Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132363a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3132363a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          x4oDVp5/gk5JQbh8/6ewJxpAs4m5XmIQdcC56AxEs/0=
Subject key identifier:   D6:02:B8:35:57:75:71:E8:92:98:B7:EA:9B:29:A7:B7:30:E3:1C:30
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       60CC67DF5A735F89EF2B1C3D2A8E0622D2332541
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132363a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 01 May 2025 13:28:31 +0000
ROA not before:           Thu 01 May 2025 13:23:31 +0000
ROA not after:            Thu 30 Apr 2026 13:28:31 +0000
asID:                     9009
IP address blocks:        2602:ff62:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 08:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:cc:67:df:5a:73:5f:89:ef:2b:1c:3d:2a:8e:06:22:d2:33:25:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  1 13:23:31 2025 GMT
            Not After : Apr 30 13:28:31 2026 GMT
        Subject: CN=D602B835577571E89298B7EA9B29A7B730E31C30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f2:6f:e5:89:57:84:b6:d8:82:cf:57:3d:da:
                    4a:b6:34:cf:02:23:ee:e3:20:de:32:8e:7d:04:78:
                    f0:2e:8e:4d:4e:af:ba:47:29:a6:1c:6e:88:43:f1:
                    a5:e7:a2:05:6d:53:8e:0a:a1:83:a6:82:85:86:7e:
                    b9:84:ab:a3:dd:2e:5a:b7:c6:50:b5:94:93:31:3c:
                    8d:2c:e5:80:57:86:94:39:07:b8:49:99:44:98:ac:
                    82:49:95:ed:2e:f4:0a:47:ad:fb:d9:35:1e:7a:a7:
                    9a:28:b3:79:bd:71:4b:8e:a8:72:bc:11:1a:4d:b5:
                    b0:a3:2a:c2:56:2d:69:9a:ed:37:9a:de:58:58:aa:
                    a7:b5:f0:bf:01:e5:30:1f:fc:c9:3a:1a:dd:21:bb:
                    40:a1:b3:18:73:f6:d0:98:85:9e:04:e9:56:71:8f:
                    f3:dc:f8:19:b7:0b:f8:18:d2:ff:b7:5e:0e:2e:fb:
                    1a:2d:c9:03:63:ec:cc:89:1f:37:07:c7:e7:42:13:
                    ef:9a:39:e4:08:ee:f9:ff:ca:75:10:49:f2:79:ae:
                    c2:0c:ed:d6:f7:eb:a6:c8:dd:96:a2:18:54:07:50:
                    f0:fd:40:db:3a:d7:57:08:0e:7d:0b:14:c2:e1:37:
                    3b:ae:1d:96:0f:15:35:8b:8f:f9:de:08:1b:2c:73:
                    9d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:02:B8:35:57:75:71:E8:92:98:B7:EA:9B:29:A7:B7:30:E3:1C:30
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132363a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:126::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:47:4f:f2:ad:4d:96:6b:33:30:fe:7b:6f:b0:21:67:99:32:
         56:d3:55:e5:e5:0b:67:69:5a:ad:01:7d:80:f7:73:c8:d0:9d:
         e6:3b:3d:1a:27:aa:9e:b4:5b:b9:e4:a9:17:fe:a5:22:38:f0:
         b9:6c:0c:d3:2e:3a:89:a6:70:e0:46:0b:64:22:97:9e:9f:18:
         c0:10:56:72:29:04:2b:24:e0:d3:79:4b:64:ac:d4:24:2b:1e:
         36:de:e9:fb:2b:5a:7b:36:14:ec:f8:54:5c:84:9e:3f:6e:10:
         b5:02:63:60:43:c9:3c:31:5e:b1:12:c8:dc:e6:01:ee:90:a0:
         e1:17:48:c0:ef:51:63:45:9b:b5:08:ca:29:27:fc:2d:f5:fe:
         55:8e:35:a4:2c:c1:68:86:6a:69:ae:92:6c:3f:83:e3:34:d5:
         e2:32:55:18:9f:2c:13:7c:bd:65:a7:eb:7c:38:e3:2d:96:1b:
         aa:40:46:89:72:57:dc:e1:47:41:46:29:0f:6e:af:dd:b3:52:
         52:da:89:b5:bd:4a:0f:1d:5f:38:a5:c3:e4:a2:c0:73:7a:b0:
         68:c1:04:74:81:6d:e6:37:37:55:6c:79:4a:90:f7:3c:b7:8f:
         3c:66:78:9f:84:32:38:83:d4:98:99:b1:45:bf:12:8e:6a:29:
         f5:85:bb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:35:33 2025 by rpki-client