Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231373a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3231373a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          3oSzQ5sLXydV8elFeVtjEWMRqhMqe/2VSGEmmJKR07w=
Subject key identifier:   F9:43:81:6B:99:D5:BF:DF:44:2C:DC:55:DD:D7:26:D4:F2:CA:E1:F5
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       419EFA26FAF889D1F91B8167CE4E7642CE3E6823
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231373a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 06 May 2025 12:28:32 +0000
ROA not before:           Tue 06 May 2025 12:23:32 +0000
ROA not after:            Tue 05 May 2026 12:28:32 +0000
asID:                     9009
IP address blocks:        2602:ff62:217::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9e:fa:26:fa:f8:89:d1:f9:1b:81:67:ce:4e:76:42:ce:3e:68:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  6 12:23:32 2025 GMT
            Not After : May  5 12:28:32 2026 GMT
        Subject: CN=F943816B99D5BFDF442CDC55DDD726D4F2CAE1F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:e3:7b:38:40:98:d1:e3:ee:19:27:d0:a4:
                    b5:c9:ca:0c:b5:bc:c9:11:49:c0:94:5f:57:be:81:
                    f1:e5:5c:1b:30:6f:6c:38:c2:c4:f6:39:ee:22:0e:
                    e8:16:61:f6:e0:02:71:66:c1:02:3e:30:e2:ca:8a:
                    0c:0a:37:47:6e:c9:fe:fc:c9:c9:f4:67:de:84:97:
                    6f:4a:34:33:12:66:62:53:a4:6c:2c:20:c0:55:c4:
                    45:d2:c0:56:74:14:9d:3d:87:25:0c:18:d7:44:b1:
                    05:97:e5:91:3b:1d:c1:ed:d1:8d:9f:2f:37:b3:46:
                    0e:57:cd:a4:96:10:99:6d:50:3c:35:dd:af:31:37:
                    e9:3c:99:88:f7:16:7b:c0:59:80:0f:e9:ab:86:2d:
                    60:f3:b8:e2:15:e9:4a:9d:c9:da:78:63:9c:11:4d:
                    45:ab:69:9e:90:24:7a:22:4c:3c:44:ca:de:cf:b5:
                    8f:f5:e7:c7:a1:35:4a:74:32:20:96:91:08:78:3c:
                    bd:37:62:d6:64:ca:d5:29:25:14:59:52:cc:04:ab:
                    37:de:44:01:5e:68:00:83:58:cc:4e:5d:17:73:91:
                    3b:80:26:dd:f7:00:e2:29:36:66:95:46:c5:5a:ae:
                    d4:89:5a:1c:a5:91:6c:63:9a:21:6e:3c:58:88:43:
                    35:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:43:81:6B:99:D5:BF:DF:44:2C:DC:55:DD:D7:26:D4:F2:CA:E1:F5
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231373a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:217::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:00:5d:20:68:01:82:b5:75:39:ab:9f:91:d5:9d:72:91:80:
         0e:c6:41:c6:e3:22:9a:04:00:42:f4:b3:ef:86:b6:49:6f:b4:
         65:33:3e:1b:ec:4f:42:d8:f7:4d:50:02:6f:15:15:d9:e4:cb:
         2b:f1:5f:29:e7:cf:e6:da:27:49:40:4b:c7:5e:72:27:91:c9:
         73:ac:70:42:ce:4f:e9:5a:05:02:ef:99:d9:bc:0b:9c:20:e2:
         92:13:02:ce:de:ae:ec:b6:46:d2:25:6c:29:7a:5b:45:45:2c:
         53:10:18:65:b2:d3:3f:b0:fb:5a:ad:0f:83:12:91:45:a6:a7:
         75:d5:f8:5f:c5:11:db:82:7c:a2:c6:ca:d9:0c:e0:84:55:e1:
         75:30:af:17:13:89:67:38:98:70:15:1f:aa:0f:2e:2c:e9:f1:
         bf:52:91:34:93:c8:9c:9d:b8:ba:c2:4a:18:13:6a:61:91:1f:
         e4:0e:76:a1:9c:50:b2:e2:a2:fd:8a:80:82:16:2f:57:ed:fd:
         21:28:6b:d4:85:4f:ee:d9:2c:f7:ec:dd:fb:6b:25:33:1e:b3:
         0c:4f:b2:ed:10:99:82:c1:6d:29:91:93:1e:34:69:38:9c:12:
         86:55:91:11:ad:42:f6:9a:4f:d2:ae:fd:a9:71:fc:e8:25:58:
         50:38:22:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:13:47 2025 by rpki-client