Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a323a3a2f34382d3438203d3e20343031333836.roa
File:                     323630323a663764633a323a3a2f34382d3438203d3e20343031333836.roa (raw, json)
Hash identifier:          sfYYe2ddWG/SRLvVN7x3iVOTWpMv7B91tUxKS6bgWuQ=
Subject key identifier:   ED:48:7F:64:03:3A:DB:D5:A8:3A:02:E9:6A:40:CD:F6:1D:85:D1:18
Certificate issuer:       /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial:       746B9BD94B04E37214DFFC06569BF5D629C1E120
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a323a3a2f34382d3438203d3e20343031333836.roa
Signing time:             Tue 16 Sep 2025 15:11:13 +0000
ROA not before:           Tue 16 Sep 2025 15:06:13 +0000
ROA not after:            Tue 15 Sep 2026 15:11:13 +0000
asID:                     401386
IP address blocks:        2602:f7dc:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:6b:9b:d9:4b:04:e3:72:14:df:fc:06:56:9b:f5:d6:29:c1:e1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
        Validity
            Not Before: Sep 16 15:06:13 2025 GMT
            Not After : Sep 15 15:11:13 2026 GMT
        Subject: CN=ED487F64033ADBD5A83A02E96A40CDF61D85D118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:35:57:8d:06:b3:ac:06:29:73:cc:ca:5c:1d:
                    db:ad:21:f6:ff:dd:6e:e8:d4:83:57:8b:dc:15:cc:
                    ff:06:70:1c:e3:6e:4a:16:32:69:60:d9:1a:a7:3c:
                    82:ae:15:64:85:55:36:67:29:4b:e3:06:e1:c0:cc:
                    e7:3a:d5:54:ab:b3:a9:5a:88:a7:a3:45:9d:01:29:
                    22:0b:b8:b9:7d:60:6d:65:7c:f1:fe:69:0f:f1:b5:
                    3f:17:22:cc:90:4a:d5:e9:18:eb:22:77:63:d6:8e:
                    b3:1c:0c:fb:f8:2a:f3:1e:ac:14:3e:d4:32:d8:c5:
                    22:48:56:57:7a:24:84:f4:c8:5f:e2:5e:60:0c:f0:
                    c6:5d:10:7b:ad:09:66:24:74:f1:f3:54:60:ac:2b:
                    28:3a:b1:95:47:b8:be:cc:9d:72:87:23:09:16:28:
                    0a:b2:53:e2:c7:36:6b:ff:73:d3:57:3a:90:02:59:
                    d1:4a:a2:98:fb:3a:9a:d7:1f:e7:c1:a4:4d:af:67:
                    36:aa:36:37:ec:1b:31:6c:a1:bf:1e:30:87:cb:c3:
                    c3:b7:75:d9:50:aa:c2:97:c4:9d:8a:2c:56:75:ad:
                    51:8b:ae:e7:af:c1:f7:c0:9f:9e:d9:a7:1b:29:ef:
                    5c:4a:f4:13:7b:11:3d:1f:11:26:22:10:eb:35:af:
                    ed:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:48:7F:64:03:3A:DB:D5:A8:3A:02:E9:6A:40:CD:F6:1D:85:D1:18
            X509v3 Authority Key Identifier:
                keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a323a3a2f34382d3438203d3e20343031333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7dc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:1d:48:f0:42:b2:fe:98:aa:cb:cc:a9:c8:4c:42:db:85:b6:
         cd:da:1f:b8:cb:56:89:a3:6e:d9:ee:42:3c:90:f2:7a:b8:48:
         fe:45:a1:e0:47:33:86:7b:f0:d9:54:0c:71:8a:c9:26:aa:28:
         11:86:cb:8d:04:66:d6:46:72:17:48:ac:80:50:7c:65:8d:32:
         96:61:47:1e:f2:10:26:90:c9:81:d1:8b:ad:cb:74:6c:a0:8f:
         5e:3e:3f:39:b1:b1:63:f0:16:ea:40:29:db:67:02:a3:45:a8:
         86:68:c1:b7:e1:c4:48:9c:89:4c:9a:7c:a3:97:05:bf:35:a4:
         05:8e:22:fa:37:d3:73:43:0b:a9:56:13:f5:9d:7e:d3:de:c5:
         d1:af:58:61:ee:4b:48:66:0b:a1:b7:7c:fd:a0:af:e0:03:5d:
         85:e2:4d:31:70:52:8e:b7:46:83:3d:d4:0a:fd:87:bc:63:ba:
         5d:43:1f:3b:4b:92:fa:a7:b4:a8:25:1c:05:f4:28:35:79:5b:
         61:27:86:65:d4:26:53:cb:62:5f:7a:65:72:1e:96:da:d3:a0:
         71:4d:5d:c4:ab:66:9b:e1:4e:96:43:c2:7f:67:c5:5a:4c:e7:
         22:10:7c:b4:82:f1:78:47:02:9f:8e:49:19:80:88:b6:a4:07:
         53:54:0e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:23:44 2025 by rpki-client