Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231353a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3231353a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          sbBaRC/zp6vn/nZEQqWnrxC5AL1Ci1R2jLIcS3/zf2s=
Subject key identifier:   F2:0B:2C:B0:B0:5D:D0:64:4F:9F:F3:9A:F2:EF:A5:7A:F5:27:1A:43
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       218F5B49CF2B1B0FEEAC7D0171F5A6DC11E11E42
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231353a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 06 May 2025 12:28:32 +0000
ROA not before:           Tue 06 May 2025 12:23:32 +0000
ROA not after:            Tue 05 May 2026 12:28:32 +0000
asID:                     9009
IP address blocks:        2602:ff62:215::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8f:5b:49:cf:2b:1b:0f:ee:ac:7d:01:71:f5:a6:dc:11:e1:1e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  6 12:23:32 2025 GMT
            Not After : May  5 12:28:32 2026 GMT
        Subject: CN=F20B2CB0B05DD0644F9FF39AF2EFA57AF5271A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:37:b3:78:28:b6:aa:81:8d:54:0c:f3:d5:a4:
                    61:12:98:e2:2c:13:67:5e:31:b2:0b:c7:46:1b:54:
                    92:ab:7a:25:80:43:c1:d0:aa:02:b9:72:b7:7f:ef:
                    04:62:5a:da:7d:9d:88:2d:60:65:ed:c4:b5:41:6e:
                    f7:11:6f:14:68:23:3c:a3:e4:f2:e0:3c:a9:50:96:
                    86:34:69:0a:ef:fd:09:a8:6d:4a:1a:98:59:e5:f3:
                    6b:93:44:19:d6:5a:e8:b4:4e:cb:19:75:fb:20:f0:
                    13:79:b4:79:4f:06:ac:69:63:14:13:02:a6:2f:76:
                    77:1c:69:c5:32:01:15:25:ea:38:08:a5:b6:cd:74:
                    bb:f6:9d:d3:84:60:73:92:61:b1:37:bb:fe:69:bd:
                    a6:90:9f:25:3d:7a:dd:c1:40:50:ee:59:44:74:21:
                    e3:cb:ee:02:2b:71:4c:c8:34:c1:b3:7f:52:c6:fa:
                    77:ef:0e:46:11:5a:c6:eb:6c:5b:01:47:55:1e:60:
                    00:e6:f7:31:70:e8:b8:9d:c3:98:b4:dd:21:5e:eb:
                    fb:89:c8:76:5e:19:3c:6d:b4:38:2b:8c:71:2d:1a:
                    a8:30:0b:84:52:88:9f:56:d0:01:ba:f0:52:0c:90:
                    d7:a1:b1:4e:be:3e:8f:40:6e:ab:74:23:59:9c:62:
                    05:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0B:2C:B0:B0:5D:D0:64:4F:9F:F3:9A:F2:EF:A5:7A:F5:27:1A:43
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231353a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:215::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:9c:97:a4:a7:5b:8d:9e:2b:ce:65:c8:c1:9f:fc:53:fd:9c:
         1e:c4:6d:de:11:75:60:00:56:60:c4:63:e7:2b:4d:99:73:c2:
         fb:07:01:9e:8a:98:69:e1:4f:e1:e8:8c:d1:d7:14:02:6a:83:
         15:94:90:09:41:24:30:b6:04:27:e0:8b:bc:19:b8:96:0c:13:
         ae:46:a0:f0:9a:4b:44:a6:92:19:6d:ee:1f:45:93:97:58:6b:
         ee:89:4c:10:8f:9e:a0:0e:fa:91:71:25:42:25:44:f1:cb:e4:
         0c:0d:0d:80:3b:73:50:d6:fb:7b:63:f2:5e:c1:a8:9c:d2:9f:
         31:5b:e1:77:82:5c:55:36:26:c5:bf:a8:c9:4c:20:7c:c9:42:
         8b:2f:a8:50:9f:61:68:d3:ee:32:62:38:ec:00:8f:ff:ab:ff:
         c9:6e:1f:74:1d:39:87:43:e4:7a:10:7a:ef:66:c9:af:7e:e8:
         94:65:32:b9:ee:48:72:e5:14:1c:a9:4a:52:50:4f:a4:6a:29:
         a4:a8:65:b2:13:41:88:e9:6f:eb:50:44:d2:e2:95:3c:95:ec:
         c3:c8:48:c0:35:5a:2b:ed:65:7b:a7:fc:77:9a:11:f6:b7:1c:
         2d:a7:a4:4b:49:5c:cc:bb:6e:43:8a:26:be:6d:29:19:5a:e6:
         fe:09:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:28:14 2025 by rpki-client