Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/323630363a623063303a3a2f34302d3438203d3e2031303132.roa
File:                     323630363a623063303a3a2f34302d3438203d3e2031303132.roa (raw, json)
Hash identifier:          2JckCDZ3PEDho5ZcXCgeI3vZCkGY92j1uIo9Xwh7jig=
Subject key identifier:   36:D5:48:F6:59:C2:D0:B2:A8:20:A5:B2:94:76:90:00:84:D8:9B:7F
Certificate issuer:       /CN=6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355
Certificate serial:       684294487E452E5F472B1D62A8729CB4D40878FC
Authority key identifier: 26:96:8C:61:5A:69:1B:49:75:4C:B6:78:A4:DD:9F:C5:A9:38:A6:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/323630363a623063303a3a2f34302d3438203d3e2031303132.roa
Signing time:             Fri 17 Oct 2025 11:12:45 +0000
ROA not before:           Fri 17 Oct 2025 11:07:45 +0000
ROA not after:            Fri 16 Oct 2026 11:12:45 +0000
asID:                     1012
IP address blocks:        2606:b0c0::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.crl
                          rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:52:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:42:94:48:7e:45:2e:5f:47:2b:1d:62:a8:72:9c:b4:d4:08:78:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355
        Validity
            Not Before: Oct 17 11:07:45 2025 GMT
            Not After : Oct 16 11:12:45 2026 GMT
        Subject: CN=36D548F659C2D0B2A820A5B29476900084D89B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:65:07:9e:4b:c5:cf:ab:a5:c7:f4:01:b4:db:
                    1f:7a:d6:c8:7a:2a:51:ec:d4:b3:81:7b:22:d6:e5:
                    58:4a:67:d2:b6:ed:40:d3:0d:ba:08:4d:96:cf:b7:
                    d2:52:99:f1:b6:b5:43:10:85:a4:9f:9f:27:3f:9b:
                    b3:06:3e:a1:e0:8d:15:52:f5:53:d3:08:e3:a6:9c:
                    ed:89:2d:dc:5f:a7:79:6c:87:af:52:b0:6d:da:a9:
                    2a:e5:96:f7:6f:83:38:ec:e4:f1:45:4a:22:8a:8d:
                    08:c1:df:c2:56:71:63:b5:c5:e1:a4:02:26:c9:0c:
                    8f:24:4d:da:64:1b:43:c5:ce:9e:0e:a7:fc:10:e2:
                    44:a2:e9:f0:04:fa:5c:6f:6b:b5:cc:21:40:12:ef:
                    f9:3b:46:02:ff:d9:c0:8b:aa:1a:d3:5b:a0:8a:6f:
                    fa:12:fa:9f:f9:13:68:11:bb:dd:35:00:cf:90:6a:
                    92:17:1a:06:b3:5e:67:f1:43:20:ce:9a:cc:7b:03:
                    7b:43:c1:13:0f:49:a5:33:fb:88:5d:20:d7:b4:b3:
                    89:62:67:51:6b:f9:f4:94:58:a5:7d:44:b8:9e:21:
                    45:7a:73:26:26:09:66:da:0a:88:0d:90:bb:41:96:
                    b5:58:a9:8e:9e:0d:40:7d:14:c7:08:33:ed:a9:fe:
                    2b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D5:48:F6:59:C2:D0:B2:A8:20:A5:B2:94:76:90:00:84:D8:9B:7F
            X509v3 Authority Key Identifier:
                keyid:26:96:8C:61:5A:69:1B:49:75:4C:B6:78:A4:DD:9F:C5:A9:38:A6:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/323630363a623063303a3a2f34302d3438203d3e2031303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b0c0::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:ab:bb:4d:b3:a4:88:c5:a3:69:89:7f:a4:1c:bb:96:a4:a9:
         4b:a3:e3:1b:e4:5b:c5:12:2b:4b:a4:fa:3f:5c:bd:8b:ed:ef:
         53:57:35:c8:c2:c5:c9:03:fa:c3:3c:39:67:b1:a7:61:b1:30:
         de:7a:fb:27:05:51:5e:f0:34:7c:5e:b3:4e:99:a0:10:41:7d:
         bc:44:08:f4:04:8b:60:20:25:74:33:44:02:2b:06:42:62:82:
         7f:92:7a:c8:cd:2a:4c:46:06:30:dd:a6:f2:57:a3:58:16:e3:
         08:d9:67:1a:9f:85:24:37:41:da:fb:d5:5c:c0:f9:7e:f7:4e:
         86:65:3a:5b:ee:74:e7:6c:27:11:27:ea:5b:6c:78:97:a6:56:
         1c:42:f2:ec:b3:9d:53:ca:3a:5c:d8:55:53:70:0a:10:8c:26:
         91:a9:60:92:df:46:53:6c:0a:d2:2f:be:87:c4:b3:75:ab:fa:
         e1:ef:5d:e7:53:86:7f:6a:3c:37:35:21:bb:08:65:ef:7a:0e:
         ab:4b:1b:c4:3b:8e:27:69:07:0c:0f:34:18:ad:23:0f:ec:6c:
         ad:e4:14:ff:4f:43:5c:b0:e0:d7:36:ba:67:c2:1b:88:78:c7:
         86:b2:32:90:7b:5d:6b:b9:ae:40:f7:4e:93:95:49:29:db:91:
         88:4d:d3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:36:08 2025 by rpki-client