Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a653a3a2f34382d3438203d3e203131393637.roa
File:                     323630323a663732653a653a3a2f34382d3438203d3e203131393637.roa (raw, json)
Hash identifier:          1U0AIH0Q6gMgyDU2HUSJeabGGSUnNxJMC6W6yxOv3XQ=
Subject key identifier:   5D:AD:61:54:09:09:AF:84:B8:0D:DD:8D:A7:7F:68:0D:C2:26:CA:44
Certificate issuer:       /CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
Certificate serial:       03E7DF6D998E0D0F493D3593F083B3071285D075
Authority key identifier: 41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a653a3a2f34382d3438203d3e203131393637.roa
Signing time:             Mon 05 May 2025 09:18:24 +0000
ROA not before:           Mon 05 May 2025 09:13:24 +0000
ROA not after:            Mon 04 May 2026 09:18:24 +0000
asID:                     11967
IP address blocks:        2602:f72e:e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e7:df:6d:99:8e:0d:0f:49:3d:35:93:f0:83:b3:07:12:85:d0:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Validity
            Not Before: May  5 09:13:24 2025 GMT
            Not After : May  4 09:18:24 2026 GMT
        Subject: CN=5DAD61540909AF84B80DDD8DA77F680DC226CA44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b8:2b:83:be:0f:ae:98:99:c7:c6:25:18:0e:
                    b1:ff:c8:4d:65:f7:a4:8f:4b:6c:da:3f:28:d1:15:
                    b2:15:52:fd:a0:b2:10:0c:43:93:4b:98:56:17:73:
                    35:55:8c:e8:9a:71:18:0d:32:d0:ac:49:aa:88:a4:
                    85:ae:77:6a:05:55:d6:89:17:00:0e:b3:81:b3:40:
                    7f:e0:a8:7b:6f:4a:03:27:26:91:b8:f5:14:53:5e:
                    d7:92:8d:b5:b8:69:dd:59:5c:d5:9e:13:c7:56:07:
                    16:89:9c:d4:07:5e:bc:68:1d:9b:02:b6:e0:74:57:
                    5b:ed:8a:f0:24:6e:f6:30:7c:2d:b1:e2:db:d1:10:
                    13:b5:06:96:f1:73:c2:aa:b3:aa:db:48:07:48:2e:
                    87:23:0a:a3:49:52:32:08:83:3f:76:68:e3:c3:9c:
                    41:47:f0:6d:54:c1:4c:e5:45:24:f3:1a:3d:02:1d:
                    1a:d9:ec:16:0b:70:2d:2c:8e:b7:12:11:01:f3:3f:
                    c3:fd:99:36:39:5d:52:f4:3b:c5:5a:4f:51:b6:0e:
                    e9:08:ea:c5:b9:2c:8d:cb:16:4e:1f:39:93:4e:b1:
                    b7:73:c7:b8:84:83:24:d1:2a:30:cf:6c:45:8a:10:
                    77:b9:67:bd:ac:9d:ec:83:2e:e2:9c:7f:e6:ae:a4:
                    f2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AD:61:54:09:09:AF:84:B8:0D:DD:8D:A7:7F:68:0D:C2:26:CA:44
            X509v3 Authority Key Identifier:
                keyid:41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a653a3a2f34382d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:e::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:8b:87:1d:27:15:96:83:5b:a1:38:4f:87:22:3a:ee:46:13:
         a4:1c:cb:9e:85:c5:43:6e:63:bd:4f:08:ea:b1:d9:01:a8:72:
         03:ff:04:c1:2e:da:47:5f:66:c8:1e:bc:bf:bc:10:93:6a:b8:
         ea:3c:20:4d:56:e4:5f:85:d5:92:a2:ab:a9:a4:3f:49:24:53:
         3b:b4:1b:24:bf:d4:0f:6d:17:f9:6a:34:fa:89:fe:10:ec:8c:
         31:ff:42:0e:5a:47:58:6f:64:dd:9b:8a:72:bb:e7:de:7b:1d:
         c7:c1:d6:33:ee:2e:fc:58:dd:62:a1:22:81:82:fe:af:f9:25:
         58:9e:5a:46:d6:7a:6e:06:0b:d9:7f:b1:73:b1:85:a7:b4:25:
         2e:26:67:5d:1e:21:f5:b1:62:dd:22:c3:6e:5a:79:68:ab:fb:
         c7:3f:23:2a:48:48:ab:7a:d3:dc:ec:d3:7f:d6:80:f7:f5:9d:
         7b:59:d3:95:e3:28:67:24:cd:9a:49:b3:d5:21:13:d2:bf:4a:
         aa:83:2f:b7:24:f1:9c:10:a1:14:5f:4a:d7:cd:e0:e5:83:95:
         fd:91:4a:86:e5:f8:0f:bd:a0:97:bb:4f:85:3f:30:df:a0:2e:
         73:26:ed:f8:b0:b4:98:d9:5e:cc:23:b5:7b:d6:5a:35:11:a8:
         c4:99:61:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:33:16 2025 by rpki-client