Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132643a3a2f34382d3438203d3e203133323133.roa
File:                     323630323a666636323a3132643a3a2f34382d3438203d3e203133323133.roa (raw, json)
Hash identifier:          HncAKOw/C8QVwN2EtbozjpgUyg9yjoRPi9sOCamJrsE=
Subject key identifier:   30:4A:87:B5:C7:65:48:20:63:26:16:5A:0A:BE:A2:AC:25:6A:61:C1
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       01A2722A95BE337CEB06216ACE27E271DA8A625E
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132643a3a2f34382d3438203d3e203133323133.roa
Signing time:             Thu 01 May 2025 13:28:31 +0000
ROA not before:           Thu 01 May 2025 13:23:31 +0000
ROA not after:            Thu 30 Apr 2026 13:28:31 +0000
asID:                     13213
IP address blocks:        2602:ff62:12d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 08:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a2:72:2a:95:be:33:7c:eb:06:21:6a:ce:27:e2:71:da:8a:62:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  1 13:23:31 2025 GMT
            Not After : Apr 30 13:28:31 2026 GMT
        Subject: CN=304A87B5C76548206326165A0ABEA2AC256A61C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:44:48:ca:c1:f4:2a:79:c6:43:e5:3c:c3:5a:
                    85:03:73:f1:cd:ed:b8:81:71:32:ea:c8:f1:5e:ab:
                    d9:8c:a3:f5:0b:c3:5a:46:12:da:fa:f6:23:42:39:
                    f5:9b:91:3b:21:d6:73:73:5c:8f:dc:69:8a:f7:1a:
                    62:95:44:92:cc:a2:6f:f1:86:bd:8d:12:fd:ea:94:
                    03:15:9b:8c:ca:2e:86:b4:13:ee:60:76:2a:d2:eb:
                    31:14:bf:c4:c1:55:bb:d9:c3:02:58:a1:ec:6d:93:
                    fb:7a:66:06:37:c0:3b:c8:e4:89:52:61:fb:e9:1c:
                    87:9f:99:c2:a9:5d:0e:56:22:0d:73:5c:aa:3e:72:
                    f8:83:1d:16:7e:62:c5:97:e3:bb:9a:a0:ad:33:a8:
                    a5:ab:3c:96:86:bd:76:c2:3b:34:7d:1c:3a:7f:99:
                    97:c0:d7:ee:a2:80:a6:83:19:dc:65:d0:18:bf:93:
                    03:52:1d:4c:0a:98:11:0b:17:fe:b3:33:76:52:f0:
                    be:da:2d:a8:5d:f5:42:f1:e8:4f:06:33:cb:e9:ab:
                    0c:c7:1a:e2:30:2d:75:ad:a0:f0:73:a0:f0:ea:7d:
                    89:75:e7:f3:af:7e:77:37:fa:dd:3e:28:88:cc:57:
                    ff:bb:b5:d1:b0:ca:22:c6:54:d6:fc:90:43:d3:99:
                    b0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4A:87:B5:C7:65:48:20:63:26:16:5A:0A:BE:A2:AC:25:6A:61:C1
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132643a3a2f34382d3438203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:12d::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:de:a5:90:05:28:0b:cf:ea:dd:b1:5c:6a:be:1a:cf:42:eb:
         87:1b:49:29:df:43:e9:bb:f8:ce:97:68:b2:fc:e7:1a:c4:b0:
         20:3d:55:ea:78:52:3e:3c:63:fc:e0:bb:d2:ba:00:7f:03:48:
         bc:1f:bb:0f:76:94:f8:07:cd:68:48:45:50:1d:78:c9:62:6b:
         dd:97:f4:dd:66:3e:9b:34:24:81:6f:25:77:6a:30:b8:87:2f:
         4a:8e:43:34:2c:1d:c9:10:7d:df:a2:53:72:0f:8e:97:3d:d2:
         66:62:72:d9:fd:5e:11:88:33:91:56:80:ef:50:68:d5:fd:9f:
         f3:0d:bd:2e:00:2e:00:8d:92:d4:90:73:a1:4e:84:7e:b0:b3:
         27:a7:12:ab:7a:08:ee:67:ac:ba:d4:f9:c3:32:e7:e0:51:98:
         d0:3d:46:75:4a:83:70:b5:6c:f9:65:a0:86:d2:ee:e7:81:26:
         9e:e6:fb:87:16:50:73:3a:fb:36:2b:18:de:c0:17:37:21:5e:
         a4:66:d8:25:27:a6:32:99:3b:bb:55:67:28:31:c2:ed:c3:f6:
         fd:2b:8c:a1:20:2e:02:61:4c:78:7c:bd:dc:37:00:6d:79:79:
         4a:04:f3:55:de:47:55:86:95:94:80:c0:ea:24:bc:3b:a3:4f:
         d2:28:db:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:37:05 2025 by rpki-client