Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a32303a3a2f34342d3438203d3e20323136333234.roa
File:                     323630323a663631333a32303a3a2f34342d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          8NpOp4vp3LE88q6GyyQHYDlG77qqxaOvoVVh9XcCBAo=
Subject key identifier:   13:8E:95:D8:99:E4:C3:B3:34:26:55:6C:0C:DF:42:97:78:E0:69:5A
Certificate issuer:       /CN=5d9371e706db917120354ce162e131307448d445d3bda534e4
Certificate serial:       3C7F5BE24D6B37BD3988BB6E0D1FD42F3714775F
Authority key identifier: 31:8A:31:E0:F9:B2:FD:58:4D:99:4E:84:8E:7E:81:7C:CC:91:52:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a32303a3a2f34342d3438203d3e20323136333234.roa
Signing time:             Tue 09 Sep 2025 13:42:57 +0000
ROA not before:           Tue 09 Sep 2025 13:37:57 +0000
ROA not after:            Tue 08 Sep 2026 13:42:57 +0000
asID:                     216324
IP address blocks:        2602:f613:20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/15838c48-cf11-45c4-8e0b-0455f2640cd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/15838c48-cf11-45c4-8e0b-0455f2640cd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7f:5b:e2:4d:6b:37:bd:39:88:bb:6e:0d:1f:d4:2f:37:14:77:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9371e706db917120354ce162e131307448d445d3bda534e4
        Validity
            Not Before: Sep  9 13:37:57 2025 GMT
            Not After : Sep  8 13:42:57 2026 GMT
        Subject: CN=138E95D899E4C3B33426556C0CDF429778E0695A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:95:b2:ad:ba:eb:36:dc:4f:d5:22:e7:3d:c5:
                    5f:bc:96:5c:9f:16:4c:3b:eb:c2:33:93:e1:41:68:
                    58:db:6b:ad:b3:2f:c5:06:28:6c:fb:80:39:c0:2f:
                    a3:17:40:87:5c:0f:c6:6b:60:8e:b0:71:79:f2:be:
                    c6:2c:2f:80:84:23:be:e2:55:ea:9a:51:86:3b:86:
                    c9:04:b4:5d:3e:93:3b:59:4f:50:9b:ba:52:48:b1:
                    56:ce:e4:cc:05:11:61:5f:66:04:0f:2c:c1:c2:ee:
                    cf:a3:6d:15:35:32:b9:15:ed:84:6f:ff:79:f9:74:
                    50:9b:d3:c1:e9:43:b1:7d:85:a1:d4:b9:d0:d9:c8:
                    8c:bb:73:64:fa:81:17:fc:ff:04:7b:a9:47:3f:da:
                    b2:c1:3a:b6:03:c2:59:ed:18:15:77:ab:d8:33:03:
                    b2:d3:88:2f:21:14:4d:3d:75:08:c6:0b:bd:b0:59:
                    ed:5e:88:7f:1a:4f:8e:31:23:98:f1:02:1f:b1:7f:
                    f8:43:5a:34:ba:8b:9c:f9:ef:90:44:37:31:bd:1f:
                    e8:33:6d:0d:24:f9:a9:65:c6:3f:b8:37:f5:89:ed:
                    b3:cc:1f:35:bf:2b:d6:68:4c:73:ad:ca:49:47:f5:
                    e7:69:e6:87:d7:38:b0:96:76:d9:1d:09:a5:95:59:
                    eb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8E:95:D8:99:E4:C3:B3:34:26:55:6C:0C:DF:42:97:78:E0:69:5A
            X509v3 Authority Key Identifier:
                keyid:31:8A:31:E0:F9:B2:FD:58:4D:99:4E:84:8E:7E:81:7C:CC:91:52:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a32303a3a2f34342d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f613:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         2e:cb:8b:fb:25:79:f0:3e:70:7c:d4:ef:be:9a:71:5c:fc:0f:
         49:db:4a:9a:f5:00:d0:66:e7:3e:74:e5:7c:d0:48:d3:62:ca:
         ba:1a:61:32:55:a5:d0:a4:02:75:ee:29:cf:97:cc:58:3d:c7:
         66:af:6f:60:d9:f9:3a:df:1e:c9:e3:d0:fe:58:70:c4:6e:a4:
         ff:b3:a8:ed:6b:9c:b6:89:5d:5e:6e:70:3f:04:b7:10:7d:a0:
         99:1c:71:d4:3f:29:69:cd:4d:61:ae:4f:ce:67:02:b4:61:8d:
         e5:31:4c:f3:de:37:ba:b7:2f:70:78:2f:57:7f:a1:5f:6a:52:
         22:22:d7:fc:0e:7b:99:81:99:3c:77:b6:ae:ec:19:f9:55:d0:
         1e:e6:a0:a1:0c:ad:1d:d9:12:a8:fd:64:8d:fc:fe:e3:42:5d:
         a1:e4:8b:e8:0b:84:5f:ae:f2:74:5b:44:ef:77:80:62:92:f2:
         a6:86:7e:53:f5:be:9e:ef:06:53:d6:fc:ef:c0:27:b0:a6:09:
         2b:01:c3:f6:ad:8f:00:03:6a:22:99:d6:a9:97:09:a2:09:b1:
         92:64:36:96:40:0d:de:3a:ba:8d:77:f0:79:07:d9:c2:3f:52:
         0a:44:29:23:41:58:63:54:38:d0:ce:13:68:41:c6:e4:ab:51:
         33:b6:ba:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:01:14 2025 by rpki-client