Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132623a3a2f34382d3438203d3e203133323133.roa
File:                     323630323a666636323a3132623a3a2f34382d3438203d3e203133323133.roa (raw, json)
Hash identifier:          VF5lWhsAu6fRdEZ/s7gcO5U1V1Db5ewyAhCwfRqaeZE=
Subject key identifier:   C9:BB:9B:F6:40:86:9A:30:5D:0E:36:32:91:6B:2C:00:8B:D9:3C:15
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       42B137E7B32B634D8D3AEAC723B861007A846764
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132623a3a2f34382d3438203d3e203133323133.roa
Signing time:             Thu 01 May 2025 13:28:31 +0000
ROA not before:           Thu 01 May 2025 13:23:31 +0000
ROA not after:            Thu 30 Apr 2026 13:28:31 +0000
asID:                     13213
IP address blocks:        2602:ff62:12b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b1:37:e7:b3:2b:63:4d:8d:3a:ea:c7:23:b8:61:00:7a:84:67:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  1 13:23:31 2025 GMT
            Not After : Apr 30 13:28:31 2026 GMT
        Subject: CN=C9BB9BF640869A305D0E3632916B2C008BD93C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d7:54:3e:31:23:4a:80:35:cb:6d:b2:c8:ca:
                    1b:6a:29:a6:ed:87:e7:e4:31:b7:5f:ba:48:ea:c4:
                    20:04:df:7f:ec:2c:ce:53:30:86:c1:5a:80:a0:39:
                    3a:93:e7:6e:e2:a0:ab:8d:81:9d:e6:1c:d2:27:c2:
                    bd:c2:ea:bd:32:de:7b:9e:e1:e7:df:8f:f5:be:41:
                    eb:59:f2:38:97:d9:90:4a:1f:15:ff:be:1b:d5:e5:
                    c6:b0:06:b5:c9:29:6d:b7:ea:df:14:3b:ae:60:0c:
                    21:27:58:6d:7a:70:69:38:95:7f:ed:09:ac:cd:16:
                    42:b1:85:c0:84:d4:0e:a3:b5:1e:4c:30:27:30:88:
                    de:cb:52:fb:ea:05:7e:30:4c:cd:3a:b7:89:6c:58:
                    4d:d1:8b:60:06:15:9d:a8:93:63:59:dd:f1:91:82:
                    ee:be:21:00:e9:44:27:83:79:1b:d1:79:83:04:b7:
                    04:fa:02:0a:5e:c1:81:a6:ed:25:d3:e6:6b:a7:bf:
                    db:34:3b:14:db:e2:f2:aa:c2:32:12:7d:2b:7e:f4:
                    f0:30:1f:51:d9:f3:33:8a:67:1f:40:85:98:ef:81:
                    63:ef:00:85:26:d6:fa:56:40:f1:b8:6d:81:e2:a0:
                    40:b7:c1:92:d7:05:6d:df:e8:10:f4:9f:de:87:e5:
                    e3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BB:9B:F6:40:86:9A:30:5D:0E:36:32:91:6B:2C:00:8B:D9:3C:15
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132623a3a2f34382d3438203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:12b::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:a8:29:df:0e:e8:df:55:89:e1:e8:98:48:6d:1a:52:b5:43:
         0b:a1:aa:1e:a3:c3:15:b7:f8:8a:cb:d7:75:41:24:17:3f:18:
         77:6b:48:0f:69:72:8f:29:4a:c1:49:5e:69:cc:eb:6c:8d:c4:
         bd:15:48:16:28:2d:ef:43:08:a5:2b:17:74:2d:59:1c:ab:e5:
         67:21:64:2f:e9:34:c6:98:25:0c:ec:ce:86:76:81:86:8a:da:
         21:b6:8d:f3:b7:ea:cb:e4:73:96:7e:c6:1c:68:41:66:5b:27:
         a0:5f:4e:a3:8f:68:62:66:0c:27:ec:ca:73:f7:f0:05:40:c3:
         fd:56:b5:35:97:8f:32:b1:a2:9d:e1:10:d5:72:b0:a2:11:f3:
         6c:8e:5f:d6:25:71:1d:08:45:70:ac:de:65:31:f6:df:69:35:
         c2:7b:da:10:3e:67:80:75:85:52:ac:70:cb:a3:c0:71:22:ff:
         93:82:7b:cf:eb:f7:a2:3a:74:ab:8c:2f:0a:e9:0e:5f:81:51:
         d4:66:42:59:2d:b4:99:8e:fc:bd:58:a9:54:5e:94:69:f8:fb:
         13:27:9d:82:a1:70:1d:b0:cd:11:68:39:fc:c2:be:8d:31:f4:
         49:87:a1:1e:21:99:59:7e:49:29:a9:57:05:c8:45:88:03:97:
         0c:5c:2c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:05:27 2025 by rpki-client