Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a3a2f34352d3438203d3e203131393637.roa
File:                     323630323a663732653a3a2f34352d3438203d3e203131393637.roa (raw, json)
Hash identifier:          QzLG4gY3mptqVNNcLpA1ERYQUWcsPlY2b5iz0KqVbM4=
Subject key identifier:   04:7D:ED:94:13:70:DB:72:AF:C5:F3:5A:CC:08:00:FF:FA:9A:82:AA
Certificate issuer:       /CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
Certificate serial:       3DE2B803D2A21B355C80747F23F5E01E4CC97020
Authority key identifier: 41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a3a2f34352d3438203d3e203131393637.roa
Signing time:             Mon 05 May 2025 09:18:39 +0000
ROA not before:           Mon 05 May 2025 09:13:39 +0000
ROA not after:            Mon 04 May 2026 09:18:39 +0000
asID:                     11967
IP address blocks:        2602:f72e::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e2:b8:03:d2:a2:1b:35:5c:80:74:7f:23:f5:e0:1e:4c:c9:70:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Validity
            Not Before: May  5 09:13:39 2025 GMT
            Not After : May  4 09:18:39 2026 GMT
        Subject: CN=047DED941370DB72AFC5F35ACC0800FFFA9A82AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c8:2f:9d:2b:be:ae:a3:33:eb:8c:96:5e:8f:
                    ee:26:c8:6c:38:08:07:55:bd:1c:b6:61:31:8a:f8:
                    6f:d5:96:ea:a3:28:83:11:8d:f7:70:9f:ba:29:f2:
                    71:06:2a:f1:2c:4a:41:19:aa:98:01:a3:ef:09:4c:
                    8f:66:de:d3:68:24:8e:65:e9:04:30:eb:09:fb:1b:
                    db:4d:64:74:d3:7e:f9:88:52:b4:f4:34:cf:1f:d5:
                    0b:f3:e7:81:69:72:5e:51:00:e5:a9:46:1a:67:47:
                    a3:49:3b:ee:54:4e:fc:2b:e0:5d:a7:87:96:6e:95:
                    fb:42:e3:42:21:15:04:49:06:84:e1:ac:c8:d7:c7:
                    9b:a6:3a:1a:cd:de:1e:ca:14:c8:aa:b1:f3:97:f2:
                    95:09:8c:61:a6:b6:13:f5:0e:69:b5:bd:df:64:56:
                    2f:da:1c:b4:e0:75:4f:75:bf:2a:8c:33:e6:c6:13:
                    91:ba:45:be:97:34:5d:61:6a:70:d1:c0:33:52:0a:
                    5b:15:c1:a2:11:18:3f:25:d8:6f:b0:d7:81:bb:cd:
                    90:38:28:26:10:60:e8:93:8d:8f:f1:6b:f6:fc:3f:
                    09:6b:db:13:ca:61:27:40:2a:a0:40:3a:40:36:78:
                    1c:72:ab:d0:f5:68:ee:32:f0:35:9b:90:c3:58:ca:
                    cd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7D:ED:94:13:70:DB:72:AF:C5:F3:5A:CC:08:00:FF:FA:9A:82:AA
            X509v3 Authority Key Identifier:
                keyid:41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a3a2f34352d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e::/45

    Signature Algorithm: sha256WithRSAEncryption
         ce:76:15:20:bf:8d:7b:1e:89:cd:8c:15:ae:fe:7e:ca:53:93:
         da:71:e5:e6:54:dc:a9:56:c3:9c:ff:52:c3:17:df:97:7e:e1:
         09:7e:ba:f9:00:88:e0:e9:ad:fc:56:5b:99:db:fd:80:1a:ad:
         b3:4a:ce:60:f8:bb:b2:c3:13:0b:ef:9c:95:95:42:79:a7:ce:
         bc:39:81:f8:6e:f0:3a:d3:4b:15:a9:82:01:c8:a3:51:94:bd:
         8a:bc:7d:0c:f4:d5:c2:28:cb:90:87:2e:30:1e:98:3c:de:09:
         19:79:35:5a:89:3b:af:22:0a:42:f5:95:89:c7:b2:b2:94:77:
         a3:62:c8:30:ea:34:01:8d:b3:d8:0a:f7:a7:fa:11:67:c1:5b:
         41:5a:80:f3:1d:d8:a1:4d:b7:2f:ff:7b:c1:e3:78:71:0d:9f:
         58:8b:cb:bf:c1:8f:48:56:de:fa:65:9f:4a:c9:7d:38:88:ee:
         0a:b3:ab:ee:c4:ca:91:ac:e4:89:77:70:74:43:ca:b0:39:1c:
         a1:1d:22:a7:69:03:cd:34:44:c0:9b:5f:7a:3b:1c:22:33:5b:
         46:8b:57:11:e2:70:39:b9:d3:d5:e2:60:fc:39:b4:c5:47:b9:
         49:da:bf:f1:31:2b:7e:1e:4a:1d:6a:88:37:06:3c:18:ee:6d:
         b9:f3:33:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:33:14 2025 by rpki-client