Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a38303a3a2f34312d3431203d3e20343031363236.roa
File:                     323630323a663732653a38303a3a2f34312d3431203d3e20343031363236.roa (raw, json)
Hash identifier:          lzBVQruY/ImCOXA8PvMis8/Ck4Z3hepvXalYCYjE77I=
Subject key identifier:   71:C0:A8:86:00:BB:A6:6B:F4:BA:31:A0:10:58:95:FB:8E:47:EA:23
Certificate issuer:       /CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
Certificate serial:       673660771B44D5B0AE9D28D20D43221FC19E614E
Authority key identifier: 41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a38303a3a2f34312d3431203d3e20343031363236.roa
Signing time:             Tue 29 Apr 2025 08:03:05 +0000
ROA not before:           Tue 29 Apr 2025 07:58:05 +0000
ROA not after:            Tue 28 Apr 2026 08:03:05 +0000
asID:                     401626
IP address blocks:        2602:f72e:80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:36:60:77:1b:44:d5:b0:ae:9d:28:d2:0d:43:22:1f:c1:9e:61:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Validity
            Not Before: Apr 29 07:58:05 2025 GMT
            Not After : Apr 28 08:03:05 2026 GMT
        Subject: CN=71C0A88600BBA66BF4BA31A0105895FB8E47EA23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:75:11:05:33:eb:90:8a:78:97:3f:bb:c6:
                    69:e4:eb:0a:8a:de:bd:e7:67:4e:d0:97:13:31:3c:
                    03:1e:4c:ae:3b:1b:9d:90:d6:a1:96:23:83:d9:09:
                    aa:16:0b:8f:30:2f:7a:8b:a2:96:b8:57:af:15:bc:
                    e2:ae:06:63:00:60:b2:4d:73:43:0c:ff:13:4e:5c:
                    29:34:19:29:db:79:1e:36:61:e2:7d:8f:65:df:b1:
                    19:f2:af:63:c2:c2:36:3c:68:3b:db:25:f3:af:af:
                    1a:5c:a0:59:02:52:e9:66:09:7d:32:04:08:57:47:
                    42:b7:40:6f:c6:1d:a6:fd:62:5c:2a:ce:91:92:d0:
                    dc:ec:b0:cf:fe:9f:eb:9c:6e:c7:85:81:79:53:d7:
                    ab:29:7f:92:34:3f:4c:8a:e4:0c:c3:d8:0a:83:49:
                    6f:8d:d5:a9:e0:9d:2e:fb:17:52:c3:80:06:8a:58:
                    e4:94:05:2f:c8:5a:65:71:de:d8:38:47:27:46:d3:
                    9c:8c:7b:41:5f:9e:6c:78:71:36:41:fd:21:7c:50:
                    86:d3:c4:5d:d6:e9:24:ab:70:dd:3e:87:19:00:e7:
                    32:f4:1d:f1:c6:16:71:eb:c3:e7:9c:d0:5b:48:e9:
                    f9:fb:31:15:d2:15:62:fe:0d:fc:31:7c:5f:f2:59:
                    27:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C0:A8:86:00:BB:A6:6B:F4:BA:31:A0:10:58:95:FB:8E:47:EA:23
            X509v3 Authority Key Identifier:
                keyid:41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a38303a3a2f34312d3431203d3e20343031363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:80::/41

    Signature Algorithm: sha256WithRSAEncryption
