Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132643a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132643a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          GwUG8Gi/WHRJ+hJ8em6Z+AugifPjDS9oDfSD5RwrKuo=
Subject key identifier:   D5:98:BF:E2:C1:11:D9:18:4E:1E:75:D8:49:AC:93:F7:06:F3:F9:09
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       3F7493C4B9240835AA8561B65B9BED034F4BC1C0
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132643a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 05 May 2025 15:28:32 +0000
ROA not before:           Mon 05 May 2025 15:23:32 +0000
ROA not after:            Mon 04 May 2026 15:28:32 +0000
asID:                     29802
IP address blocks:        2602:ff62:12d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:74:93:c4:b9:24:08:35:aa:85:61:b6:5b:9b:ed:03:4f:4b:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  5 15:23:32 2025 GMT
            Not After : May  4 15:28:32 2026 GMT
        Subject: CN=D598BFE2C111D9184E1E75D849AC93F706F3F909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c7:2e:8e:53:69:ee:bb:6c:e2:98:05:a5:b2:
                    2d:3f:85:59:b7:db:a5:99:79:82:74:31:ac:bb:c8:
                    31:25:b6:5e:76:b6:b0:9e:a9:98:f4:d6:01:9b:b3:
                    40:12:2c:de:b7:eb:79:b2:6f:ea:b3:bc:11:dd:b3:
                    f4:bd:6d:66:81:67:91:bc:54:36:5e:85:16:f1:2f:
                    5e:ef:8c:74:69:27:56:b3:1b:28:0f:12:fd:8a:1e:
                    58:b5:38:a0:3e:39:da:bb:e5:1b:79:7f:32:42:b9:
                    81:9d:90:87:f9:de:d5:95:a6:f6:b5:4d:4a:37:0a:
                    70:81:4c:7f:5b:42:ae:8f:9b:49:15:34:68:67:d0:
                    27:29:d9:13:51:d3:fe:25:9e:07:30:fe:be:80:a4:
                    cf:a9:38:69:e7:3e:a0:33:3a:ad:16:15:31:79:d7:
                    bd:aa:ee:81:2b:ca:91:e7:96:cb:ce:d1:56:7a:e7:
                    86:93:29:bc:9f:5d:75:3a:33:ff:bb:3e:d3:03:04:
                    4a:a7:82:b6:57:67:18:c8:06:75:21:74:2f:0b:52:
                    95:50:08:5b:dc:23:c8:36:6b:f2:3b:15:34:69:5d:
                    79:e7:ae:ba:13:4c:0a:4b:87:4f:c8:07:17:3b:47:
                    74:e0:81:cf:7c:6a:45:0e:92:2f:5d:ee:81:02:6e:
                    99:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:98:BF:E2:C1:11:D9:18:4E:1E:75:D8:49:AC:93:F7:06:F3:F9:09
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132643a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:12d::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:09:7e:0a:56:f7:06:1e:2a:7a:4a:73:b5:bb:99:78:85:18:
         e0:c8:90:52:f3:2c:b0:9b:18:d9:a5:13:9f:f5:d4:d4:ac:f6:
         f5:d7:4f:76:01:4b:51:b6:a8:59:4d:47:e8:05:92:10:73:b1:
         8f:e1:3f:d5:8b:3a:49:19:fb:f9:18:f6:27:51:e3:e2:00:43:
         e8:3f:ed:27:bf:0a:5f:67:44:81:e1:b6:37:27:29:72:64:3f:
         fa:ec:40:57:bb:c8:c3:c5:c2:df:fc:19:66:95:7a:e1:ed:be:
         98:5b:d6:93:42:1e:92:7b:a1:08:b4:9e:63:4a:27:ea:cf:2e:
         b9:c1:c6:f7:22:33:26:81:18:ab:c4:25:f7:74:5e:ea:6a:bf:
         47:3c:6d:fa:6f:90:81:4d:bc:b8:41:25:4e:0d:95:e2:eb:1a:
         31:6a:94:13:df:32:be:84:33:fe:8d:5d:87:0f:a6:ec:87:bf:
         66:32:28:8d:53:aa:09:28:fd:30:55:ba:1f:d1:e7:04:07:0e:
         b9:75:7c:78:23:e0:13:a0:63:c8:41:2c:ad:6c:bb:9a:96:06:
         32:63:f6:0b:82:04:e5:68:fe:00:4d:53:2a:d1:ff:1f:b5:14:
         39:9d:ed:42:12:a8:9f:8c:c7:fe:82:31:bd:9f:b3:0b:8f:a9:
         34:e9:64:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:39:05 2025 by rpki-client