Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32623a3a2f34382d3438203d3e203131393637.roa
File:                     323630323a663732653a32623a3a2f34382d3438203d3e203131393637.roa (raw, json)
Hash identifier:          VmeHKyKCSeMAI55/QyGU5NtSH1H5dHfKlXL4khCnZZo=
Subject key identifier:   EB:B7:52:0C:D5:0C:8A:65:5C:F2:3E:48:9A:66:CC:C9:55:A5:87:50
Certificate issuer:       /CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
Certificate serial:       57A5EB4758AE723667A1F071656E50D18630E2A0
Authority key identifier: 41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32623a3a2f34382d3438203d3e203131393637.roa
Signing time:             Thu 08 May 2025 13:52:54 +0000
ROA not before:           Thu 08 May 2025 13:47:54 +0000
ROA not after:            Thu 07 May 2026 13:52:54 +0000
asID:                     11967
IP address blocks:        2602:f72e:2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a5:eb:47:58:ae:72:36:67:a1:f0:71:65:6e:50:d1:86:30:e2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Validity
            Not Before: May  8 13:47:54 2025 GMT
            Not After : May  7 13:52:54 2026 GMT
        Subject: CN=EBB7520CD50C8A655CF23E489A66CCC955A58750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c6:0c:33:dc:2a:6b:d7:a2:a2:e9:61:c0:8a:
                    9a:b9:6d:10:6d:87:2c:95:ff:5c:cb:36:9f:e1:06:
                    c1:09:70:c5:86:d8:9e:ec:97:06:0a:43:10:f3:3f:
                    49:21:e5:c2:13:90:04:ba:00:ac:c8:60:1f:08:6a:
                    85:07:47:63:eb:84:08:ef:af:94:e3:21:2f:96:6b:
                    d2:45:90:e9:9d:23:e7:aa:81:23:7d:c6:ea:86:cb:
                    93:49:61:4c:86:ce:bd:8d:25:d5:7c:df:ce:15:ed:
                    96:e8:09:84:37:4e:31:76:f3:b1:31:17:62:a5:0a:
                    08:3d:3b:94:0f:56:44:0c:cf:2c:d9:03:8d:53:1e:
                    62:17:b9:1e:e6:73:fd:91:18:1a:f3:44:cd:4d:5c:
                    d7:cd:52:11:4f:08:43:93:3a:4d:c1:78:a3:aa:6d:
                    53:9b:7f:52:35:b9:3d:04:78:0b:09:87:87:07:49:
                    17:c0:46:5f:46:2b:34:bc:cf:38:4c:7d:a1:92:b2:
                    01:e8:b7:58:7c:eb:32:ff:da:9c:eb:87:81:c0:51:
                    c9:3a:8d:84:f0:de:e1:b7:02:32:f0:8a:10:d7:70:
                    36:87:12:23:bc:c8:81:92:50:b0:b8:b9:ba:cd:bc:
                    ef:fe:e5:cb:01:a9:15:d9:f0:75:b3:d7:e2:32:1e:
                    2e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B7:52:0C:D5:0C:8A:65:5C:F2:3E:48:9A:66:CC:C9:55:A5:87:50
            X509v3 Authority Key Identifier:
                keyid:41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32623a3a2f34382d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:2b::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:e1:cd:84:ad:ed:be:9a:04:a8:82:c2:25:f7:78:a6:69:d2:
