Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a633a3a2f34382d3438203d3e203131393637.roa
File:                     323630323a663732653a633a3a2f34382d3438203d3e203131393637.roa (raw, json)
Hash identifier:          BztBc/ntne0lpSq/H3u31fGwPAYh/bnrEjOe8WWVhX0=
Subject key identifier:   3E:FD:27:08:8C:4B:C3:37:7C:43:63:8B:B5:73:7F:B4:7D:7C:4E:0B
Certificate issuer:       /CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
Certificate serial:       1B21AF041C937036D8B118D8A192A9A900FAAE17
Authority key identifier: 41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a633a3a2f34382d3438203d3e203131393637.roa
Signing time:             Mon 05 May 2025 09:17:12 +0000
ROA not before:           Mon 05 May 2025 09:12:12 +0000
ROA not after:            Mon 04 May 2026 09:17:12 +0000
asID:                     11967
IP address blocks:        2602:f72e:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:21:af:04:1c:93:70:36:d8:b1:18:d8:a1:92:a9:a9:00:fa:ae:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Validity
            Not Before: May  5 09:12:12 2025 GMT
            Not After : May  4 09:17:12 2026 GMT
        Subject: CN=3EFD27088C4BC3377C43638BB5737FB47D7C4E0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e4:45:3f:06:ee:ff:79:48:ef:84:55:df:13:
                    71:5a:d9:29:3e:f5:e7:0b:fc:99:3e:a7:c8:67:88:
                    e3:5f:1b:4e:bf:d2:3f:4d:af:c6:ef:d3:20:0c:5a:
                    28:f4:8d:1a:50:aa:83:27:08:29:e4:fb:59:35:fd:
                    28:da:47:20:a0:fa:b5:4a:57:26:6e:a4:f1:08:4c:
                    9e:2d:e2:9e:97:9b:90:b6:f1:c0:8a:1f:b9:fb:59:
                    3e:e5:3c:44:e4:b0:e2:ab:b8:93:68:02:18:c8:84:
                    df:7f:fd:9a:78:4a:b9:da:58:9f:10:ee:24:c1:70:
                    0b:ea:3a:bb:f7:30:e3:ca:ca:d1:43:f1:dd:c9:8f:
                    1f:bc:0a:80:88:20:da:d8:4b:0e:97:1b:bb:15:a4:
                    b4:78:34:34:bf:40:f0:ab:10:2d:23:fc:10:b5:2d:
                    47:34:69:1c:a1:b9:cf:18:e3:db:c6:e4:55:62:87:
                    d0:38:22:92:c0:11:68:35:eb:00:ef:4d:c5:81:61:
                    33:b4:f8:2f:6f:94:50:3e:ff:33:80:be:4d:d0:40:
                    71:0a:25:57:84:68:35:7f:c9:7e:5c:b2:3d:0e:ab:
                    a2:8b:8c:60:fd:35:ea:ba:4d:9d:cc:2d:e5:ce:4a:
                    14:01:df:66:fe:a7:62:27:85:10:76:a6:30:46:e0:
                    db:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FD:27:08:8C:4B:C3:37:7C:43:63:8B:B5:73:7F:B4:7D:7C:4E:0B
            X509v3 Authority Key Identifier:
                keyid:41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a633a3a2f34382d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:83:2c:30:90:71:4a:6c:60:47:10:45:7a:c9:c1:60:92:41:
