Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132373a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3132373a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          Pt5Y+nBIJiwcs3/VytVM+q4p58FFiQ24Z67m3d7CQl0=
Subject key identifier:   25:3F:77:95:2D:B0:CF:4E:E6:50:B2:43:84:FD:84:5D:E8:FC:35:79
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       2F1121E58A7761559E3E235C9E946D549F6F3EDF
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132373a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 01 May 2025 13:28:31 +0000
ROA not before:           Thu 01 May 2025 13:23:31 +0000
ROA not after:            Thu 30 Apr 2026 13:28:31 +0000
asID:                     9009
IP address blocks:        2602:ff62:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 08:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:11:21:e5:8a:77:61:55:9e:3e:23:5c:9e:94:6d:54:9f:6f:3e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  1 13:23:31 2025 GMT
            Not After : Apr 30 13:28:31 2026 GMT
        Subject: CN=253F77952DB0CF4EE650B24384FD845DE8FC3579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:d6:28:2a:09:10:c6:34:bc:82:c6:af:84:
                    88:f1:de:ed:60:7e:ce:6c:bc:27:03:6a:26:b0:93:
                    50:0f:d2:5b:2a:d1:9c:99:08:a4:de:2a:11:e1:ec:
                    3c:05:22:7c:31:b4:e9:4d:ec:81:7e:82:45:9a:44:
                    33:c1:78:85:4a:6b:48:7c:bf:5f:25:d3:1a:76:b2:
                    7c:ab:ac:e5:a0:79:ac:0d:f4:18:d2:91:81:e5:c4:
                    ee:ea:8d:97:3e:db:d0:aa:23:ea:1e:c6:a7:44:cf:
                    60:59:2c:4c:df:f1:ce:3d:c2:ff:2e:1e:5f:cc:b5:
                    7c:a8:a8:03:a3:c0:3a:04:cb:eb:a5:bc:1f:ae:7e:
                    98:fe:b6:10:9a:17:e9:6d:39:ef:91:85:ea:b2:58:
                    08:ea:c3:2a:e5:d9:ed:28:60:04:c5:4f:77:cf:b0:
                    22:d3:82:6b:2b:c2:df:c7:e2:bc:2a:5d:62:47:34:
                    d8:50:09:9d:a9:2c:9c:be:e8:d2:af:02:02:a8:17:
                    2b:72:ab:0e:f3:c4:ce:cd:ee:18:34:26:c4:b0:05:
                    bf:fc:3d:87:71:6f:a5:aa:4c:2f:4f:ca:3b:88:9e:
                    72:88:33:d6:81:aa:65:45:8a:aa:7c:34:a0:6b:3f:
                    ca:8e:4b:de:28:fe:d2:1e:48:4e:ea:71:0f:be:ab:
                    ea:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3F:77:95:2D:B0:CF:4E:E6:50:B2:43:84:FD:84:5D:E8:FC:35:79
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132373a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:127::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:ee:78:dc:2c:21:5f:23:e6:15:5a:79:67:55:77:ca:0d:3a:
         61:68:90:17:f8:40:63:b6:3c:dc:35:30:08:07:56:61:bd:67:
         a0:19:0f:74:cc:ac:d3:cd:fd:cc:bc:f1:7c:71:f3:f4:0c:1d:
         66:d2:18:09:a2:a6:29:32:0e:af:fd:27:2a:5e:c0:7d:29:a3:
         cc:71:22:df:0a:2e:12:ad:bb:38:1c:71:bd:74:b7:f5:14:03:
         61:a2:1b:11:e4:91:be:a4:f8:6b:b2:a8:3e:97:06:9d:9c:45:
         80:08:02:64:98:35:8d:62:00:73:48:07:9d:c1:14:80:40:39:
         a4:38:91:28:7d:1b:e6:d6:79:01:2f:ea:e7:44:05:29:f4:71:
         b0:56:06:b8:4f:a0:65:a5:20:bc:1a:cb:9b:c2:52:c3:c3:a9:
         66:fa:a0:b5:07:34:df:af:a7:17:3d:a9:ce:30:e1:5f:30:f5:
         c2:37:af:c8:a4:17:bc:ba:08:28:12:4e:81:6e:ca:3a:52:6c:
         4b:b9:59:79:b7:9b:76:af:50:ed:0d:93:95:69:bd:22:c6:e6:
         d1:55:5c:7c:93:7b:ca:e1:07:8c:3f:5e:ae:9d:21:10:ba:d0:
         92:c1:93:f3:fa:90:7f:dc:e7:e6:3f:ed:3b:2e:90:69:47:85:
         45:e6:14:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:00:42 2025 by rpki-client