Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32633a3a2f34382d3438203d3e203131393637.roa
File:                     323630323a663732653a32633a3a2f34382d3438203d3e203131393637.roa (raw, json)
Hash identifier:          5oyeDKGbc6kRuZ4CVk0DkTbmGayOwmsMOs5sMZ38900=
Subject key identifier:   E4:B7:BE:06:22:CF:AB:CA:D0:EE:92:D8:3E:2A:7E:FC:3C:6E:0B:7F
Certificate issuer:       /CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
Certificate serial:       42B1668F7F3FD7BCC2ECADAFE233AE72D30420B7
Authority key identifier: 41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32633a3a2f34382d3438203d3e203131393637.roa
Signing time:             Thu 08 May 2025 13:53:18 +0000
ROA not before:           Thu 08 May 2025 13:48:18 +0000
ROA not after:            Thu 07 May 2026 13:53:18 +0000
asID:                     11967
IP address blocks:        2602:f72e:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b1:66:8f:7f:3f:d7:bc:c2:ec:ad:af:e2:33:ae:72:d3:04:20:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Validity
            Not Before: May  8 13:48:18 2025 GMT
            Not After : May  7 13:53:18 2026 GMT
        Subject: CN=E4B7BE0622CFABCAD0EE92D83E2A7EFC3C6E0B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:60:96:14:ad:ce:cd:a2:b8:05:49:fd:48:
                    60:8b:b6:ef:40:e0:8f:38:ec:af:d1:4c:bb:58:76:
                    7b:f5:ec:f7:d0:90:af:e0:6b:3d:d2:a8:1a:54:a1:
                    46:f7:30:3e:96:6f:03:0b:77:81:b1:20:80:6b:61:
                    12:95:3d:28:19:6a:5f:1c:6b:af:87:b3:e3:86:3a:
                    51:f0:03:61:d3:ba:c3:87:f2:5c:13:3d:5c:4b:fd:
                    e6:d0:b3:d5:6f:84:49:0a:fa:7e:f8:c3:32:86:e6:
                    ab:8e:17:e6:bc:0a:25:c1:ea:9c:40:20:46:94:6c:
                    fc:9b:3c:1b:b7:9c:86:ef:2d:b5:e9:07:5d:d2:be:
                    37:cb:19:ef:90:ca:05:eb:3b:4f:c7:f2:a2:d5:ca:
                    8e:18:2b:a1:91:9a:47:95:bc:23:10:9c:09:c3:16:
                    f4:91:8c:8e:c0:6c:3e:b9:2a:98:a9:f8:ab:5c:ae:
                    4a:d6:16:f0:9b:99:fc:95:a4:fc:db:3b:ce:de:b1:
                    bd:c8:8c:83:16:27:0a:34:5b:f4:42:8b:f4:75:85:
                    92:38:78:38:9f:d3:ec:3a:1a:61:38:e5:f6:6a:e0:
                    42:3e:3d:fc:a1:fa:db:d8:de:70:c7:da:33:01:c3:
                    b2:2f:cb:0d:7f:d2:40:09:50:9b:7f:e0:18:7f:cb:
                    87:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B7:BE:06:22:CF:AB:CA:D0:EE:92:D8:3E:2A:7E:FC:3C:6E:0B:7F
            X509v3 Authority Key Identifier:
                keyid:41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32633a3a2f34382d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:2c::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:87:3b:6f:61:e6:66:ff:90:22:e1:22:c8:ac:fc:f2:e9:fa:
         ec:90:54:98:f9:f4:95:12:93:90:32:26:98:c8:3e:72:99:b4:
         3a:52:57:3a:41:54:3a:9f:3d:6e:2b:4b:a3:69:4b:9d:ba:6d:
         23:69:6a:85:4d:5a:b0:34:a9:aa:0e:96:f8:01:d1:29:d5:bb:
         2e:9a:8c:71:59:36:b9:2c:a3:18:a5:b3:bf:0a:bd:a1:af:78:
         8c:7a:c6:cf:f4:a5:a2:dc:f4:53:80:15:14:bf:58:ed:13:5e:
         e3:d1:bb:68:8e:32:ed:ab:ab:c1:1a:1a:6a:78:c6:17:4e:6d:
         55:c8:e5:45:c7:91:d5:1b:61:e6:54:7c:bf:40:99:bc:01:67:
         1d:23:f1:7c:26:67:cd:6d:f4:68:62:c4:f2:bc:3c:11:ee:59:
         09:96:b7:53:61:b0:13:b8:61:b7:28:87:0c:7b:17:c9:69:47:
         87:2e:a6:08:64:70:8b:5b:47:78:18:fc:f4:5c:5d:de:62:63:
         a5:ba:82:e7:8b:da:9c:19:cd:ec:4c:02:8e:d9:ba:27:29:9d:
         03:61:8a:d9:10:a6:17:a3:6e:74:b3:15:f7:aa:07:53:78:63:
         42:fa:0d:4f:d6:36:80:ed:05:9c:62:7b:3b:14:6a:c1:7a:c5:
         07:2c:ad:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:17:28 2025 by rpki-client