Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131313a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3131313a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          qzgWOdGBYiDFHkBdKm/deFASmtrcMvh2/Z0SY1Mo7bU=
Subject key identifier:   05:23:6C:59:7C:8D:B1:D9:18:77:3D:0F:51:05:0A:52:83:79:1F:1B
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       48A1D69C6110E0CB3D889BEFA3F51E65F50AB87A
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131313a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 01 May 2025 13:28:31 +0000
ROA not before:           Thu 01 May 2025 13:23:31 +0000
ROA not after:            Thu 30 Apr 2026 13:28:31 +0000
asID:                     9009
IP address blocks:        2602:ff62:111::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a1:d6:9c:61:10:e0:cb:3d:88:9b:ef:a3:f5:1e:65:f5:0a:b8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  1 13:23:31 2025 GMT
            Not After : Apr 30 13:28:31 2026 GMT
        Subject: CN=05236C597C8DB1D918773D0F51050A5283791F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:46:1c:10:d7:00:66:5e:c0:eb:aa:aa:70:
                    2d:74:4c:04:16:f3:12:55:34:64:6f:6f:83:f4:25:
                    8c:1c:db:42:c6:16:d4:fb:9d:e7:09:56:4a:56:bd:
                    2b:48:93:ca:11:2b:f1:4a:75:6f:91:e4:5d:c7:1f:
                    16:35:ef:3c:54:6c:7e:5c:97:36:42:22:82:44:b2:
                    e5:ba:77:1a:d3:c7:52:0d:ee:9f:ea:7b:01:8b:ad:
                    8e:7c:e6:37:f7:c7:07:01:e8:fc:f6:20:dd:cb:b3:
                    86:f7:1f:40:e7:a8:9a:4a:43:e9:4f:17:a3:dd:ca:
                    5d:9d:2e:9b:5e:c0:63:89:e4:16:e6:ee:1d:2a:18:
                    19:1d:4c:d2:63:f3:36:9b:e6:c7:2c:62:65:34:b0:
                    3a:51:e1:84:e9:53:22:a2:a1:e1:41:b2:51:79:97:
                    d2:a5:3e:ac:27:2f:02:e5:f4:c6:7f:c6:33:f0:fb:
                    e5:bd:d6:75:49:7a:dd:2a:da:e0:0f:81:cf:83:73:
                    d9:61:52:a0:c1:ce:8c:27:19:e3:cb:92:ab:84:a2:
                    19:f0:fc:ea:78:4e:ff:1c:83:9a:97:ab:35:b2:78:
                    93:7e:9f:1f:bd:c7:49:e0:02:f7:84:75:65:9d:f4:
                    e6:d8:c5:49:03:86:cb:3b:df:fd:b6:e2:76:34:ef:
                    6b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:23:6C:59:7C:8D:B1:D9:18:77:3D:0F:51:05:0A:52:83:79:1F:1B
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131313a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:111::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:30:34:8e:e4:e2:75:6b:de:16:b8:0f:be:41:b0:44:a4:01:
         84:51:52:f9:60:65:6b:d5:0f:00:cc:48:c2:01:a8:a9:d4:f0:
         b9:c1:c1:43:f2:15:0e:6d:4a:c8:d3:b0:33:54:8a:7c:16:fc:
         4f:88:92:19:84:33:93:b1:67:4c:2f:cb:1f:f5:11:7d:16:53:
         e8:cd:58:70:0e:35:0b:a5:99:a1:92:5c:1e:87:49:67:6a:f4:
         bc:f3:6d:30:fc:cd:35:75:e4:8c:18:de:12:28:df:44:5d:bd:
         11:f0:b7:24:e5:c9:06:1c:33:82:cc:f2:e2:f2:4d:ec:b2:c0:
         a7:3f:c7:64:8b:c2:79:69:1e:ce:5e:1c:8e:7b:9a:1c:cc:95:
         b1:e2:5a:08:cb:e4:38:f9:35:91:d4:98:e5:07:84:e3:1a:10:
         0e:54:ef:cf:f6:ed:c3:4e:d1:6f:08:a9:6a:52:6f:81:be:92:
         32:c3:a8:0f:ff:df:67:f9:bf:4b:41:40:27:d5:bc:7e:89:aa:
         07:3f:11:e1:f2:b8:53:f6:4f:ab:15:df:89:0d:6a:aa:e3:cb:
         19:a7:2d:ff:17:67:11:84:18:24:e7:a5:92:e0:e1:c4:16:bd:
         e1:23:29:69:31:ee:12:c4:41:a8:22:32:bb:e6:f2:5e:f0:7b:
         6e:54:d3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:47:17 2025 by rpki-client