Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132353a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3132353a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          jvtAjJ1xI2t/Bq9fMUYCIJuYN+m46gXjk17hJgJhtCA=
Subject key identifier:   61:9C:17:81:AF:DA:C0:E6:9E:08:DA:8D:F7:FF:5B:CA:79:B9:56:9D
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       2F429D425952B5021FFDFB99B02277774DC17042
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132353a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 01 May 2025 13:28:31 +0000
ROA not before:           Thu 01 May 2025 13:23:31 +0000
ROA not after:            Thu 30 Apr 2026 13:28:31 +0000
asID:                     9009
IP address blocks:        2602:ff62:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 08:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:42:9d:42:59:52:b5:02:1f:fd:fb:99:b0:22:77:77:4d:c1:70:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  1 13:23:31 2025 GMT
            Not After : Apr 30 13:28:31 2026 GMT
        Subject: CN=619C1781AFDAC0E69E08DA8DF7FF5BCA79B9569D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:e8:71:4d:55:a8:92:5a:b3:01:79:b7:17:
                    13:fd:7b:4e:0b:84:7b:da:9f:58:9e:6a:a2:87:5a:
                    92:17:e7:7f:51:e6:0a:f8:94:fe:62:4d:87:a5:ce:
                    6f:14:8c:da:f5:5f:28:e6:4b:25:89:98:8f:48:ca:
                    1c:46:27:49:22:7d:3a:8b:53:e7:8f:58:6e:21:2e:
                    62:af:92:8e:e8:dc:b4:fa:5b:28:95:58:56:df:b6:
                    e5:f1:26:66:67:ee:89:d7:5e:f6:74:f9:4e:7c:86:
                    f7:20:15:7a:2f:5e:2b:da:9a:a5:ea:07:e0:8b:b3:
                    19:fb:e7:84:10:dc:91:a2:f1:4e:95:14:75:4e:38:
                    7b:a7:a9:a5:49:e4:be:73:26:1c:75:23:f0:cc:51:
                    96:e0:19:c3:04:80:81:46:9c:f1:64:e6:e0:4a:c4:
                    89:08:04:71:c0:5f:57:4d:ab:61:1b:6f:e8:74:16:
                    e6:33:49:82:1b:dc:b9:07:5b:f8:ed:f3:ba:d2:bf:
                    50:6e:88:80:b4:df:3b:ad:e5:0b:f9:e5:f6:b2:b1:
                    06:27:e6:73:4d:c6:2e:22:20:13:d2:dd:fc:12:c0:
                    26:61:15:51:7d:56:b8:24:f9:bb:08:46:d1:1f:5e:
                    1d:60:29:1a:6e:d4:b1:3d:5b:05:55:3a:ca:78:27:
                    3f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9C:17:81:AF:DA:C0:E6:9E:08:DA:8D:F7:FF:5B:CA:79:B9:56:9D
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132353a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:125::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:69:93:45:69:59:03:e4:43:35:04:a0:8b:d9:3a:bb:ea:ad:
         f9:0e:fe:84:c3:b8:80:86:24:e5:8f:8b:c5:83:d3:81:55:9e:
         99:9d:f2:12:15:87:2f:7a:d5:1e:66:f4:35:54:ed:13:b7:de:
         c9:30:ae:40:63:24:9a:34:34:3a:5b:68:1b:dd:62:49:6a:a8:
         44:b2:31:74:47:b0:a4:ff:74:26:47:23:b5:a7:e7:72:e8:6b:
         f8:72:af:5e:61:63:ac:d6:e3:6a:82:61:52:e4:cd:6f:e4:52:
         d6:78:b6:53:73:55:a3:5a:fd:fb:0e:61:5c:f7:b8:59:6e:82:
         a4:42:f2:89:33:2a:02:84:5e:d2:93:47:d0:26:ac:e8:e2:2c:
         ed:72:2d:6c:79:77:85:2f:fa:1a:8f:ff:8e:cc:18:72:90:ce:
         77:ca:8d:71:be:28:3f:26:73:b4:96:5c:e9:4d:f3:14:6f:93:
         38:de:c0:56:5b:a9:d0:37:cb:67:6c:7c:6a:a3:a3:ef:c1:28:
         f4:9d:48:b5:d1:a6:10:e5:a6:98:ab:94:9c:7c:38:2a:43:99:
         9a:ef:04:92:f6:52:3b:77:f9:2d:28:a1:c2:73:13:6b:c2:7c:
         62:69:c2:75:09:92:e9:46:6e:7c:73:af:4a:72:a4:60:97:66:
         11:d7:4f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:07:17 2025 by rpki-client