Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3930303a3a2f34302d3430203d3e203534323138.roa
File:                     323630323a666139623a3930303a3a2f34302d3430203d3e203534323138.roa (raw, json)
Hash identifier:          LQZYcA+omKLZfVYqqWAtE/BC4JUP/ThNlGHL+vZkE0A=
Subject key identifier:   38:46:FA:FA:7B:EB:22:D4:09:31:7D:08:BF:94:42:45:8B:B8:35:7F
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       6E89179E396F410672B6ABF243A4AFEE9CE6BF1B
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3930303a3a2f34302d3430203d3e203534323138.roa
Signing time:             Fri 27 Jun 2025 23:16:41 +0000
ROA not before:           Fri 27 Jun 2025 23:11:41 +0000
ROA not after:            Fri 26 Jun 2026 23:16:41 +0000
asID:                     54218
IP address blocks:        2602:fa9b:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 18:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:89:17:9e:39:6f:41:06:72:b6:ab:f2:43:a4:af:ee:9c:e6:bf:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Jun 27 23:11:41 2025 GMT
            Not After : Jun 26 23:16:41 2026 GMT
        Subject: CN=3846FAFA7BEB22D409317D08BF9442458BB8357F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8e:47:3e:70:d3:c0:06:ff:35:9e:9a:58:d1:
                    df:d0:98:26:4a:be:5c:a6:58:2a:38:93:c3:f1:b2:
                    fc:17:c8:5d:67:c3:06:2f:4b:96:7d:d4:a8:3a:0f:
                    3a:1a:73:ae:95:c2:d8:4f:cb:c7:e5:78:04:5d:80:
                    27:9f:30:d9:a9:a1:6a:f9:a5:20:1a:b0:c5:3a:0c:
                    d3:7b:c8:70:f3:db:50:72:36:23:c4:48:22:aa:c0:
                    00:9e:f5:53:97:b3:ac:06:d6:cc:de:24:6d:64:51:
                    65:2b:98:61:9f:6b:8c:1e:86:ef:46:6b:e1:1f:8f:
                    34:8f:f7:6e:ca:2a:b4:b0:ac:74:18:0f:99:89:f4:
                    3a:7c:6d:05:61:74:c2:59:34:7b:e3:1f:e0:65:d0:
                    f3:0c:62:3c:b9:2d:ad:e0:00:9b:65:10:09:a6:2e:
                    6b:a2:89:d3:c0:0f:49:ec:63:c1:44:14:0e:75:ad:
                    e0:a1:65:99:96:1c:a0:87:a8:fb:81:0c:4f:05:09:
                    3d:6e:a1:de:d7:37:34:bd:fb:ff:01:79:4a:61:a9:
                    a1:4f:9c:d0:4b:f3:16:40:35:b6:a5:3e:c8:8a:12:
                    56:34:73:02:0a:c3:df:c3:f9:c5:76:fc:2f:57:a0:
                    fc:ce:ee:8d:5d:b9:18:69:81:d8:04:bb:0b:51:70:
                    0b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:46:FA:FA:7B:EB:22:D4:09:31:7D:08:BF:94:42:45:8B:B8:35:7F
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3930303a3a2f34302d3430203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         70:50:e2:fe:88:ec:67:a7:96:36:e4:98:f4:22:9a:e1:e5:d4:
         a8:fe:9f:27:ce:10:14:27:96:7e:e8:87:6a:a3:6b:d8:97:fd:
         b4:cb:b9:0d:5e:84:c4:b0:ed:5d:7d:f7:48:c8:82:91:d2:3d:
         f1:2a:e4:36:e5:a6:bb:82:22:15:35:76:4e:85:54:54:2c:da:
         ef:a6:de:53:cb:2d:51:fd:d3:5a:9e:30:96:67:7b:3f:51:fe:
         83:17:a8:07:f5:b6:08:25:4a:89:8f:09:ec:e2:e0:e1:7d:41:
         e0:97:b7:89:65:00:7d:d6:e8:65:6f:71:62:84:68:3b:d7:f4:
         78:38:9e:0d:5c:c0:8d:7f:1f:ed:c4:b1:c1:0e:1c:07:a8:3b:
         fc:cc:61:37:83:de:25:9b:9d:32:15:75:d3:62:b4:f8:68:8f:
         8d:f8:7e:cc:1a:f3:69:ad:ca:89:70:6a:ad:c8:36:91:84:01:
         84:f6:40:2d:72:70:4b:a0:bd:6c:81:34:92:7c:0a:cd:a4:6b:
         9a:95:5f:45:1b:33:d1:18:b5:b0:fa:51:3d:de:f7:d3:85:59:
         4c:a4:5c:77:0f:0b:d5:ac:7c:9a:8f:12:18:a6:39:3e:6e:81:
         86:3a:48:0f:4c:af:73:48:cf:16:9c:e7:0d:7f:ba:9d:3e:29:
         cb:86:37:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:17:55 2025 by rpki-client