         2d:cf:cf:14:f4:ab:ec:8b:00:58:7c:68:00:30:2a:c6:fb:ff:
         32:a9:ad:0b:3c:a9:3c:1d:1b:af:23:f4:38:5f:4c:44:b0:51:
         aa:13:d3:eb:91:ae:36:25:4c:ab:f6:5f:58:99:42:37:5e:cc:
         01:4f:4c:d5:62:cb:d6:72:a0:6b:e6:55:dd:05:1b:d1:81:1f:
         ca:ed:1d:f4:2f:04:66:64:7d:6a:4a:8c:90:6d:49:66:a0:db:
         d3:e4:48:83:e4:a7:d2:a2:d3:39:05:cd:98:44:8e:97:7f:78:
         29:88:5e:d7:40:34:c1:29:3a:a9:f1:82:7c:6c:76:55:3b:b9:
         f4:f0:29:e1:dc:81:49:73:f8:d6:5b:01:3b:77:c5:17:65:ef:
         53:9f:21:6c:8d:c5:4c:17:cd:47:58:a0:39:bc:15:0a:fc:9c:
         01:9c:7a:44:16:f6:5a:4c:4f:f7:35:96:e6:86:02:3c:16:73:
         a2:fb:b3:4c:6f:2f:ef:7a:5c:23:ba:33:b9:a9:48:9a:8f:d8:
         7a:03:f7:d9:27:e4:87:eb:b3:23:93:02:a9:75:c3:41:f2:aa:
         ce:f5:81:42:0d:51:0e:01:ec:0c:a1:45:f9:77:e1:6e:eb:dc:
         bd:02:2c:fe
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUV6XrR1iucjZnofBxZW5Q0YYw4qAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzY5ZGJjMmVjMTc1NGRhMWRiYWFiYWIxOGE0YzU1OTBk
OWZiZjk0N2Y1MDNiNWZkNjAwHhcNMjUwNTA4MTM0NzU0WhcNMjYwNTA3MTM1MjU0
WjAzMTEwLwYDVQQDEyhFQkI3NTIwQ0Q1MEM4QTY1NUNGMjNFNDg5QTY2Q0NDOTU1
QTU4NzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sYMM9wqa9ei
oulhwIqauW0QbYcslf9cyzaf4QbBCXDFhtie7JcGCkMQ8z9JIeXCE5AEugCsyGAf
CGqFB0dj64QI76+U4yEvlmvSRZDpnSPnqoEjfcbqhsuTSWFMhs69jSXVfN/OFe2W
6AmEN04xdvOxMRdipQoIPTuUD1ZEDM8s2QONUx5iF7ke5nP9kRga80TNTVzXzVIR
TwhDkzpNwXijqm1Tm39SNbk9BHgLCYeHB0kXwEZfRis0vM84TH2hkrIB6LdYfOsy
/9qc64eBwFHJOo2E8N7htwIy8IoQ13A2hxIjvMiBklCwuLm6zbzv/uXLAakV2fB1
s9fiMh4uywIDAQABo4ICuTCCArUwHQYDVR0OBBYEFOu3UgzVDIplXPI+SJpmzMlV
pYdQMB8GA1UdIwQYMBaAFEEXFvf96y9xcrzj5h2GyDuCQRH8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUzZjgyMGY1LzAv
NDExNzE2RjdGREVCMkY3MTcyQkNFM0U2MUQ4NkM4M0I4MjQxMTFGQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzY2MzNmLTM0M2QtNGFjMy1hOTM2LTk4OTU4ZTU2MzBlNi8zNjlk
YmMyZWMxNzU0ZGExZGJhYWJhYjE4YTRjNTU5MGQ5ZmJmOTQ3ZjUwM2I1ZmQ2MC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVk
MzA1M2Y4MjBmNS8wLzMyMzYzMDMyM2E2NjM3MzI2NTNhMzI2MjNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMxMzEzOTM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvcuACswDQYJKoZI
hvcNAQELBQADggEBAHzhzYSt7b6aBKiCwiX3eKZp0i3PzxT0q+yLAFh8aAAwKsb7
/zKprQs8qTwdG68j9DhfTESwUaoT0+uRrjYlTKv2X1iZQjdezAFPTNViy9ZyoGvm
Vd0FG9GBH8rtHfQvBGZkfWpKjJBtSWag29PkSIPkp9Ki0zkFzZhEjpd/eCmIXtdA
NMEpOqnxgnxsdlU7ufTwKeHcgUlz+NZbATt3xRdl71OfIWyNxUwXzUdYoDm8FQr8
nAGcekQW9lpMT/c1luaGAjwWc6L7s0xvL+96XCO6M7mpSJqP2HoD99kn5IfrsyOT
Aql1w0Hyqs71gUINUQ4B7AyhRfl34W7r3L0CLP4=
-----END CERTIFICATE-----
Generated at Sun May 11 06:19:45 2025 by rpki-client