Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131343a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3131343a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          4faXP5vLB6fEdToAOVnQMlXvcYRgWlBmIKby5enXYLQ=
Subject key identifier:   58:14:2C:57:36:7A:1D:E0:4D:DD:F8:3D:2D:9C:AC:99:D8:67:8D:40
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       6EB625B3791643F16DA3CE51B37F63A9EDC731DF
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131343a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 01 May 2025 13:28:31 +0000
ROA not before:           Thu 01 May 2025 13:23:31 +0000
ROA not after:            Thu 30 Apr 2026 13:28:31 +0000
asID:                     9009
IP address blocks:        2602:ff62:114::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 08:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b6:25:b3:79:16:43:f1:6d:a3:ce:51:b3:7f:63:a9:ed:c7:31:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  1 13:23:31 2025 GMT
            Not After : Apr 30 13:28:31 2026 GMT
        Subject: CN=58142C57367A1DE04DDDF83D2D9CAC99D8678D40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1a:91:6e:6f:ed:a4:91:68:af:04:ac:cd:ab:
                    cd:12:4e:db:d4:4d:2d:ac:2a:64:1a:00:21:05:65:
                    1b:79:41:7b:9f:63:87:65:9b:ec:4c:ea:c9:e3:b4:
                    01:ce:a2:02:81:49:88:6f:fa:4d:8e:6b:26:7b:80:
                    3c:0a:04:62:dc:58:7f:95:6b:d3:cc:c0:05:49:24:
                    9c:41:c0:13:f6:35:1e:8c:90:24:61:d7:9a:d1:6a:
                    83:ec:65:0a:9c:ca:ec:1f:84:04:89:59:5d:b7:f0:
                    bf:1c:97:76:b4:69:32:a4:8a:2c:70:6b:e9:bf:96:
                    68:dd:c4:0f:81:ec:64:95:03:53:7c:50:51:28:b0:
                    fe:f7:80:30:23:1d:cb:72:0a:45:a3:2d:ab:d8:73:
                    79:09:a8:5d:f5:9c:b0:5f:46:fd:dc:c4:6d:5c:5f:
                    87:8a:36:3e:ba:13:0e:5b:f3:a0:cc:78:87:72:18:
                    33:2b:1a:fc:09:95:1c:01:d6:30:37:34:91:d7:36:
                    89:ba:a7:72:c0:26:cc:a5:6a:d6:da:9c:42:65:a5:
                    05:a2:7c:fa:e9:0e:32:76:40:ca:ef:39:02:84:5c:
                    c3:e1:0d:78:54:d5:a1:b2:0c:af:db:d2:bb:db:f7:
                    ae:12:69:48:33:e2:d4:76:35:b2:6c:42:bd:fa:4f:
                    94:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:14:2C:57:36:7A:1D:E0:4D:DD:F8:3D:2D:9C:AC:99:D8:67:8D:40
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131343a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:114::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:e1:33:a1:85:11:73:e6:21:27:79:83:08:c3:b4:51:e7:78:
         41:76:04:14:b6:52:ea:33:66:06:79:3e:b2:b4:6a:17:7e:56:
         1f:2e:0b:d0:83:5c:61:d9:41:da:55:21:6c:19:47:7e:15:10:
         89:26:3f:eb:de:0a:db:03:d1:90:d0:5e:55:04:37:a1:89:9b:
         af:80:9f:e5:16:f4:71:9b:d6:bc:5a:f4:14:15:87:71:99:00:
         3d:16:d1:cc:7a:63:95:88:85:6e:4e:3c:53:45:f8:0a:00:86:
         3a:0b:f5:8e:13:d1:74:ac:8d:b2:2f:ad:ae:94:74:f1:ea:45:
         47:2d:23:11:e5:fd:9a:48:cc:58:d0:94:91:e5:e7:b3:85:d1:
         87:b2:52:cd:4e:b3:8a:ad:b6:26:ed:2c:12:7a:8d:c8:60:c0:
         01:85:df:be:61:6c:dc:67:0f:30:4a:96:d6:33:0e:f5:5e:c7:
         af:36:b0:18:79:b4:77:f0:2c:85:16:13:07:b0:97:08:d0:85:
         8f:42:ab:1a:d1:39:30:cf:ef:1d:eb:3b:f9:cc:fb:b9:de:79:
         27:4a:47:42:ce:d9:bd:f1:e8:a3:85:46:d7:76:58:bf:24:41:
         a4:80:2d:ae:a0:a7:5d:bd:65:4a:11:90:f0:6b:db:e6:48:64:
         66:15:d4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:28:30 2025 by rpki-client