Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231343a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3231343a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          synk3mSmsTPQ5GurXhnglgwWwLd1B2Ry83mM1m93/uQ=
Subject key identifier:   0E:9F:73:51:1A:2C:63:AD:8E:C9:FD:CF:8F:A2:7F:AD:1B:28:CB:74
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       522ECCEC405351032188518D4AFB238056382167
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231343a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 06 May 2025 12:28:32 +0000
ROA not before:           Tue 06 May 2025 12:23:32 +0000
ROA not after:            Tue 05 May 2026 12:28:32 +0000
asID:                     9009
IP address blocks:        2602:ff62:214::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 08:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2e:cc:ec:40:53:51:03:21:88:51:8d:4a:fb:23:80:56:38:21:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  6 12:23:32 2025 GMT
            Not After : May  5 12:28:32 2026 GMT
        Subject: CN=0E9F73511A2C63AD8EC9FDCF8FA27FAD1B28CB74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:66:63:21:e1:bb:e2:10:2e:1b:9d:d2:8a:
                    18:c1:4c:7f:85:1f:35:c4:5a:25:f6:3f:de:2e:71:
                    c1:9f:57:7b:7e:5a:f6:48:bf:1b:18:e3:71:b6:1d:
                    39:7e:e6:6f:01:91:f8:d1:1d:7e:7d:2a:d8:3d:57:
                    4a:5e:15:48:68:33:cf:04:4a:93:7e:47:3d:a1:ce:
                    45:66:d4:dd:08:40:dd:91:7f:64:cf:33:51:30:23:
                    00:f4:45:49:96:90:8c:ad:cd:5d:6a:aa:ab:96:4d:
                    52:64:93:32:50:52:82:0e:d9:ba:f9:de:4c:d6:39:
                    52:35:93:e3:81:a2:46:bc:52:9a:43:ea:02:ba:bf:
                    9a:8f:50:eb:81:99:13:d3:4c:e8:e4:cc:67:5b:50:
                    54:fa:44:19:50:2c:60:72:82:86:44:b4:ed:71:d3:
                    43:82:79:bb:7e:9f:47:b9:c8:7a:ed:2e:6f:10:c0:
                    4d:4d:21:75:33:ca:56:af:5a:13:4e:2d:35:b3:a6:
                    fe:d9:78:b8:bf:e2:c5:72:8e:b4:4b:c9:a8:43:39:
                    35:7e:08:57:a0:75:9f:31:f2:47:92:82:b6:7a:7e:
                    25:7e:b4:d1:33:ff:01:cd:6f:9b:9c:71:8a:0c:42:
                    61:57:2c:e3:d1:49:c2:99:81:59:c6:30:df:ab:62:
                    9e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9F:73:51:1A:2C:63:AD:8E:C9:FD:CF:8F:A2:7F:AD:1B:28:CB:74
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231343a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:214::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:1f:15:49:a3:45:66:a3:a8:a5:a9:12:9a:e2:5d:11:b2:4c:
         4e:87:82:b4:9c:57:01:88:3d:db:e6:b2:f7:42:05:56:e9:87:
         c2:52:37:02:bd:91:ac:44:0e:2e:97:33:c2:2d:a5:43:24:28:
         9c:da:0a:ae:55:f8:a7:7f:8c:8b:1b:43:79:b5:f5:71:19:f2:
         f7:91:9e:a8:db:bf:7c:6f:62:fc:bf:a6:67:1d:ef:f0:27:c0:
         31:b0:b3:28:ff:12:c4:32:53:d5:b6:8a:43:12:a3:93:7a:02:
         98:88:9b:b5:8d:4e:54:f8:ef:ad:3e:fd:c6:35:07:e1:a3:d0:
         d9:bd:d7:65:d8:5a:15:f7:39:d6:bc:65:df:30:1a:d7:22:24:
         90:dd:d9:75:a2:96:98:5e:2a:26:50:57:f3:be:9c:01:c8:fd:
         4a:c3:10:ed:ec:ad:9f:d2:e8:0a:25:04:c5:bb:f3:ff:b8:d9:
         54:cd:42:0b:e7:3b:c7:b5:b9:0c:02:b0:ff:b1:33:dd:71:58:
         8b:c1:8e:fd:d6:9e:04:c7:ca:42:9a:c8:1c:22:c2:77:60:c9:
         08:9c:4e:47:0a:e5:93:54:15:ac:f7:a4:ca:31:ab:59:9d:a1:
         f6:17:cf:ed:43:84:e1:92:f0:ca:d9:18:46:46:ea:43:9c:10:
         c4:c8:61:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:18:01 2025 by rpki-client