Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/3/323630323a3233343a3a2f34302d3438203d3e2031303132.roa
File:                     323630323a3233343a3a2f34302d3438203d3e2031303132.roa (raw, json)
Hash identifier:          74DoCnmbhlr0/ZdyaloXI2QUlJwQ1bs6+szn/ray8oA=
Subject key identifier:   B9:FF:5D:0C:99:EE:9C:48:BC:7E:25:86:F7:18:21:C2:E9:32:75:76
Certificate issuer:       /CN=7e6381cf35808ffd021b64c945280e6774cd0f142d93757e72
Certificate serial:       189DBD93E3CA14C6B0D4FE58E0DCE9D2B03EF75F
Authority key identifier: 53:F7:C4:DA:6B:E2:2F:59:C5:12:27:E1:59:26:EB:85:A5:04:E1:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35808ffd021b64c945280e6774cd0f142d93757e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/3/323630323a3233343a3a2f34302d3438203d3e2031303132.roa
Signing time:             Thu 16 Oct 2025 06:47:20 +0000
ROA not before:           Thu 16 Oct 2025 06:42:20 +0000
ROA not after:            Thu 15 Oct 2026 06:47:20 +0000
asID:                     1012
IP address blocks:        2602:234::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/3/53F7C4DA6BE22F59C51227E15926EB85A504E1FE.crl
                          rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/3/53F7C4DA6BE22F59C51227E15926EB85A504E1FE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35808ffd021b64c945280e6774cd0f142d93757e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 03:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9d:bd:93:e3:ca:14:c6:b0:d4:fe:58:e0:dc:e9:d2:b0:3e:f7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf35808ffd021b64c945280e6774cd0f142d93757e72
        Validity
            Not Before: Oct 16 06:42:20 2025 GMT
            Not After : Oct 15 06:47:20 2026 GMT
        Subject: CN=B9FF5D0C99EE9C48BC7E2586F71821C2E9327576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4e:ee:94:9e:45:b5:cf:a3:a3:52:c1:32:70:
                    cd:8e:db:08:00:3e:35:9b:18:43:e2:a7:a5:53:ec:
                    2d:4e:da:9e:06:ba:7e:c3:7a:9c:b1:f3:8a:42:0d:
                    7d:b3:a9:e6:b3:b1:87:46:9b:3e:62:25:81:d0:e7:
                    50:f4:91:ed:b7:41:e2:ec:0f:43:9d:7a:0e:e4:ed:
                    19:3b:4f:16:86:bc:5c:d8:87:e3:1d:30:32:e8:42:
                    a7:1b:f8:f1:d2:23:f8:72:ce:8e:d4:49:66:64:ec:
                    67:a3:b8:58:b2:e6:7c:5a:be:ad:65:c9:90:1b:83:
                    bc:a0:1b:1a:f5:14:7a:3f:76:19:ca:42:0d:5e:6b:
                    aa:c5:c4:b7:48:b2:95:25:ba:b2:10:e7:fd:ba:41:
                    65:07:9f:fd:eb:83:eb:0e:27:f3:52:8b:bf:a8:07:
                    dd:a5:1e:b0:05:34:05:47:f3:0b:3e:05:35:8b:7c:
                    ea:56:22:57:1f:0f:31:8c:13:7c:cf:01:33:ec:a9:
                    eb:14:65:6b:79:75:94:25:a3:9a:88:39:59:10:60:
                    12:a7:72:6d:17:2a:70:f7:f5:de:ff:da:bb:08:ff:
                    cc:42:ad:c4:0d:48:0b:8d:7d:a8:2e:6b:2b:5b:7b:
                    68:b5:05:92:94:1a:0c:0f:70:65:33:79:c5:6c:32:
                    de:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FF:5D:0C:99:EE:9C:48:BC:7E:25:86:F7:18:21:C2:E9:32:75:76
            X509v3 Authority Key Identifier:
                keyid:53:F7:C4:DA:6B:E2:2F:59:C5:12:27:E1:59:26:EB:85:A5:04:E1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/3/53F7C4DA6BE22F59C51227E15926EB85A504E1FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35808ffd021b64c945280e6774cd0f142d93757e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/3/323630323a3233343a3a2f34302d3438203d3e2031303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:234::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:dc:d3:c7:1f:45:26:2a:8a:9c:f3:1a:6b:31:c6:a7:95:0f:
         ee:d9:c8:89:61:ab:08:8b:20:bc:3a:e9:b0:bf:21:ff:cb:52:
         91:5e:60:4a:de:cc:f2:7a:53:de:0f:72:05:19:07:0a:4a:77:
         a1:0e:2a:95:9d:4a:2b:0b:6d:78:82:0d:25:59:cd:53:ac:f6:
         65:88:5e:78:98:e9:d1:97:88:d2:63:f4:ce:20:2a:01:28:8c:
         3d:9e:fb:ce:f8:12:79:f5:1c:c8:49:98:30:34:16:2e:23:38:
         05:93:ef:e2:8e:80:81:b7:92:37:ec:e7:30:9c:14:45:5b:4f:
         64:fb:60:44:da:f2:81:15:81:de:c3:eb:19:09:c0:1e:cf:a8:
         a8:e1:b9:15:4f:bb:90:be:07:1a:0f:1d:80:a4:10:ef:67:37:
         16:39:75:04:d3:97:94:0f:04:e3:7b:a3:1e:56:53:1f:23:8e:
         3c:20:b0:d2:c5:32:47:cc:a9:31:a6:02:dc:03:62:71:54:86:
         95:c1:83:76:8b:f6:c1:85:c7:f5:32:2f:9f:56:31:b3:8b:72:
         8b:24:81:ca:44:b1:ee:50:97:81:3a:d2:d8:6c:a2:66:e6:08:
         a3:20:60:7f:73:8e:5c:f9:c3:81:ae:38:9f:c8:be:23:f0:34:
         43:94:45:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:46:03 2025 by rpki-client