Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231393a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3231393a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          ZklpnR9ZFCV2poTDYgZU19qqeE3Coh7e5FX88NaTFic=
Subject key identifier:   6F:E1:F8:8C:A0:B7:AC:34:4D:2B:C9:CE:8E:35:9A:2A:AB:10:21:49
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       41D82F52DC1F53D525F41BFA29BF3EFDCBC6C046
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231393a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 06 May 2025 12:28:32 +0000
ROA not before:           Tue 06 May 2025 12:23:32 +0000
ROA not after:            Tue 05 May 2026 12:28:32 +0000
asID:                     9009
IP address blocks:        2602:ff62:219::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d8:2f:52:dc:1f:53:d5:25:f4:1b:fa:29:bf:3e:fd:cb:c6:c0:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  6 12:23:32 2025 GMT
            Not After : May  5 12:28:32 2026 GMT
        Subject: CN=6FE1F88CA0B7AC344D2BC9CE8E359A2AAB102149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:76:b1:6c:e6:a0:5b:e3:a4:df:c1:86:eb:97:
                    bc:31:c8:4a:8e:3f:4d:f4:b3:10:ba:81:8c:15:19:
                    18:5d:00:04:c6:96:c7:47:92:4f:7d:c4:27:b7:94:
                    4a:e2:22:68:fc:10:2c:e3:aa:d1:44:c1:46:2e:8e:
                    e4:8c:31:52:04:f7:0c:1d:f9:00:cd:d3:d1:dd:37:
                    b2:b6:ba:a7:d7:d7:fc:cf:0d:5a:ee:2a:e6:2d:8b:
                    db:f6:a4:c1:c9:de:0b:76:2e:6b:71:18:1f:ff:28:
                    cf:a4:18:49:c8:e3:0f:b8:80:16:6e:62:94:08:1a:
                    54:60:e5:eb:02:57:e6:34:bc:18:56:62:8b:ab:61:
                    18:70:a3:c3:ed:d1:71:2c:23:37:f3:42:b1:81:c9:
                    c3:27:ea:bd:d1:02:83:b8:6f:c1:82:4c:30:b6:72:
                    b8:e1:bc:0f:f0:8c:ba:92:36:bc:ce:df:11:67:f2:
                    40:79:51:53:35:7e:c2:12:d5:62:86:ef:8e:56:83:
                    ba:71:8a:7e:1f:65:99:70:05:e8:81:64:45:a0:36:
                    b4:ea:c3:62:dd:e0:26:f3:0c:d4:d1:3e:9a:6b:00:
                    05:b9:8d:e7:54:f3:18:53:dd:80:f2:37:20:51:06:
                    f3:b7:a0:bd:c0:f8:0e:94:b6:65:c1:25:9e:ed:71:
                    29:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E1:F8:8C:A0:B7:AC:34:4D:2B:C9:CE:8E:35:9A:2A:AB:10:21:49
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231393a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:219::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:fb:38:33:c7:08:d1:84:e1:4e:7f:7b:f8:0d:30:3b:79:ea:
         4a:bf:92:2e:e4:3c:30:eb:44:97:fb:ad:93:41:50:53:8d:52:
         78:d8:6a:da:33:d0:82:6d:f0:4c:44:13:94:5f:41:76:72:fa:
         59:7b:ad:df:b2:7c:3f:93:d2:5f:05:57:ec:40:a0:34:ed:ea:
         8a:c0:ca:68:e0:7c:38:37:36:e4:ca:b9:f2:f2:9f:aa:2c:aa:
         bd:60:1c:88:b7:6d:fc:18:21:9e:28:0a:59:b4:a0:16:d5:b3:
         3f:37:57:36:9b:87:c0:78:cd:7d:54:69:db:42:f8:75:ec:e8:
         a0:12:ba:51:e8:a2:ab:fa:ae:61:00:9f:4a:aa:77:f9:8a:3d:
         7b:a9:c5:6d:27:2a:8c:4d:e9:27:d0:6d:e0:18:17:af:60:1e:
         8f:2a:3d:2c:b5:f4:7b:14:53:43:74:4a:5c:08:52:ab:5f:10:
         8e:0f:54:c5:cc:f7:56:b1:7b:c1:e5:1b:b2:2c:70:d7:a3:7d:
         71:73:53:39:5b:0e:02:11:8f:6a:4f:fe:8b:70:20:69:fc:44:
         ee:83:8b:b0:c4:ac:2d:50:ae:07:cb:dc:ef:a4:e9:75:c8:94:
         ce:66:b8:4a:ab:17:50:a2:98:7a:59:18:8b:1e:98:b7:b8:59:
         61:2c:2b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:17:23 2025 by rpki-client