         b8:b6:b7:80:48:01:6e:dc:6d:7d:f0:e4:8a:ab:55:83:e9:b2:
         11:69:f4:73:c4:17:2c:18:59:eb:41:a9:37:50:7a:4a:3c:e2:
         c9:f5:ac:c3:7c:2c:89:0e:16:fb:78:53:d1:b6:fa:ce:2a:15:
         22:6f:2a:2d:4f:8b:dc:d6:05:29:eb:61:72:f2:f6:27:d6:fa:
         a8:ae:04:ae:4f:3c:b7:4c:55:55:66:41:a1:1e:bd:b5:e0:b1:
         55:9a:6d:69:14:26:e1:21:aa:58:fb:77:3d:c8:cc:fc:46:b3:
         e6:bd:d0:54:16:d4:c6:d2:ae:ab:2d:06:bc:a7:20:b2:bf:9b:
         8f:b5:e5:da:3d:22:46:ed:3f:66:e3:cb:4c:1c:4d:08:1a:b6:
         3d:58:06:b2:0e:50:6b:27:0a:ba:1f:e5:86:4e:fc:5e:1d:b7:
         8e:12:d7:16:ad:a4:dc:d7:5d:2a:fa:f8:82:0f:45:ed:76:41:
         e2:eb:24:a6:94:85:de:ce:f1:c4:78:b7:77:95:dc:80:bd:a0:
         61:2f:f1:d0:d6:1d:c7:69:51:d0:a2:2e:93:62:90:97:c8:0b:
         8b:9c:c5:df:9a:2b:b5:4a:82:dd:c5:7b:c8:91:64:22:23:e6:
         d0:a7:ce:5f:f1:07:18:b2:84:e8:93:1f:21:10:a8:3b:0b:98:
         e8:4b:3e:fa
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUZzZgdxtE1bCunSjSDUMiH8GeYU4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzY5ZGJjMmVjMTc1NGRhMWRiYWFiYWIxOGE0YzU1OTBk
OWZiZjk0N2Y1MDNiNWZkNjAwHhcNMjUwNDI5MDc1ODA1WhcNMjYwNDI4MDgwMzA1
WjAzMTEwLwYDVQQDEyg3MUMwQTg4NjAwQkJBNjZCRjRCQTMxQTAxMDU4OTVGQjhF
NDdFQTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFh1EQUz65CK
eJc/u8Zp5OsKit6952dO0JcTMTwDHkyuOxudkNahliOD2QmqFguPMC96i6KWuFev
FbzirgZjAGCyTXNDDP8TTlwpNBkp23keNmHifY9l37EZ8q9jwsI2PGg72yXzr68a
XKBZAlLpZgl9MgQIV0dCt0Bvxh2m/WJcKs6RktDc7LDP/p/rnG7HhYF5U9erKX+S
ND9MiuQMw9gKg0lvjdWp4J0u+xdSw4AGiljklAUvyFplcd7YOEcnRtOcjHtBX55s
eHE2Qf0hfFCG08Rd1ukkq3DdPocZAOcy9B3xxhZx68PnnNBbSOn5+zEV0hVi/g38
MXxf8lknkwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFHHAqIYAu6Zr9LoxoBBYlfuO
R+ojMB8GA1UdIwQYMBaAFEEXFvf96y9xcrzj5h2GyDuCQRH8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUzZjgyMGY1LzAv
NDExNzE2RjdGREVCMkY3MTcyQkNFM0U2MUQ4NkM4M0I4MjQxMTFGQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzY2MzNmLTM0M2QtNGFjMy1hOTM2LTk4OTU4ZTU2MzBlNi8zNjlk
YmMyZWMxNzU0ZGExZGJhYWJhYjE4YTRjNTU5MGQ5ZmJmOTQ3ZjUwM2I1ZmQ2MC5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVk
MzA1M2Y4MjBmNS8wLzMyMzYzMDMyM2E2NjM3MzI2NTNhMzgzMDNhM2EyZjM0MzEy
ZDM0MzEyMDNkM2UyMDM0MzAzMTM2MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHByYC9y4AgDANBgkq
hkiG9w0BAQsFAAOCAQEAuLa3gEgBbtxtffDkiqtVg+myEWn0c8QXLBhZ60GpN1B6
SjziyfWsw3wsiQ4W+3hT0bb6zioVIm8qLU+L3NYFKethcvL2J9b6qK4Erk88t0xV
VWZBoR69teCxVZptaRQm4SGqWPt3PcjM/Eaz5r3QVBbUxtKuqy0GvKcgsr+bj7Xl
2j0iRu0/ZuPLTBxNCBq2PVgGsg5QaycKuh/lhk78Xh23jhLXFq2k3NddKvr4gg9F
7XZB4uskppSF3s7xxHi3d5XcgL2gYS/x0NYdx2lR0KIuk2KQl8gLi5zF35ortUqC
3cV7yJFkIiPm0KfOX/EHGLKE6JMfIRCoOwuY6Es++g==
-----END CERTIFICATE-----
Generated at Sun May 11 08:33:25 2025 by rpki-client