Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a66363a3a2f34382d3438203d3e20323135333634.roa
File:                     323630323a663631333a66363a3a2f34382d3438203d3e20323135333634.roa (raw, json)
Hash identifier:          mDUpXDoP3VBkRZPrPY0pREjD88Pixr6WzivjQOzjCSs=
Subject key identifier:   4B:67:62:90:E3:9A:3F:30:00:98:0B:55:CD:45:6F:4F:3D:DC:26:EB
Certificate issuer:       /CN=5d9371e706db917120354ce162e131307448d445d3bda534e4
Certificate serial:       65D8FEF7D4FDF2F668D60A66D0F678978F9AA951
Authority key identifier: 31:8A:31:E0:F9:B2:FD:58:4D:99:4E:84:8E:7E:81:7C:CC:91:52:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a66363a3a2f34382d3438203d3e20323135333634.roa
Signing time:             Tue 24 Jun 2025 08:38:39 +0000
ROA not before:           Tue 24 Jun 2025 08:33:39 +0000
ROA not after:            Tue 23 Jun 2026 08:38:39 +0000
asID:                     215364
IP address blocks:        2602:f613:f6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/15838c48-cf11-45c4-8e0b-0455f2640cd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/15838c48-cf11-45c4-8e0b-0455f2640cd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 23:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d8:fe:f7:d4:fd:f2:f6:68:d6:0a:66:d0:f6:78:97:8f:9a:a9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9371e706db917120354ce162e131307448d445d3bda534e4
        Validity
            Not Before: Jun 24 08:33:39 2025 GMT
            Not After : Jun 23 08:38:39 2026 GMT
        Subject: CN=4B676290E39A3F3000980B55CD456F4F3DDC26EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:2b:a5:86:fb:28:1a:2e:18:80:db:42:4e:
                    45:8a:8d:bc:e4:7e:e7:fc:e2:26:ae:77:fc:48:2c:
                    fc:49:67:61:9f:9a:26:b7:6f:ff:c3:50:5d:1e:75:
                    88:8f:2f:64:5d:7c:92:6c:1a:b0:da:0d:ac:88:0e:
                    07:6a:6b:bf:bd:85:43:61:b7:e8:0a:1a:f8:41:ab:
                    f1:ca:62:a2:9f:3b:5e:df:0a:68:64:d9:a2:e2:72:
                    c9:05:0a:32:f2:74:ea:09:fa:cc:65:07:de:09:30:
                    9e:bf:0e:3a:a9:b1:60:cc:27:ac:5a:9a:bd:99:4f:
                    70:1f:0b:3d:4a:89:b4:35:af:9d:72:50:8b:03:86:
                    96:2e:17:d1:a4:05:29:5f:53:fa:ff:bb:89:a9:b9:
                    bf:b6:04:c7:a5:dd:44:f3:12:67:42:bf:d1:b0:44:
                    d1:4c:85:66:83:bb:a3:85:7a:ca:e6:e2:b2:0c:f2:
                    32:a5:4d:c0:73:3b:27:ea:a9:1a:ea:03:40:4d:41:
                    ae:fb:83:ad:41:b4:c7:4a:1b:69:33:3c:ca:57:7f:
                    16:97:45:2d:78:b8:c0:52:e1:bd:ed:5d:c5:11:3d:
                    f0:6c:4b:a9:1e:e3:b3:60:31:5c:07:6d:93:5a:cc:
                    37:d6:42:6e:f3:0f:b0:89:3d:28:6e:ab:bd:64:62:
                    d5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:67:62:90:E3:9A:3F:30:00:98:0B:55:CD:45:6F:4F:3D:DC:26:EB
            X509v3 Authority Key Identifier:
                keyid:31:8A:31:E0:F9:B2:FD:58:4D:99:4E:84:8E:7E:81:7C:CC:91:52:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a66363a3a2f34382d3438203d3e20323135333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f613:f6::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:83:6b:30:92:3e:b3:44:ec:8f:02:b0:63:96:c1:e0:79:39:
         7c:3b:f0:97:6e:ad:51:2d:ba:e4:98:34:a7:9e:bd:ac:d6:b4:
         1f:44:f3:43:f3:e8:7e:88:74:ad:23:b8:03:60:5b:ea:6a:07:
         d4:fe:43:d5:31:8a:4a:f5:6f:52:e5:22:d7:9e:db:3c:72:16:
         12:ce:c6:4d:9f:e1:2d:14:f2:5a:d6:88:f9:ca:db:65:b5:aa:
         a3:5e:40:57:86:6d:4d:a8:26:dc:f5:52:1f:59:52:ae:db:26:
         4a:dc:25:e8:2f:49:cb:49:58:ff:51:49:ef:01:df:e0:0f:6d:
         c6:2b:e9:bf:a8:a0:80:7b:0d:d8:ff:83:1d:cc:bd:65:ee:d6:
         f8:fb:f8:59:ef:3b:bc:8a:bf:82:1a:0d:5f:e7:44:90:b7:80:
         7b:07:19:81:64:65:d0:52:6c:58:c3:a8:26:e2:f1:b5:15:09:
         3f:47:41:2c:1b:07:38:9e:09:65:d4:0b:18:58:45:f9:4a:0d:
         e6:f0:20:db:a2:b1:28:38:2b:05:34:e2:fc:35:2a:ca:5b:01:
         bf:ed:0c:84:ff:5a:f4:b8:8b:a2:7c:a3:27:b9:7c:fd:5e:4b:
         3e:02:06:9f:71:63:1c:2e:10:ed:91:d3:20:eb:8a:ff:2e:57:
         7c:f9:2d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:35:45 2025 by rpki-client