Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231383a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3231383a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          pW91dXh0iIrbIiKLYtI37IMh6MxGET24OpF73VlFE7g=
Subject key identifier:   0C:FE:A6:84:24:6E:8E:AC:BE:86:2D:1E:81:D4:87:3F:62:DD:B3:0C
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       23CF053ED50E07AC0FE3B831A4927F63F8B7FAE4
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231383a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 06 May 2025 12:28:32 +0000
ROA not before:           Tue 06 May 2025 12:23:32 +0000
ROA not after:            Tue 05 May 2026 12:28:32 +0000
asID:                     9009
IP address blocks:        2602:ff62:218::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:cf:05:3e:d5:0e:07:ac:0f:e3:b8:31:a4:92:7f:63:f8:b7:fa:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  6 12:23:32 2025 GMT
            Not After : May  5 12:28:32 2026 GMT
        Subject: CN=0CFEA684246E8EACBE862D1E81D4873F62DDB30C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:21:9d:9f:36:5b:cb:43:af:3d:51:4b:84:41:
                    48:fa:65:d9:d8:e4:c3:bf:b5:90:29:8e:04:b8:f8:
                    61:7a:63:e6:95:17:8c:92:65:b9:60:f3:2e:d9:1d:
                    d9:c3:7d:47:81:b3:66:3d:39:e3:b1:e1:c8:fd:02:
                    d3:12:49:d6:b6:5d:bc:b7:68:11:7d:c3:ab:91:0a:
                    15:36:e8:4e:8f:9b:92:9e:87:d8:5a:2e:49:b8:ca:
                    b1:cb:81:94:a0:1f:7c:12:b5:07:0a:d3:89:00:b7:
                    b0:98:95:46:73:db:51:d0:23:b3:0b:31:60:33:d5:
                    ec:63:10:3d:8b:10:6f:dd:7a:22:97:aa:cb:41:a9:
                    e3:79:11:b6:78:b4:27:82:26:a3:f3:62:51:66:98:
                    73:dc:9b:dd:59:aa:49:09:04:e1:37:8e:70:7f:c8:
                    16:bc:35:f5:43:e3:54:3e:17:ac:2d:57:26:74:d4:
                    86:89:f1:d3:06:8f:b9:de:30:f9:4f:20:34:5a:f2:
                    66:84:c7:1a:50:53:74:41:1b:2a:73:9a:19:52:34:
                    56:8a:c0:10:4a:74:a6:c0:2a:02:bb:02:fd:c7:e7:
                    22:ef:83:6d:d7:83:0a:8c:9e:8d:ad:82:1c:ab:46:
                    5c:82:04:0b:7c:26:99:8c:5e:f5:6a:1b:5c:08:9c:
                    6a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FE:A6:84:24:6E:8E:AC:BE:86:2D:1E:81:D4:87:3F:62:DD:B3:0C
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231383a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:218::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:49:e0:63:dd:fd:ec:3d:7a:30:b8:f2:d1:40:86:66:e7:cb:
         4b:84:53:4b:c5:63:57:17:a4:f3:45:39:b0:e0:61:a0:ef:49:
         8a:b0:5c:0a:c6:d8:a3:0a:d8:09:b2:9a:ad:35:90:52:17:5e:
         ec:32:13:04:e3:4b:96:28:93:9a:c6:c8:b8:e4:09:22:69:8e:
         36:f2:6a:2f:b7:7e:c4:1b:7d:d1:b3:ae:c7:86:28:ca:45:db:
         77:28:a0:ab:22:21:b5:54:39:32:be:19:9d:1d:f2:b4:d2:45:
         9c:c5:15:ca:c2:d7:c8:96:a1:e9:6b:f0:03:10:d4:50:b4:78:
         63:c6:a2:3b:81:a0:3d:20:67:3e:f0:33:ca:75:02:27:7e:5c:
         34:97:59:a9:a8:b7:da:98:1b:d6:f9:4b:82:57:b4:b8:24:62:
         71:27:d2:7f:fb:c1:9e:e4:25:74:47:1c:5b:b2:37:91:21:d0:
         81:64:93:c3:88:d7:ec:7b:bb:72:eb:d3:f3:09:82:3e:28:2f:
         fb:cf:1c:2d:d5:f2:5d:a7:13:e9:a8:cc:ca:3d:31:df:39:00:
         01:76:52:4f:50:f7:f5:f7:80:da:cf:83:a0:19:b3:af:a7:62:
         4d:2d:a1:51:e4:b8:d5:5a:60:d1:b4:61:57:13:0f:a2:69:1b:
         4f:af:21:34
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUI88FPtUOB6wP47gxpJJ/Y/i3+uQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjUwNTA2MTIyMzMyWhcNMjYwNTA1MTIyODMy
WjAzMTEwLwYDVQQDEygwQ0ZFQTY4NDI0NkU4RUFDQkU4NjJEMUU4MUQ0ODczRjYy
RERCMzBDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCGdnzZby0Ov
PVFLhEFI+mXZ2OTDv7WQKY4EuPhhemPmlReMkmW5YPMu2R3Zw31HgbNmPTnjseHI
/QLTEknWtl28t2gRfcOrkQoVNuhOj5uSnofYWi5JuMqxy4GUoB98ErUHCtOJALew
mJVGc9tR0COzCzFgM9XsYxA9ixBv3Xoil6rLQanjeRG2eLQngiaj82JRZphz3Jvd
WapJCQThN45wf8gWvDX1Q+NUPhesLVcmdNSGifHTBo+53jD5TyA0WvJmhMcaUFN0
QRsqc5oZUjRWisAQSnSmwCoCuwL9x+ci74Nt14MKjJ6NrYIcq0ZcggQLfCaZjF71
ahtcCJxq7wIDAQABo4ICuTCCArUwHQYDVR0OBBYEFAz+poQkbo6svoYtHoHUhz9i
3bMMMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzIzMTM4M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzkzMDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv9iAhgwDQYJKoZI
hvcNAQELBQADggEBAHBJ4GPd/ew9ejC48tFAhmbny0uEU0vFY1cXpPNFObDgYaDv
SYqwXArG2KMK2Amymq01kFIXXuwyEwTjS5Yok5rGyLjkCSJpjjbyai+3fsQbfdGz
rseGKMpF23cooKsiIbVUOTK+GZ0d8rTSRZzFFcrC18iWoelr8AMQ1FC0eGPGojuB
oD0gZz7wM8p1Aid+XDSXWamot9qYG9b5S4JXtLgkYnEn0n/7wZ7kJXRHHFuyN5Eh
0IFkk8OI1+x7u3Lr0/MJgj4oL/vPHC3V8l2nE+mozMo9Md85AAF2Uk9Q9/X3gNrP
g6AZs6+nYk0toVHkuNVaYNG0YVcTD6JpG0+vITQ=
-----END CERTIFICATE-----
Generated at Sun May 11 15:14:08 2025 by rpki-client