Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a38303a3a2f34312d3431203d3e203131393637.roa
File:                     323630323a663732653a38303a3a2f34312d3431203d3e203131393637.roa (raw, json)
Hash identifier:          ZOsVnxIppOL0mwttWSa0yCnrRhywrMY8/63BYWQ6s7s=
Subject key identifier:   B8:65:26:48:C1:7C:69:E5:8A:5E:40:F1:F1:59:19:97:FB:0B:F5:BF
Certificate issuer:       /CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
Certificate serial:       41F5AC9F1399D968220D846EDCF559BB0BB674CE
Authority key identifier: 41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a38303a3a2f34312d3431203d3e203131393637.roa
Signing time:             Thu 19 Jun 2025 21:51:59 +0000
ROA not before:           Thu 19 Jun 2025 21:46:59 +0000
ROA not after:            Thu 18 Jun 2026 21:51:59 +0000
asID:                     11967
IP address blocks:        2602:f72e:80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:14:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f5:ac:9f:13:99:d9:68:22:0d:84:6e:dc:f5:59:bb:0b:b6:74:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Validity
            Not Before: Jun 19 21:46:59 2025 GMT
            Not After : Jun 18 21:51:59 2026 GMT
        Subject: CN=B8652648C17C69E58A5E40F1F1591997FB0BF5BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:80:5e:8d:bd:89:c6:0e:7e:5a:49:5e:a8:5f:
                    67:c7:36:a0:90:c7:0b:ee:2f:28:f7:b0:ca:6a:ce:
                    0e:71:6c:1a:90:18:54:17:17:01:a2:53:13:d6:4e:
                    45:99:bb:73:da:17:fc:1e:2e:40:70:b4:b3:10:2b:
                    38:ee:eb:e4:f6:05:79:3d:04:b7:e2:4e:94:1d:cc:
                    d6:82:7d:f0:cb:d2:e0:43:bd:fd:73:19:b0:33:89:
                    28:95:aa:8a:6a:16:b4:6b:57:64:b2:4a:bb:87:6e:
                    c4:74:5c:57:20:38:0a:2f:a0:e8:d2:1b:6f:7d:18:
                    56:e2:61:0c:f0:92:de:fb:0e:02:2b:76:40:56:0e:
                    85:a4:dd:d4:27:27:11:fc:8a:30:e8:76:01:ca:0c:
                    fe:a6:9a:60:7b:2e:9d:65:8b:6e:73:c5:1e:c8:e3:
                    f9:49:9e:43:82:81:c5:10:ed:11:36:56:2a:59:35:
                    1c:0d:8f:36:d1:15:e8:0d:02:26:d1:3b:e7:a4:60:
                    ab:68:f9:13:6f:6c:03:2c:fd:da:f2:d5:2a:c3:ac:
                    3d:77:85:37:f7:72:2c:da:9b:fc:d7:45:8b:5d:0f:
                    a8:15:eb:0f:f0:e3:b1:97:ca:6c:9e:76:c1:1c:0c:
                    c9:7a:55:36:09:fe:de:dc:85:63:98:89:77:c8:1b:
                    cd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:65:26:48:C1:7C:69:E5:8A:5E:40:F1:F1:59:19:97:FB:0B:F5:BF
            X509v3 Authority Key Identifier:
                keyid:41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a38303a3a2f34312d3431203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:80::/41

    Signature Algorithm: sha256WithRSAEncryption
         a4:10:f5:10:9c:83:f1:03:61:5a:0b:95:6c:4c:04:6e:aa:b1:
         1f:22:3d:6e:5c:ed:e1:e7:a4:23:b1:b7:ea:1f:94:2d:1a:f7:
         8a:cf:f4:93:42:f5:b1:20:fd:7b:6f:a1:1a:4c:fb:11:89:f7:
         52:7c:a9:68:80:b6:a9:97:bc:b9:fb:a9:09:d7:52:58:3d:39:
         c2:c3:61:68:6a:16:e0:11:e9:fd:ad:c3:41:7a:66:5a:bc:bf:
         21:86:9b:eb:76:13:51:e5:1a:33:49:70:96:79:db:bd:fc:6d:
         79:e9:1a:f1:cb:eb:69:de:3c:c0:7a:b5:34:15:33:c3:20:ff:
         87:2a:b5:7f:06:12:77:1f:99:15:dd:9d:1a:9c:75:91:70:e7:
         59:2c:51:33:ce:72:3d:9f:67:1a:30:eb:2c:f8:bd:5d:56:97:
         0f:3a:fd:88:ec:90:f1:0f:77:d3:41:69:26:dc:08:9b:69:55:
         ff:e4:38:09:12:6d:86:99:cc:07:7c:98:bb:98:c0:fc:43:84:
         e3:5c:a9:95:a8:3f:1b:b4:cd:d4:be:5b:3a:33:d9:88:f2:d7:
         37:af:1b:ec:1f:d5:8b:3e:de:57:9b:3b:d5:8f:07:a5:7e:29:
         a7:59:98:3a:69:43:f0:d9:e8:0d:8c:dd:8c:f3:e5:ed:63:4d:
         37:85:9c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:29:45 2025 by rpki-client