Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231333a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3231333a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          oAO7wDU/oilVfDZG2j88uRN8ENB257BVX4G8mGnM7f0=
Subject key identifier:   33:80:68:F1:02:DC:44:05:ED:55:4B:10:93:30:13:D9:E5:C6:DB:C3
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       405F0122FB018E72425E0955063E27F091B7FAFD
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231333a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 06 May 2025 12:28:32 +0000
ROA not before:           Tue 06 May 2025 12:23:32 +0000
ROA not after:            Tue 05 May 2026 12:28:32 +0000
asID:                     9009
IP address blocks:        2602:ff62:213::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5f:01:22:fb:01:8e:72:42:5e:09:55:06:3e:27:f0:91:b7:fa:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  6 12:23:32 2025 GMT
            Not After : May  5 12:28:32 2026 GMT
        Subject: CN=338068F102DC4405ED554B10933013D9E5C6DBC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2c:51:6f:a1:21:bd:af:bf:49:f3:dc:50:68:
                    93:25:35:e9:b6:f4:8a:6d:d2:2f:21:12:30:a8:81:
                    f5:2f:48:50:47:36:5e:ce:7a:47:9c:0f:0d:c9:f0:
                    29:5a:d4:6a:66:97:43:36:89:01:ce:39:76:d0:c6:
                    a4:11:e5:75:11:27:3c:0d:b9:d6:9b:91:83:a7:21:
                    ff:2f:32:ac:92:c6:51:4c:2f:2c:b2:76:2a:30:d0:
                    66:02:77:2b:b8:91:b3:c0:7d:62:8a:ae:b9:58:91:
                    65:c1:bf:f4:b8:b7:29:6d:f5:4e:74:55:dd:fd:58:
                    1a:7a:ef:8b:75:3f:ca:39:89:13:0e:c3:e3:86:ec:
                    af:3d:26:2a:31:d5:9c:cc:33:81:af:cd:79:f2:9f:
                    aa:7d:0a:22:56:76:be:44:29:69:da:72:70:19:05:
                    53:32:8e:49:2d:1c:49:7b:3a:18:37:a8:be:8b:81:
                    3e:48:11:9d:70:2d:b3:64:ff:91:1c:3e:42:a5:03:
                    3c:60:0d:cc:5d:bb:d7:c4:e2:88:93:42:3f:17:e8:
                    3d:c9:bd:f3:ae:01:48:f4:aa:78:84:03:13:5f:87:
                    6a:4e:12:12:42:4a:ed:61:23:d6:ee:da:02:b9:5f:
                    fa:4e:03:f5:ae:16:4b:f6:37:9a:a0:e7:6f:65:98:
                    fc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:80:68:F1:02:DC:44:05:ED:55:4B:10:93:30:13:D9:E5:C6:DB:C3
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231333a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:213::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:2c:7c:db:e4:44:d6:b0:0c:e3:20:c8:cc:05:dc:77:76:e3:
         a8:0a:a6:84:de:41:86:06:be:8a:52:1c:88:de:7f:5c:04:58:
         d6:4f:45:7f:ec:67:04:39:40:45:72:7d:1d:a3:b5:1d:9d:4d:
         9c:c4:01:85:ee:43:ad:ca:4a:ff:0a:44:66:97:89:1f:cc:c3:
         ef:f9:97:01:e6:15:e4:be:a7:87:65:93:42:e7:9f:3e:ef:46:
         a5:99:11:e5:14:e1:ec:de:8d:b9:3e:eb:25:c2:7c:07:1c:d8:
         e0:bf:17:20:59:bb:fa:7b:8a:bd:3b:6a:1c:85:7f:1c:5b:31:
         e5:a9:0d:c9:1d:07:43:b6:9d:c7:cb:1a:6f:16:a3:66:f2:1e:
         5d:06:5e:0c:bd:99:3a:22:82:36:96:39:03:b8:d9:a5:a3:c0:
         f7:1a:64:0e:31:43:55:d3:09:06:d2:da:c7:a7:cc:a3:b9:32:
         fa:61:5f:2f:c3:ef:48:0f:17:a4:a0:ca:2d:f2:4e:a2:8d:0a:
         19:7a:b8:50:c9:fd:7b:46:75:7e:7e:0b:47:fd:cb:77:18:02:
         4d:5d:fb:b6:54:2e:e4:34:8c:58:e3:0b:d8:bb:b1:ca:96:86:
         35:05:21:13:df:a4:fd:68:65:19:c0:e7:a8:42:da:1d:f3:e2:
         a7:9e:2a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:05:23 2025 by rpki-client