Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a3130303a3a2f34302d3430203d3e20323039313039.roa
File:                     323630323a663631333a3130303a3a2f34302d3430203d3e20323039313039.roa (raw, json)
Hash identifier:          ai6TWKI6MXzBrbIoUylZ9d8/LoiLjD+00/f2KloSL4Y=
Subject key identifier:   1A:A8:AA:DE:D2:B8:95:34:4B:69:2A:8A:8A:60:FE:6D:48:94:29:1E
Certificate issuer:       /CN=5d9371e706db917120354ce162e131307448d445d3bda534e4
Certificate serial:       6CC93F795E3044AD0733D1EB0D563FA48B53E798
Authority key identifier: 31:8A:31:E0:F9:B2:FD:58:4D:99:4E:84:8E:7E:81:7C:CC:91:52:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a3130303a3a2f34302d3430203d3e20323039313039.roa
Signing time:             Sun 21 Sep 2025 13:32:18 +0000
ROA not before:           Sun 21 Sep 2025 13:27:18 +0000
ROA not after:            Sun 20 Sep 2026 13:32:18 +0000
asID:                     209109
IP address blocks:        2602:f613:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/15838c48-cf11-45c4-8e0b-0455f2640cd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/15838c48-cf11-45c4-8e0b-0455f2640cd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c9:3f:79:5e:30:44:ad:07:33:d1:eb:0d:56:3f:a4:8b:53:e7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9371e706db917120354ce162e131307448d445d3bda534e4
        Validity
            Not Before: Sep 21 13:27:18 2025 GMT
            Not After : Sep 20 13:32:18 2026 GMT
        Subject: CN=1AA8AADED2B895344B692A8A8A60FE6D4894291E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3f:6a:6c:2a:63:dd:85:ca:96:1b:85:2b:27:
                    4c:65:47:d5:7a:3f:89:39:1f:4e:1e:85:2b:fd:23:
                    52:cf:7b:75:f8:26:99:46:01:b7:a9:b6:72:d4:20:
                    b6:d5:66:ca:1a:04:ba:4a:06:b4:0b:20:a7:b3:f7:
                    ab:23:1b:73:86:84:a5:f4:c9:ab:dc:f0:bb:ae:5e:
                    c0:65:cb:ce:e0:ad:b9:87:20:e2:a9:fc:19:73:ec:
                    20:9e:88:ba:66:86:23:24:c0:93:21:9e:d0:78:0d:
                    08:03:e0:26:55:82:49:b7:98:1e:92:38:17:13:4d:
                    25:5d:39:3a:9e:38:33:ac:55:31:d4:ae:ea:07:f6:
                    8b:09:4b:16:b7:a8:44:50:f2:34:81:1d:25:b1:2d:
                    0e:05:b6:3f:a9:bd:2c:f5:60:3d:53:2d:8c:af:62:
                    2a:71:01:89:6a:78:a6:f0:67:82:ca:73:02:01:33:
                    06:e8:5d:bf:e2:c2:a9:37:0e:02:26:e7:45:70:8d:
                    10:b0:1c:88:26:89:c5:13:9d:5d:2e:63:d0:74:79:
                    cf:fa:e4:7a:96:94:81:2b:a0:62:2e:1e:fa:0f:bc:
                    02:61:41:e8:1a:5f:98:d5:60:04:1d:2a:09:9d:be:
                    82:fc:46:10:e8:73:07:8f:44:f2:af:c4:1a:d1:66:
                    a7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A8:AA:DE:D2:B8:95:34:4B:69:2A:8A:8A:60:FE:6D:48:94:29:1E
            X509v3 Authority Key Identifier:
                keyid:31:8A:31:E0:F9:B2:FD:58:4D:99:4E:84:8E:7E:81:7C:CC:91:52:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a3130303a3a2f34302d3430203d3e20323039313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f613:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:b9:c3:5e:d7:9a:3d:94:65:2e:d6:13:e4:ec:bd:d8:1d:fe:
         e9:19:c4:bb:fd:74:53:c2:fd:eb:0a:97:09:80:be:80:89:47:
         e1:d8:99:42:f8:7f:ac:91:6b:9f:a5:e8:97:77:fd:b4:de:2e:
         92:38:13:06:59:db:47:d8:3b:dd:97:11:02:4b:d9:cc:4c:d1:
         33:71:d9:76:ce:1d:12:7c:c7:95:ac:5c:4c:8b:f2:80:a1:b0:
         25:ef:d0:8f:e9:1e:88:1a:3f:fc:4c:f0:3b:2e:27:87:04:54:
         15:85:3a:89:a6:c6:9d:74:7d:3e:cc:88:0a:b7:c3:8b:8e:08:
         aa:4a:ef:6d:45:07:7a:b7:b8:ae:7e:65:33:f8:07:00:8e:6c:
         28:6a:3b:f6:10:b0:e8:7e:22:7a:84:54:76:d6:b2:9a:e1:6d:
         10:05:cc:8f:46:ff:8e:77:45:a8:6d:5c:4d:ea:97:33:c0:f0:
         08:3f:ac:8e:01:3c:30:45:b1:1d:02:b4:ec:bc:09:18:f5:d6:
         af:e6:9d:f4:c0:a7:73:09:33:ce:58:ea:30:2f:6f:b4:29:57:
         97:ef:88:e3:48:56:be:55:54:b9:98:e5:22:40:27:68:37:c6:
         4a:78:83:e4:f6:57:00:50:75:7b:50:8b:31:c9:bf:43:18:31:
         10:47:44:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:13:59 2025 by rpki-client