Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a313a3a2f34382d3438203d3e203133323133.roa
File:                     323630323a666164343a313a3a2f34382d3438203d3e203133323133.roa (raw, json)
Hash identifier:          i7m6DOIn8Vv4x18HWoqU1DeQacY2ruvfViDlBXydmM0=
Subject key identifier:   9D:79:A1:E9:4C:E9:BA:C6:5A:71:73:28:52:B2:F9:A9:5A:29:A1:97
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       160D94123409FBBE68CB24E429D954C93731B7CC
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a313a3a2f34382d3438203d3e203133323133.roa
Signing time:             Wed 30 Apr 2025 10:28:31 +0000
ROA not before:           Wed 30 Apr 2025 10:23:31 +0000
ROA not after:            Wed 29 Apr 2026 10:28:31 +0000
asID:                     13213
IP address blocks:        2602:fad4:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 17:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0d:94:12:34:09:fb:be:68:cb:24:e4:29:d9:54:c9:37:31:b7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Apr 30 10:23:31 2025 GMT
            Not After : Apr 29 10:28:31 2026 GMT
        Subject: CN=9D79A1E94CE9BAC65A71732852B2F9A95A29A197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:89:55:7f:29:e3:ba:5f:90:dd:7a:7b:c8:
                    07:be:71:ba:3a:cd:d3:2a:43:21:8e:74:22:4a:41:
                    41:95:9b:44:6d:eb:a1:24:60:d5:45:65:52:e2:af:
                    43:3a:15:bc:37:d4:c2:fa:04:e8:16:77:0a:0f:84:
                    d3:d2:14:21:a5:6a:63:9f:83:ab:2e:bf:42:41:8b:
                    58:12:78:93:d1:43:2c:ae:f4:a8:b2:33:cf:9e:18:
                    0c:d2:79:6d:a4:42:f9:33:b3:62:b8:7d:7c:85:e6:
                    eb:12:0f:11:f3:df:6a:b0:bd:91:4f:d5:8a:3f:a7:
                    97:5f:d4:76:48:06:00:21:4f:63:f2:ae:89:65:42:
                    c7:f4:30:f7:19:45:41:3f:a0:5e:36:47:0e:68:2b:
                    60:0c:cd:a3:05:06:62:02:47:fb:c1:e9:e0:fd:dc:
                    41:eb:18:77:6d:3f:88:d7:1c:ef:2f:e5:d0:7f:89:
                    46:70:96:d6:b4:d1:43:c3:35:2b:a2:82:ba:df:be:
                    e2:0e:a8:be:1c:d0:fb:28:2a:20:61:3e:4d:6d:4f:
                    5d:ff:05:23:1e:2a:2c:12:63:66:f4:8b:ce:90:88:
                    c2:14:0d:ba:5f:d9:9d:c9:a3:9e:45:ab:b0:11:9f:
                    cc:67:26:97:5c:52:0a:be:8c:a9:76:71:84:d4:9f:
                    82:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:79:A1:E9:4C:E9:BA:C6:5A:71:73:28:52:B2:F9:A9:5A:29:A1:97
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a313a3a2f34382d3438203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:55:82:ef:11:29:38:8f:e0:e5:c1:4a:b7:19:61:b9:52:79:
         ab:d3:a3:2c:f7:ef:b8:98:f5:f6:23:be:ea:bc:e7:c3:16:d1:
         6c:ce:24:04:62:1f:00:d8:03:d4:1d:bc:ff:c2:c3:06:04:40:
         16:9d:8d:09:1a:4e:78:39:6f:17:ae:75:2e:99:2c:d1:5e:3e:
         6f:e8:93:91:5b:0e:ce:53:45:d6:09:f5:4a:29:f1:17:e8:3a:
         8a:f1:b8:ec:d0:a7:10:84:ec:e5:c8:d9:6c:c6:f0:7e:63:00:
         c5:a2:25:a0:e2:d9:e8:0f:75:2a:86:6c:a7:b3:22:62:ea:33:
         fe:7e:ab:39:06:3a:2d:80:fe:2c:30:2a:79:a0:d2:3f:69:60:
         1e:82:80:a2:a1:08:ad:35:b3:be:3a:69:a8:d1:42:cc:11:72:
         a7:19:62:a8:ea:95:95:dd:94:ab:fe:b5:74:1e:c9:c1:e8:1f:
         e4:c5:94:97:5f:02:37:7a:8d:b6:f0:b1:49:69:41:d8:90:10:
         e7:90:38:82:92:c7:e1:15:d8:b9:90:a4:45:1b:cb:bf:bf:eb:
         c8:71:64:ed:b8:c2:8a:4b:6b:70:8b:e1:be:e1:7e:89:c0:cc:
         37:0b:25:1b:9c:62:59:9a:2b:5f:f0:8d:a9:47:ec:7b:15:be:
         e1:89:b6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:08:16 2025 by rpki-client