Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a3a2f33362d3438203d3e203134343437.roa
File:                     323630323a663631333a3a2f33362d3438203d3e203134343437.roa (raw, json)
Hash identifier:          eBLBQGY9ZzynVd2q0736Tj+Qe3PFxhwoGxrUcoeRT1Q=
Subject key identifier:   5F:78:25:D3:41:92:93:A1:77:51:E1:B0:26:D7:BB:9E:9A:8B:98:6C
Certificate issuer:       /CN=5d9371e706db917120354ce162e131307448d445d3bda534e4
Certificate serial:       5E8C157DC7888D98EAD93D8C2AC3443ACB9FFA5E
Authority key identifier: 31:8A:31:E0:F9:B2:FD:58:4D:99:4E:84:8E:7E:81:7C:CC:91:52:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a3a2f33362d3438203d3e203134343437.roa
Signing time:             Wed 18 Jun 2025 18:04:14 +0000
ROA not before:           Wed 18 Jun 2025 17:59:14 +0000
ROA not after:            Wed 17 Jun 2026 18:04:14 +0000
asID:                     14447
IP address blocks:        2602:f613::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/15838c48-cf11-45c4-8e0b-0455f2640cd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/15838c48-cf11-45c4-8e0b-0455f2640cd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 09:09:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8c:15:7d:c7:88:8d:98:ea:d9:3d:8c:2a:c3:44:3a:cb:9f:fa:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9371e706db917120354ce162e131307448d445d3bda534e4
        Validity
            Not Before: Jun 18 17:59:14 2025 GMT
            Not After : Jun 17 18:04:14 2026 GMT
        Subject: CN=5F7825D3419293A17751E1B026D7BB9E9A8B986C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:18:73:c5:03:21:2e:ce:e2:ca:35:5c:4c:48:
                    b4:cf:66:67:e5:82:43:68:16:0b:0e:70:74:bd:e7:
                    49:8e:e1:a9:84:de:c9:2a:84:4f:10:60:d5:e1:f0:
                    95:3e:f1:10:1f:62:4d:ea:59:2c:04:91:b1:3c:5a:
                    9b:26:70:52:f1:d5:74:91:dd:15:5b:14:bc:3a:60:
                    0e:9e:d6:1c:a7:89:64:15:81:36:c5:98:3b:5d:80:
                    98:fe:4d:f3:2e:61:b5:c6:a9:ab:5d:b5:ca:5f:d9:
                    0a:63:73:98:55:4b:48:02:63:5e:0f:02:bd:73:c1:
                    0c:09:88:f4:d7:65:26:0b:01:5d:6a:48:69:19:1b:
                    3e:8f:37:7a:5c:10:a4:cb:46:86:d4:a4:cd:47:96:
                    bc:58:f7:60:5c:7e:55:a2:6d:95:1b:22:7b:3f:ad:
                    0b:d3:af:28:b1:a6:61:d3:b2:6b:aa:9a:be:f3:7b:
                    01:1b:a3:54:f5:da:d7:53:f2:7e:c0:26:2e:d4:6c:
                    e5:22:fb:3b:58:e3:43:7b:58:c3:8c:17:4c:fd:3d:
                    68:b4:75:d2:ec:fa:f5:cb:ac:a6:af:cf:24:bb:7b:
                    2f:0f:2d:87:fe:da:ea:7d:fe:98:b7:c2:20:12:1a:
                    90:9b:bb:b4:40:9e:a0:6d:79:4e:09:4b:c6:fc:af:
                    9c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:78:25:D3:41:92:93:A1:77:51:E1:B0:26:D7:BB:9E:9A:8B:98:6C
            X509v3 Authority Key Identifier:
                keyid:31:8A:31:E0:F9:B2:FD:58:4D:99:4E:84:8E:7E:81:7C:CC:91:52:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a3a2f33362d3438203d3e203134343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f613::/36

    Signature Algorithm: sha256WithRSAEncryption
         56:c9:2a:13:b7:cf:7c:f2:75:ba:a3:1e:1d:84:c6:46:9d:cf:
         5a:b5:0f:6d:8a:69:4b:33:28:92:85:48:fb:c1:e4:86:68:e9:
         53:c7:d0:e0:2f:6c:ee:43:b1:c4:4e:bb:12:79:dc:31:93:dd:
         10:ae:e1:a0:8f:5e:7d:1f:18:8d:e8:70:bc:1a:44:83:90:0a:
         09:42:15:f4:6b:6f:00:25:5c:b5:ed:6e:4a:3a:ea:e6:7d:19:
         05:42:ae:36:9b:b9:97:70:16:82:01:e1:89:7f:1e:03:f8:d2:
         ee:06:00:0e:ce:b4:e1:8b:fc:9c:82:dd:f5:46:7e:e4:f6:d4:
         2e:d1:7a:f6:9e:09:6d:d7:c2:02:cd:20:c2:4f:1c:47:36:40:
         4f:e5:00:b5:b1:03:1f:e4:08:11:26:88:e3:1a:83:bc:06:ca:
         8e:1d:32:19:ac:8f:0b:89:7b:f1:f8:73:80:74:c5:d9:cb:d5:
         25:10:60:00:a0:ed:83:35:93:8b:c0:75:e0:5a:2b:5b:b9:01:
         6c:b1:df:38:22:8a:74:75:63:fb:29:dc:a7:e7:9b:8e:06:ca:
         b9:e2:ca:51:70:0f:54:1c:14:1d:d3:72:71:53:03:71:82:df:
         76:40:27:42:99:4e:3f:48:d4:f7:6c:e1:84:de:2b:d6:96:46:
         9f:d3:68:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:51:46 2025 by rpki-client