Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132393a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132393a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          L5zUKhJ4d2vooXW431puvFQZr5IpXc+BIVdYmH1Vko4=
Subject key identifier:   98:E0:5D:E1:CA:24:38:21:76:02:62:AC:87:EC:6D:FA:ED:68:03:15
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       6790D03DC0E6553BCF4504363CB1813578829E8D
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132393a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 05 May 2025 15:28:32 +0000
ROA not before:           Mon 05 May 2025 15:23:32 +0000
ROA not after:            Mon 04 May 2026 15:28:32 +0000
asID:                     29802
IP address blocks:        2602:ff62:129::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:90:d0:3d:c0:e6:55:3b:cf:45:04:36:3c:b1:81:35:78:82:9e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  5 15:23:32 2025 GMT
            Not After : May  4 15:28:32 2026 GMT
        Subject: CN=98E05DE1CA243821760262AC87EC6DFAED680315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6b:28:4a:bd:dc:ed:ad:48:cc:fc:7a:02:80:
                    1c:a4:4e:b4:6f:82:ff:c3:a2:c9:b3:38:b6:ef:96:
                    de:27:a6:42:aa:1a:38:e3:9b:f7:22:86:2a:16:69:
                    24:52:c7:76:93:30:72:de:ee:b6:ae:0e:d9:78:d1:
                    eb:08:62:f1:18:07:e7:d7:e6:ae:6b:b2:ea:fb:ba:
                    6c:17:d9:67:01:fe:ec:9a:16:36:d3:09:5f:4b:94:
                    f5:df:30:be:24:90:ab:4a:01:9c:8c:d3:d7:23:f5:
                    91:e4:ce:53:9c:48:d1:35:6a:7a:f4:2c:8e:7c:38:
                    27:35:d8:fe:c3:56:de:fd:d9:c9:bd:eb:67:63:3a:
                    f1:87:9c:25:f3:3d:20:57:ec:6f:a9:29:c2:0c:42:
                    44:69:33:93:dc:66:0f:0d:71:d0:5d:c8:c4:12:9a:
                    41:07:18:ef:87:79:fa:6c:2a:86:5e:a4:58:0e:d1:
                    3d:7e:bc:b7:de:7e:e6:bc:6f:a0:c7:1b:a7:9d:23:
                    7a:6c:4f:fe:9b:ee:a3:43:cb:42:d0:25:d6:19:4b:
                    09:a0:4d:a1:63:7e:37:c1:8c:05:df:6f:6f:49:cc:
                    ca:ba:c6:b4:d1:e9:99:47:cc:52:ca:95:81:ae:81:
                    90:7c:bf:8e:df:33:ba:ac:0c:bd:f4:39:c3:9a:9c:
                    2a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E0:5D:E1:CA:24:38:21:76:02:62:AC:87:EC:6D:FA:ED:68:03:15
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132393a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:129::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:9a:af:fb:b9:48:74:0d:10:c9:96:8a:85:02:cb:ff:6b:c3:
         6b:e8:d7:30:b4:af:5f:b9:cd:57:5c:ff:aa:a9:8c:d9:22:36:
         c2:b9:9e:d7:00:b3:ec:0a:6e:13:03:cf:a1:0d:46:9a:7a:70:
         d3:be:a8:1c:07:16:89:90:03:9a:49:fb:2b:93:60:f4:e9:50:
         4b:62:5d:67:01:02:6b:e5:d5:ff:1f:f8:97:91:d6:2f:54:5a:
         86:68:33:2d:3f:2a:69:57:35:93:64:b7:d6:53:75:80:fa:c9:
         17:5e:d5:9c:57:c6:86:f8:5e:93:10:e5:79:ec:56:af:71:71:
         1b:e9:ec:2b:35:b7:6d:b5:d3:90:5b:6e:8b:d0:5b:cc:f5:32:
         de:da:d0:bb:67:95:8a:bf:4f:bc:a2:d9:eb:bc:e1:cc:da:95:
         31:0d:98:ec:84:1a:ea:60:d3:c9:39:58:71:8d:cf:85:6f:17:
         ce:4f:31:fd:79:b6:ed:94:02:ef:2a:49:21:3b:ff:ab:69:b1:
         8f:12:c0:3e:29:35:98:87:f1:c0:ce:2b:a5:35:16:1f:77:07:
         5e:95:d1:9a:4f:96:10:66:9d:07:79:f3:dd:6b:4b:d0:05:87:
         59:11:bf:9c:b3:94:59:f0:dd:61:7a:db:ff:ee:cb:5b:ae:d9:
         8a:27:27:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:46:28 2025 by rpki-client