Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132653a3a2f34382d3438203d3e203133323133.roa
File:                     323630323a666636323a3132653a3a2f34382d3438203d3e203133323133.roa (raw, json)
Hash identifier:          KqZ+cb9pUsWrSgQrJxMrV6tX3WY+4HCwn4zTJh7s4Ec=
Subject key identifier:   35:BD:2F:41:9B:CF:66:83:DD:62:67:26:E8:C7:8C:38:90:63:5A:ED
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       674086BDF9D5155DC472E9FF98E3557EC4DDD42A
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132653a3a2f34382d3438203d3e203133323133.roa
Signing time:             Thu 01 May 2025 13:28:31 +0000
ROA not before:           Thu 01 May 2025 13:23:31 +0000
ROA not after:            Thu 30 Apr 2026 13:28:31 +0000
asID:                     13213
IP address blocks:        2602:ff62:12e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:40:86:bd:f9:d5:15:5d:c4:72:e9:ff:98:e3:55:7e:c4:dd:d4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  1 13:23:31 2025 GMT
            Not After : Apr 30 13:28:31 2026 GMT
        Subject: CN=35BD2F419BCF6683DD626726E8C78C3890635AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d2:92:ca:01:36:82:da:aa:5d:e0:93:e2:de:
                    6d:c4:79:7b:b5:f7:eb:b7:33:4c:4f:43:0b:c3:83:
                    e4:37:3f:f0:a6:5a:b1:9b:57:72:39:a2:8e:e6:54:
                    20:f2:0a:12:fa:a0:03:cd:04:fa:9a:56:ac:f7:31:
                    65:07:83:50:95:3c:fe:53:40:b4:63:4d:8b:80:17:
                    50:f9:15:77:95:a4:b7:cb:a7:be:f0:05:00:51:5a:
                    50:70:ee:71:cf:1a:73:a1:d6:6e:95:62:67:db:77:
                    ec:ee:f1:51:d3:d2:b7:a6:ff:58:2e:e4:d3:f8:81:
                    64:8e:a7:d2:29:27:9d:32:7b:d1:8d:f2:89:b0:62:
                    4c:4c:65:81:85:56:1f:3d:8f:51:5a:ed:90:af:64:
                    84:cf:4a:2d:6f:0e:7d:6c:99:61:cf:f1:b5:0b:c1:
                    12:75:cb:3b:e7:0c:d8:f6:3b:07:70:2c:be:bf:61:
                    52:95:4b:59:88:9e:d2:ea:92:a8:57:f3:2c:d4:fd:
                    f0:7b:8e:79:a2:e4:6d:9d:e0:86:e7:6a:b2:f1:1d:
                    d1:4d:5a:2f:0b:27:74:a8:82:4e:c8:f8:09:0b:8f:
                    2a:79:5e:9c:6b:b9:cd:6b:7b:c6:c6:d9:24:db:9a:
                    bc:ec:ec:10:db:a3:2e:b4:8e:f5:8c:e7:16:06:d1:
                    23:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BD:2F:41:9B:CF:66:83:DD:62:67:26:E8:C7:8C:38:90:63:5A:ED
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132653a3a2f34382d3438203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:12e::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:1b:66:18:a4:8c:e5:47:09:44:ac:63:08:f5:df:f3:98:1e:
         d0:3e:f2:28:e7:ac:e4:b2:0b:5e:7a:fe:89:8a:40:65:ec:09:
         99:3a:29:76:1a:85:72:45:82:83:36:c8:11:eb:84:ee:b1:33:
         b8:01:b3:e5:fa:99:80:45:16:d9:3f:0e:30:08:92:32:a0:60:
         74:7d:10:79:5f:ec:58:a3:a1:cf:c2:6b:9a:19:cc:cb:9d:93:
         53:0d:b7:df:34:21:16:b5:3d:ba:da:a5:6f:d6:77:7f:11:13:
         83:6a:b3:f5:fe:a6:8e:34:65:aa:d0:b5:14:0f:35:d8:c3:1c:
         93:fe:c4:5d:b2:57:a2:20:ff:19:01:21:b2:73:fb:5a:c6:bc:
         21:ea:0a:98:7a:bb:f8:3e:34:55:cd:e8:04:41:b4:e0:c8:ae:
         7b:2e:78:31:95:62:39:10:1a:ba:17:9f:f7:5e:77:40:bd:a9:
         7e:b5:8e:a2:16:ae:1f:64:92:5a:3a:9c:97:a4:83:97:22:52:
         ea:82:21:c2:db:bc:7e:b5:b4:10:ce:d9:09:d9:11:f2:c8:80:
         b9:45:9a:76:a0:a8:2d:b6:8c:d2:14:b3:fe:d7:c1:96:67:af:
         df:a4:15:d6:2f:89:a5:e9:96:58:21:ef:af:b0:d0:8b:2d:43:
         70:52:64:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:45:27 2025 by rpki-client