         fc:3d:9f:cb:e5:a9:26:e4:30:65:00:27:d2:fe:76:d6:aa:d8:
         c8:24:90:09:dd:1c:29:2b:1e:d4:a4:c6:32:c7:b4:69:f8:ee:
         7f:77:3d:ae:18:4f:25:3d:3d:0b:f7:86:cd:99:ed:0d:8c:da:
         53:4e:9b:f8:b6:c4:61:3a:e7:29:ec:41:b5:d5:db:e5:90:26:
         32:3d:77:f1:3f:5a:fb:d8:d6:44:18:d7:af:e2:5e:b9:91:4c:
         8c:59:b5:bc:3f:0a:e3:ed:51:71:86:64:f6:16:53:41:d2:4a:
         09:29:2c:80:57:6e:b2:f3:40:e8:55:41:a2:a5:c9:00:41:c4:
         6f:ea:bd:c8:be:ba:17:3e:d4:67:fe:95:c5:b4:dd:ad:a2:4a:
         b3:c1:fb:27:8b:73:42:c5:e5:01:d1:0b:40:08:4b:11:3d:d6:
         2c:21:63:be:08:4c:07:19:dc:3e:09:32:5d:11:c7:22:6c:e7:
         70:ad:6d:a6:fe:01:68:fa:85:0b:35:08:be:a3:e4:29:75:9e:
         01:1c:0b:31:11:e5:1f:93:f0:fe:32:7a:60:68:ca:59:4f:2b:
         eb:9b:6b:99:bc:65:5f:d6:2d:39:cb:32:c9:50:8c:2b:29:5e:
         5b:bc:f3:7d
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUGyGvBByTcDbYsRjYoZKpqQD6rhcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzY5ZGJjMmVjMTc1NGRhMWRiYWFiYWIxOGE0YzU1OTBk
OWZiZjk0N2Y1MDNiNWZkNjAwHhcNMjUwNTA1MDkxMjEyWhcNMjYwNTA0MDkxNzEy
WjAzMTEwLwYDVQQDEygzRUZEMjcwODhDNEJDMzM3N0M0MzYzOEJCNTczN0ZCNDdE
N0M0RTBCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+RFPwbu/3lI
74RV3xNxWtkpPvXnC/yZPqfIZ4jjXxtOv9I/Ta/G79MgDFoo9I0aUKqDJwgp5PtZ
Nf0o2kcgoPq1SlcmbqTxCEyeLeKel5uQtvHAih+5+1k+5TxE5LDiq7iTaAIYyITf
f/2aeEq52lifEO4kwXAL6jq79zDjysrRQ/HdyY8fvAqAiCDa2EsOlxu7FaS0eDQ0
v0DwqxAtI/wQtS1HNGkcobnPGOPbxuRVYofQOCKSwBFoNesA703FgWEztPgvb5RQ
Pv8zgL5N0EBxCiVXhGg1f8l+XLI9Dquii4xg/TXquk2dzC3lzkoUAd9m/qdiJ4UQ
dqYwRuDbUQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFD79JwiMS8M3fENji7Vzf7R9
fE4LMB8GA1UdIwQYMBaAFEEXFvf96y9xcrzj5h2GyDuCQRH8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUzZjgyMGY1LzAv
NDExNzE2RjdGREVCMkY3MTcyQkNFM0U2MUQ4NkM4M0I4MjQxMTFGQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzY2MzNmLTM0M2QtNGFjMy1hOTM2LTk4OTU4ZTU2MzBlNi8zNjlk
YmMyZWMxNzU0ZGExZGJhYWJhYjE4YTRjNTU5MGQ5ZmJmOTQ3ZjUwM2I1ZmQ2MC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVk
MzA1M2Y4MjBmNS8wLzMyMzYzMDMyM2E2NjM3MzI2NTNhNjMzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMTMxMzkzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3LgAMMA0GCSqGSIb3
DQEBCwUAA4IBAQClgywwkHFKbGBHEEV6ycFgkkH8PZ/L5akm5DBlACfS/nbWqtjI
JJAJ3RwpKx7UpMYyx7Rp+O5/dz2uGE8lPT0L94bNme0NjNpTTpv4tsRhOucp7EG1
1dvlkCYyPXfxP1r72NZEGNev4l65kUyMWbW8Pwrj7VFxhmT2FlNB0koJKSyAV26y
80DoVUGipckAQcRv6r3IvroXPtRn/pXFtN2tokqzwfsni3NCxeUB0QtACEsRPdYs
IWO+CEwHGdw+CTJdEccibOdwrW2m/gFo+oULNQi+o+QpdZ4BHAsxEeUfk/D+Mnpg
aMpZTyvrm2uZvGVf1i05yzLJUIwrKV5bvPN9
-----END CERTIFICATE-----
Generated at Sun May 11 06:11:53 2025 by rpki-client