Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a31313a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a31313a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          egvTZ0kTlj9jYpL4OPEO1LqytVCSBwQHr91ZUgKfGrg=
Subject key identifier:   57:9F:07:2E:1A:DA:61:6A:AC:98:74:67:1E:4B:92:44:F2:EB:EF:A9
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       15610F88CCBC180C527F048B782F68A2D796CA38
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a31313a3a2f34382d3438203d3e203534313438.roa
Signing time:             Thu 25 Sep 2025 21:45:13 +0000
ROA not before:           Thu 25 Sep 2025 21:40:13 +0000
ROA not after:            Thu 24 Sep 2026 21:45:13 +0000
asID:                     54148
IP address blocks:        2602:fa43:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:61:0f:88:cc:bc:18:0c:52:7f:04:8b:78:2f:68:a2:d7:96:ca:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Sep 25 21:40:13 2025 GMT
            Not After : Sep 24 21:45:13 2026 GMT
        Subject: CN=579F072E1ADA616AAC9874671E4B9244F2EBEFA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:8d:7d:b6:d6:c6:17:ce:8b:70:0f:4d:29:
                    0f:0b:31:31:1f:fb:e8:5e:8d:cd:1e:43:7c:b6:c2:
                    a3:aa:13:6c:80:e0:af:44:dc:dd:d6:2b:93:9e:51:
                    df:32:77:8a:80:00:60:8d:83:c4:20:f9:d0:54:00:
                    39:8c:6c:0e:c6:ff:98:b9:d7:d3:20:47:54:f1:4e:
                    f0:98:ea:c5:fe:4d:31:10:a2:22:f1:fd:5a:02:06:
                    ce:28:5f:d8:f6:72:12:b5:10:84:06:38:08:c8:e6:
                    fe:9d:aa:d6:09:1c:8a:a2:0d:bd:7f:2b:58:53:32:
                    35:f6:af:94:31:17:4c:1f:51:98:6b:ab:26:7f:a5:
                    97:dc:64:d4:84:b6:45:8a:60:7c:af:a4:33:62:81:
                    f8:7e:0f:bc:93:91:db:dd:70:23:98:2f:88:16:ea:
                    c9:c0:21:3d:70:7d:cc:7f:aa:c4:77:e7:ca:32:bb:
                    b4:e6:89:ab:99:cc:ce:ea:8b:aa:c4:42:1c:19:e4:
                    8c:58:e5:e6:39:fd:d6:ea:7e:2c:2c:93:95:27:65:
                    c3:00:7e:92:bf:42:df:4c:49:ff:3d:f8:c3:05:dd:
                    08:8c:9a:6d:61:11:c9:69:b5:df:2b:10:48:9c:13:
                    f3:63:90:1a:9d:be:6a:4e:60:9c:70:75:54:cf:ea:
                    5c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9F:07:2E:1A:DA:61:6A:AC:98:74:67:1E:4B:92:44:F2:EB:EF:A9
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a31313a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:f0:99:57:2a:a8:46:c2:4f:2f:60:56:60:0e:cf:12:57:49:
         b3:b7:a8:e9:33:ae:cf:d8:bc:ab:f2:c8:de:95:00:2d:f5:68:
         2e:da:67:8c:05:81:4d:13:73:6d:93:33:b7:a5:b8:c6:57:59:
         47:21:ce:f1:aa:18:cf:10:49:ac:7f:32:49:b4:9e:48:10:fc:
         9e:2a:3d:4b:41:fd:27:64:66:bd:2c:2e:6b:5a:81:e8:01:aa:
         64:38:86:bc:e4:c3:2f:f5:88:af:a9:23:3c:03:36:e1:a9:45:
         cb:b7:41:a0:f9:99:b7:d6:92:82:dd:b2:1a:10:e2:18:66:a5:
         dc:17:ef:e8:0b:01:58:27:6f:f7:bd:8f:66:5e:12:c4:d9:71:
         62:45:1b:0b:a6:a7:ea:11:ef:4a:26:8d:56:5c:b9:e0:88:3d:
         a1:c1:91:bc:72:51:94:95:a6:e6:f9:a9:70:4a:e2:35:ac:d4:
         0e:56:93:a9:39:85:c2:97:1c:aa:e1:d3:de:3a:24:25:94:d7:
         9e:ae:71:8a:8f:09:5a:bc:85:78:45:58:ac:e4:a6:ab:0f:59:
         f5:7c:d5:28:91:ec:b6:e5:c8:bb:44:24:bf:3c:b6:c6:d8:4f:
         23:96:49:d1:5f:79:33:0b:10:fd:20:14:38:df:2e:46:16:0c:
         2e:0f:96:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:19:00 2025 by rpki-client