b6:4f:a2:8d:7c:4f:62:84:2d:c9:f3:
                    8d:08:5b:a6:c0:aa:df:ec:2a:57:8e:96:d3:bd:fe:
                    e3:b5:2c:35:08:c0:75:67:72:b7:3b:2d:f6:e9:6e:
                    44:e2:20:c1:44:84:17:95:2d:94:6e:4c:db:99:7a:
                    e8:ee:e4:36:77:f5:f4:7d:b3:6f:c6:8b:3a:86:ec:
                    aa:d9:b6:c3:a1:a8:91:e9:e0:2c:bb:66:ed:e6:86:
                    b2:7b:de:be:f4:d5:06:59:d3:8e:8f:59:0a:70:8f:
                    a3:95:f9:22:0b:45:7a:8b:fc:bd:31:0e:81:17:c1:
                    60:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:15:A9:31:4A:45:50:7C:04:B3:1A:73:5C:77:47:83:F6:CB:FF:2E
            X509v3 Authority Key Identifier:
                keyid:30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3430303a3a2f34302d3430203d3e20333936393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f743:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:07:72:4c:55:e7:28:77:cd:12:c2:0d:8d:99:f9:26:7e:c3:
         1c:c1:a6:90:89:f0:bc:13:12:b5:aa:27:fa:bf:99:2b:2e:7d:
         c1:eb:63:dc:05:e2:55:29:b9:3b:b3:db:61:38:7d:32:1a:e1:
         af:d4:f5:76:bd:6c:2d:fc:94:91:81:35:dc:f9:f1:c2:95:c1:
         f9:75:4e:cd:b7:e3:d5:4c:e5:e1:bf:92:ed:0f:c0:79:b6:5a:
         3c:a6:1b:30:d8:e1:bf:e0:dc:76:51:41:b9:3e:ac:e5:68:30:
         48:af:22:d4:9c:52:b5:12:ff:81:fd:c6:b9:c9:42:27:cb:58:
         ff:5c:d4:83:05:c3:86:bc:fd:a9:54:27:8a:bf:3e:bd:7b:56:
         ce:2e:f2:8c:d6:d3:d0:2d:0f:1f:7c:7f:98:52:74:2f:8a:13:
         d7:9c:bf:18:0b:33:bf:0f:b9:7c:64:df:c1:dc:68:2e:43:1f:
         0d:7d:e0:98:ff:28:52:f8:97:fd:2c:0a:31:98:b6:2a:e4:7a:
         ff:6e:4f:fe:b2:eb:e5:23:62:bd:c8:77:37:e7:46:b6:da:fd:
         6a:d6:df:69:20:6d:ac:44:3a:ea:ee:be:a8:61:64:5c:53:c6:
         74:31:75:28:ae:04:9c:c6:1d:b1:c1:9a:99:da:ca:cf:ca:8a:
         f1:b0:8a:fe
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUHe+TJzmAtD7BOp3rvGxtFmltwj0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDM3MjE1OTRkYTk0MjRiOTQ5ZDdjNjk1ZjAyZGVhZDdh
YmZmNDBiYTQyNmEyZTQxZjMwHhcNMjUxMDEyMDA1NjI4WhcNMjYxMDExMDEwMTI4
WjAzMTEwLwYDVQQDEyhFNDE1QTkzMTRBNDU1MDdDMDRCMzFBNzM1Qzc3NDc4M0Y2
Q0JGRjJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6mgProm8oUS
76WEyGGiAVCMC036GgGwxCcAcs+Epfud/4H/OSixDi2s3Nxy3b/ZN2AQ3LAFkKvO
ueSzqiFSC7NPPuuFiKrQUKpauWmBgn4Y0U7oVuYnhdEz9/oA1EWy3WPK1l6/8t2g
hDz2n4dlL6Lk4F39QajqQ1viG0JUA7f3jRGLM+xoy27utk+ijXxPYoQtyfONCFum
wKrf7CpXjpbTvf7jtSw1CMB1Z3K3Oy326W5E4iDBRIQXlS2UbkzbmXro7uQ2d/X0
fbNvxos6huyq2bbDoaiR6eAsu2bt5oaye96+9NUGWdOOj1kKcI+jlfkiC0V6i/y9
MQ6BF8FgBQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFOQVqTFKRVB8BLMac1x3R4P2
y/8uMB8GA1UdIwQYMBaAFDBrdBpLMqK968y0xz2yUsUszz9RMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzI1ODg2YmM1OTJkZTRiMDU5NjU5YmI3OWVjMDhiYWNiLzAv
MzA2Qjc0MUE0QjMyQTJCREVCQ0NCNEM3M0RCMjUyQzUyQ0NGM0Y1MS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzU2NWY1NDM1LTVjZDEtNDhlNC05Y2ZjLTg0NGZjZDA2ZWZlMS80Mzcy
MTU5NGRhOTQyNGI5NDlkN2M2OTVmMDJkZWFkN2FiZmY0MGJhNDI2YTJlNDFmMy5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8yNTg4NmJjNTkyZGU0YjA1OTY1OWJi
NzllYzA4YmFjYi8wLzMyMzYzMDMyM2E2NjM3MzQzMzNhMzQzMDMwM2EzYTJmMzQz
MDJkMzQzMDIwM2QzZTIwMzMzOTM2MzkzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3QwQwDQYJ
KoZIhvcNAQELBQADggEBADsHckxV5yh3zRLCDY2Z+SZ+wxzBppCJ8LwTErWqJ/q/
mSsufcHrY9wF4lUpuTuz22E4fTIa4a/U9Xa9bC38lJGBNdz58cKVwfl1Ts2349VM
5eG/ku0PwHm2WjymGzDY4b/g3HZRQbk+rOVoMEivItScUrUS/4H9xrnJQifLWP9c
1IMFw4a8/alUJ4q/Pr17Vs4u8ozW09AtDx98f5hSdC+KE9ecvxgLM78PuXxk38Hc
aC5DHw194Jj/KFL4l/0sCjGYtirkev9uT/6y6+UjYr3IdzfnRrba/WrW32kgbaxE
OuruvqhhZFxTxnQxdSiuBJzGHbHBmpnays/KivGwiv4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:49:31 2025 by rpki-client