Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a333a3a2f34382d3438203d3e20323039313039.roa
File:                     323630323a663764633a333a3a2f34382d3438203d3e20323039313039.roa (raw, json)
Hash identifier:          cHS5lVJ7UNvstNA/fGp0aVbT4dcayXrLdcK1YTcXY7U=
Subject key identifier:   D4:FC:11:03:A9:8E:C3:C2:BB:B3:76:29:AF:99:90:EB:AC:F4:51:35
Certificate issuer:       /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial:       360D8F592ABB66B565D8C2531FCEE59F9BBEC19B
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a333a3a2f34382d3438203d3e20323039313039.roa
Signing time:             Fri 03 Oct 2025 18:39:57 +0000
ROA not before:           Fri 03 Oct 2025 18:34:57 +0000
ROA not after:            Fri 02 Oct 2026 18:39:57 +0000
asID:                     209109
IP address blocks:        2602:f7dc:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0d:8f:59:2a:bb:66:b5:65:d8:c2:53:1f:ce:e5:9f:9b:be:c1:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
        Validity
            Not Before: Oct  3 18:34:57 2025 GMT
            Not After : Oct  2 18:39:57 2026 GMT
        Subject: CN=D4FC1103A98EC3C2BBB37629AF9990EBACF45135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:fb:6c:1c:1c:bd:5c:3e:3d:72:a5:e5:a5:
                    19:af:7c:73:72:87:80:42:b5:0b:8b:26:de:f6:09:
                    81:69:95:fd:b9:c9:b3:51:05:b0:fc:30:f3:7b:e9:
                    66:ea:d9:df:71:c8:c9:ee:30:6d:93:f1:81:c5:d2:
                    d8:9b:8d:8b:58:46:37:4b:d0:a3:d0:92:19:b3:62:
                    a9:38:7c:a3:a3:e8:f5:3c:e1:49:7a:70:ec:93:44:
                    ca:af:98:3b:7a:c8:5c:ce:1b:ff:e2:57:68:7b:d7:
                    31:7e:8a:ab:51:fb:e5:7f:c8:0c:e2:44:94:d1:6b:
                    bf:f7:dd:e3:a1:7c:dd:d5:64:29:7a:f2:09:68:b7:
                    f9:6f:5c:b2:02:a1:94:56:84:e5:bf:2a:2a:90:14:
                    c9:8d:6c:a9:b5:f6:2c:f5:78:9e:41:e7:f1:42:7a:
                    53:12:62:5c:3b:d0:81:eb:7c:2f:f5:05:65:91:b3:
                    26:b2:1e:ab:04:1f:7f:8b:d2:a7:5a:0f:f9:b6:a6:
                    b0:33:f5:4e:c8:f6:a5:57:d0:97:46:41:c6:0c:10:
                    33:fe:a8:3d:77:a9:76:45:87:85:23:3b:1b:4a:20:
                    32:9c:c1:b7:ee:77:b2:3e:76:8a:e9:d1:5b:d0:06:
                    cd:48:b0:39:d4:d1:4d:06:4a:68:5b:07:99:3c:26:
                    c1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FC:11:03:A9:8E:C3:C2:BB:B3:76:29:AF:99:90:EB:AC:F4:51:35
            X509v3 Authority Key Identifier:
                keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a333a3a2f34382d3438203d3e20323039313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7dc:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:2b:57:90:08:22:76:b2:b6:25:1b:1b:cb:33:ae:63:5d:1e:
         1c:de:6f:e7:9a:07:2c:1f:e4:dd:da:41:ac:5a:8f:d1:cf:58:
         5e:11:b0:bc:d0:98:29:cc:d2:88:cc:20:b2:23:a6:55:2e:c0:
         f4:23:f4:05:81:33:1c:b8:08:5d:81:b0:77:a5:6d:dc:1c:d4:
         5c:44:18:eb:87:2d:65:37:ae:7b:de:38:f7:a3:3c:bd:81:8e:
         ba:87:3e:0c:81:17:f4:9d:2d:03:c7:72:56:c0:9b:c5:09:d4:
         0d:47:0f:23:c8:38:1a:62:38:1d:4f:43:7c:a2:69:03:a6:b7:
         93:31:b8:75:3a:c2:70:60:b0:3e:76:d8:a8:ab:0e:ca:53:8c:
         04:f5:d0:93:52:0e:6d:b1:ba:08:df:b9:2f:c4:15:12:5c:53:
         82:95:99:5d:bf:eb:10:ec:d9:b4:90:67:8e:8a:6f:78:aa:cd:
         f0:3c:b4:85:fa:2a:6a:cd:7b:91:e1:39:15:b8:38:ec:7a:48:
         45:f1:0f:ac:b4:4d:fa:94:3e:fa:74:1c:38:40:3b:19:11:e2:
         7c:d2:76:c9:2a:1b:fe:bc:d0:cc:f7:ea:3c:74:63:e1:87:e8:
         67:ca:19:91:c6:e2:c1:43:8f:1e:10:26:aa:25:d5:7f:a1:d9:
         dd:3d:dd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:18:52 2025 by rpki-client