Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132613a3a2f34382d3438203d3e203133323133.roa
File:                     323630323a666636323a3132613a3a2f34382d3438203d3e203133323133.roa (raw, json)
Hash identifier:          TgKii7Jk9npxQFIfYpWXzu6V3wOWT2juWspj5CkCu0A=
Subject key identifier:   F0:73:72:0E:A0:EA:85:8E:9D:18:07:3E:DF:A8:44:8C:78:E0:72:61
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       623140493124683CFFE6F8992354918ADF7722F6
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132613a3a2f34382d3438203d3e203133323133.roa
Signing time:             Thu 01 May 2025 13:28:31 +0000
ROA not before:           Thu 01 May 2025 13:23:31 +0000
ROA not after:            Thu 30 Apr 2026 13:28:31 +0000
asID:                     13213
IP address blocks:        2602:ff62:12a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 08:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:31:40:49:31:24:68:3c:ff:e6:f8:99:23:54:91:8a:df:77:22:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  1 13:23:31 2025 GMT
            Not After : Apr 30 13:28:31 2026 GMT
        Subject: CN=F073720EA0EA858E9D18073EDFA8448C78E07261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:25:da:f1:a9:50:94:e1:1c:ae:1f:b1:e5:26:
                    d6:fe:59:00:7c:22:69:25:5a:08:0f:79:67:c6:47:
                    43:8b:3d:17:e6:62:f8:ab:3f:2e:55:66:41:03:ea:
                    91:88:fe:89:19:67:3e:f4:e2:a4:b0:99:c7:ea:0e:
                    03:07:6d:cc:94:14:6b:7b:de:b4:14:63:68:97:94:
                    a4:75:d6:e8:6e:ac:46:6c:10:50:9c:48:2f:49:e8:
                    c2:af:84:44:f9:88:2c:d6:6d:db:77:51:6c:44:ef:
                    91:52:64:9c:e5:65:1f:fc:54:cf:ae:5c:04:71:49:
                    f2:98:28:99:64:52:ba:b6:1c:93:b7:0c:92:d5:22:
                    04:95:24:13:51:29:7d:59:f7:8d:fc:be:80:03:e2:
                    23:63:cc:eb:b3:30:b0:ae:f3:23:61:84:63:13:db:
                    ad:2c:84:32:58:90:52:6c:02:5b:f8:1c:94:0d:33:
                    bd:49:e0:dd:64:9f:3e:11:7b:c6:9a:c1:93:7b:5b:
                    2d:d3:f0:6b:b6:15:c4:a1:00:f9:6e:cc:47:01:f0:
                    cd:47:c7:72:d5:28:d7:84:a8:86:90:b5:cd:c9:b6:
                    d4:3d:92:b7:8c:a3:3c:ff:ce:41:fc:ad:9c:0f:88:
                    8a:e5:30:49:bc:c4:82:ea:8c:90:3b:2c:b1:b8:ad:
                    58:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:73:72:0E:A0:EA:85:8E:9D:18:07:3E:DF:A8:44:8C:78:E0:72:61
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132613a3a2f34382d3438203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:12a::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:3e:a8:1b:c9:29:db:e9:9f:6b:87:67:2c:49:b3:2e:bb:64:
         a8:3b:e3:34:42:28:22:50:0e:e2:53:05:96:c9:93:aa:6b:43:
         3f:6f:03:be:b9:f5:b6:c5:ad:70:ee:13:f6:22:d9:c3:43:2e:
         e5:dc:f5:ed:1c:a3:28:c5:e8:75:5f:24:cb:5b:10:62:ab:ae:
         f1:05:32:9b:2e:2a:bd:60:bc:a2:02:c6:f3:ea:94:4a:a3:47:
         41:a9:89:d1:fb:fe:f6:9e:c4:c6:40:16:fb:55:30:77:84:ee:
         61:8a:66:87:ec:1c:bd:ee:20:b3:35:68:3a:40:de:40:5a:a7:
         15:3b:c8:eb:ec:f7:e2:0e:a5:98:ac:ea:bd:0f:90:47:38:3c:
         53:f4:18:79:d4:a4:f5:a3:1f:69:ac:ca:26:01:e6:eb:e1:00:
         b3:98:3b:a9:b4:71:a4:01:00:3e:f4:97:40:79:cc:8e:46:9a:
         d5:dd:46:fe:52:0c:a8:2d:53:a3:af:c6:d9:96:96:c7:3a:7c:
         69:e9:b1:75:e2:76:7a:58:87:75:3d:57:b0:71:92:5f:6d:01:
         b3:ad:1c:37:de:b3:ed:cf:5b:94:f8:cc:80:9b:b7:3b:92:02:
         52:75:ce:d8:d3:10:28:24:2d:e7:4f:28:5e:95:49:41:c7:fe:
         24:c8:47:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:41:23 2025 by rpki-client