Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131323a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3131323a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          RU81EByYRc2YjsEcQ43YUFTd+ClqYiauFsjhTt60aT0=
Subject key identifier:   FD:E5:2F:3A:6D:AE:2D:75:FB:37:1A:2B:C6:11:B3:12:3B:E2:2A:00
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       0AD0A9D5E35DC8FA6B9F82D1AB7ED2B437C7E500
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131323a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 01 May 2025 13:28:31 +0000
ROA not before:           Thu 01 May 2025 13:23:31 +0000
ROA not after:            Thu 30 Apr 2026 13:28:31 +0000
asID:                     9009
IP address blocks:        2602:ff62:112::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 08:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d0:a9:d5:e3:5d:c8:fa:6b:9f:82:d1:ab:7e:d2:b4:37:c7:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  1 13:23:31 2025 GMT
            Not After : Apr 30 13:28:31 2026 GMT
        Subject: CN=FDE52F3A6DAE2D75FB371A2BC611B3123BE22A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0e:39:4c:bf:78:ba:ea:7f:ef:19:8a:5d:0b:
                    28:33:2d:6b:8d:26:79:87:b5:cf:58:06:6e:e8:15:
                    3f:0b:72:c4:69:f3:af:b5:03:31:f3:88:5a:b4:f5:
                    10:40:ca:79:d4:13:ef:90:f8:10:4e:34:48:d3:c8:
                    63:85:d1:88:89:08:49:35:52:78:c2:06:dd:07:c3:
                    ad:1b:ab:7d:c2:1a:00:4e:d8:62:22:90:60:1f:3f:
                    cc:90:75:94:71:5a:db:5b:b5:a9:48:21:6c:b3:c9:
                    69:4c:3e:77:46:15:10:65:16:53:fb:cb:6f:0c:de:
                    cb:7b:16:6a:77:3e:17:76:36:94:b0:5e:23:87:95:
                    34:85:41:94:bf:90:cc:1d:b0:1f:b9:9b:39:91:a3:
                    2f:eb:d8:23:e7:30:03:ba:a5:02:29:a6:cf:87:1b:
                    42:60:d1:97:e0:70:0c:16:bb:f5:1a:aa:3c:de:a9:
                    29:ec:6d:1d:de:a8:d3:94:0b:6a:5f:c1:59:5e:e4:
                    ad:49:ad:7f:6c:ff:32:43:ed:6d:3f:f3:74:12:66:
                    62:46:94:59:3f:07:bf:ab:f1:7f:82:9e:9c:d9:53:
                    39:69:9b:6b:22:f3:43:d1:3b:16:11:28:6c:24:f1:
                    a0:71:ec:40:92:3d:e9:07:0a:40:3a:74:04:ad:f5:
                    83:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E5:2F:3A:6D:AE:2D:75:FB:37:1A:2B:C6:11:B3:12:3B:E2:2A:00
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131323a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:112::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:89:41:05:9a:69:cf:5a:10:5b:01:cb:f1:79:65:70:ce:12:
         d2:b4:ac:89:12:3c:d4:83:b4:43:4f:c4:1a:ee:bf:de:d7:c7:
         e3:13:d1:ac:fe:7f:a3:74:19:9e:94:6a:e2:9d:d0:74:37:80:
         62:af:f9:d6:74:79:60:d0:88:9f:92:5c:67:23:67:35:b5:82:
         ad:8e:3c:7c:d9:88:c9:69:53:d3:68:27:93:ef:37:ea:49:33:
         f4:0b:ad:06:90:dd:32:cc:4a:ec:12:28:ad:ae:44:26:2d:c5:
         52:d7:e7:8b:8f:2d:26:e8:3c:1a:99:17:9f:cf:95:d7:72:45:
         c1:f5:8e:99:ac:fa:01:33:df:b0:49:64:01:d7:3f:c1:12:99:
         48:29:21:d8:dd:91:73:06:fd:10:df:d1:0a:3f:08:ea:8e:25:
         d1:66:de:3a:fb:f3:a6:39:48:5e:85:ec:74:b8:9f:b3:2b:35:
         e7:d4:d6:32:e9:9d:06:ed:b1:e0:c3:34:1b:ab:b2:ba:e4:95:
         13:06:c5:6a:2f:f0:03:1b:6f:e2:2e:0d:7f:fc:1f:dc:56:08:
         29:b6:cb:13:fa:51:3b:b3:0a:7a:36:35:31:db:21:aa:ab:d8:
         2f:7a:e8:e3:91:76:88:36:86:d5:ad:66:41:77:d8:d7:ef:6c:
         c7:32:82:46
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUCtCp1eNdyPprn4LRq37StDfH5QAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjUwNTAxMTMyMzMxWhcNMjYwNDMwMTMyODMx
WjAzMTEwLwYDVQQDEyhGREU1MkYzQTZEQUUyRDc1RkIzNzFBMkJDNjExQjMxMjNC
RTIyQTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8w45TL94uup/
7xmKXQsoMy1rjSZ5h7XPWAZu6BU/C3LEafOvtQMx84hatPUQQMp51BPvkPgQTjRI
08hjhdGIiQhJNVJ4wgbdB8OtG6t9whoATthiIpBgHz/MkHWUcVrbW7WpSCFss8lp
TD53RhUQZRZT+8tvDN7LexZqdz4XdjaUsF4jh5U0hUGUv5DMHbAfuZs5kaMv69gj
5zADuqUCKabPhxtCYNGX4HAMFrv1Gqo83qkp7G0d3qjTlAtqX8FZXuStSa1/bP8y
Q+1tP/N0EmZiRpRZPwe/q/F/gp6c2VM5aZtrIvND0TsWEShsJPGgcexAkj3pBwpA
OnQErfWDuQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFP3lLzptri11+zcaK8YRsxI7
4ioAMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzMTMyM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzkzMDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv9iARIwDQYJKoZI
hvcNAQELBQADggEBAB+JQQWaac9aEFsBy/F5ZXDOEtK0rIkSPNSDtENPxBruv97X
x+MT0az+f6N0GZ6UauKd0HQ3gGKv+dZ0eWDQiJ+SXGcjZzW1gq2OPHzZiMlpU9No
J5PvN+pJM/QLrQaQ3TLMSuwSKK2uRCYtxVLX54uPLSboPBqZF5/PlddyRcH1jpms
+gEz37BJZAHXP8ESmUgpIdjdkXMG/RDf0Qo/COqOJdFm3jr786Y5SF6F7HS4n7Mr
NefU1jLpnQbtseDDNBursrrklRMGxWov8AMbb+IuDX/8H9xWCCm2yxP6UTuzCno2
NTHbIaqr2C966OORdog2htWtZkF32NfvbMcygkY=
-----END CERTIFICATE-----
Generated at Sat May 10 21:09:41 2025 by rpki-client