Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a31323a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a31323a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          MCHf/I2jRpH+QYqdlxflRCn/mx3RuZs5I1J2ldeVTR0=
Subject key identifier:   41:5C:54:36:5E:F4:74:07:6B:F1:B2:21:F5:C6:1D:BC:9D:C6:C1:15
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       76E65048AD295201253F7C68B5CCF0104182FA97
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a31323a3a2f34382d3438203d3e203534313438.roa
Signing time:             Thu 25 Sep 2025 21:45:11 +0000
ROA not before:           Thu 25 Sep 2025 21:40:11 +0000
ROA not after:            Thu 24 Sep 2026 21:45:11 +0000
asID:                     54148
IP address blocks:        2602:fa43:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e6:50:48:ad:29:52:01:25:3f:7c:68:b5:cc:f0:10:41:82:fa:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Sep 25 21:40:11 2025 GMT
            Not After : Sep 24 21:45:11 2026 GMT
        Subject: CN=415C54365EF474076BF1B221F5C61DBC9DC6C115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:29:73:62:cf:de:1a:0b:84:b2:0e:3f:64:3f:
                    fb:d1:b6:2e:11:07:82:59:87:6c:a9:70:6b:b5:76:
                    73:49:11:b3:89:fe:d5:37:1a:da:4d:8a:83:17:10:
                    b5:ef:49:b3:73:bc:94:67:c5:fa:7a:53:bf:ff:04:
                    65:a4:b4:8e:40:7d:03:08:73:4f:6b:ec:a0:70:b2:
                    ad:71:8f:6c:db:ac:cb:ea:4d:21:89:a3:17:0f:60:
                    49:ed:65:57:a8:55:1f:f1:8b:5b:63:de:db:1d:c1:
                    63:e4:a9:d5:09:f5:30:1b:d5:6e:56:95:04:dc:38:
                    f0:24:6a:19:09:22:be:ab:bc:9b:db:48:00:8d:40:
                    1e:4d:4d:41:82:1f:59:01:4d:02:de:64:74:cc:43:
                    a3:ab:1a:96:b5:ea:e6:5c:76:a5:db:2a:1b:7e:31:
                    7d:d2:55:ff:2c:1a:f1:88:b1:a5:c9:ce:e6:1a:fb:
                    50:c9:c6:25:f0:3e:34:65:ba:d3:b5:63:0e:a7:02:
                    a0:92:e1:5b:78:0d:50:98:74:5c:25:16:29:67:87:
                    63:62:89:ab:05:95:08:8b:0b:06:a0:ef:57:15:49:
                    3d:b2:2f:cc:d9:42:45:d0:f8:8a:4b:ec:3b:d4:f4:
                    e2:dd:8f:13:5d:f2:37:98:2b:6e:bf:73:30:1c:a2:
                    05:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5C:54:36:5E:F4:74:07:6B:F1:B2:21:F5:C6:1D:BC:9D:C6:C1:15
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a31323a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:bf:d4:31:91:f6:02:be:e9:ea:e9:ba:78:d3:ca:86:0e:dd:
         68:7e:3e:67:86:d2:b9:b0:49:50:4d:f6:37:a4:ca:6e:99:29:
         f7:04:20:3f:99:2a:14:25:a7:9e:48:e4:01:d7:d1:30:10:31:
         d9:c6:f6:fd:ea:5b:19:5a:2b:f1:56:7e:cf:b7:7d:48:11:17:
         f1:44:e9:46:7a:de:5a:ac:3d:1b:9e:a1:a0:b8:5c:50:1a:0a:
         80:93:a8:0e:e5:b5:0c:a8:06:1f:23:76:c5:09:0c:c6:53:ef:
         eb:52:32:c7:3a:db:b6:62:8d:d4:a9:0d:4f:72:ba:04:55:98:
         9c:8a:63:d0:81:93:72:01:e9:16:85:bf:c6:52:63:a5:36:af:
         e2:dc:94:c8:da:fa:d0:f7:e1:69:72:49:da:e6:ca:ab:83:20:
         09:52:73:fc:19:0c:ab:0e:5d:c6:4b:ac:7f:a5:cf:e2:5b:64:
         6d:1a:e5:fb:c7:45:7e:79:23:10:d6:cb:ca:62:b1:ea:db:13:
         0a:6c:1a:d3:6e:5e:8f:61:d0:9d:55:0a:16:99:93:5e:5e:fa:
         31:74:1e:a8:49:90:84:70:a5:04:8b:ba:c7:65:a5:41:a6:fd:
         b1:5d:fa:6c:47:b4:42:1c:77:97:b6:48:c1:de:94:aa:4b:21:
         08:99:d7:5b
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUduZQSK0pUgElP3xotczwEEGC+pcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2VjYWUzMjA0OTUyZGE3NGViMWI5MzcxNGI2N2NjNjFi
YzRmN2IxNTk1YTIxMzI3ODgwHhcNMjUwOTI1MjE0MDExWhcNMjYwOTI0MjE0NTEx
WjAzMTEwLwYDVQQDEyg0MTVDNTQzNjVFRjQ3NDA3NkJGMUIyMjFGNUM2MURCQzlE
QzZDMTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnClzYs/eGguE
sg4/ZD/70bYuEQeCWYdsqXBrtXZzSRGzif7VNxraTYqDFxC170mzc7yUZ8X6elO/
/wRlpLSOQH0DCHNPa+ygcLKtcY9s26zL6k0hiaMXD2BJ7WVXqFUf8YtbY97bHcFj
5KnVCfUwG9VuVpUE3DjwJGoZCSK+q7yb20gAjUAeTU1Bgh9ZAU0C3mR0zEOjqxqW
termXHal2yobfjF90lX/LBrxiLGlyc7mGvtQycYl8D40ZbrTtWMOpwKgkuFbeA1Q
mHRcJRYpZ4djYomrBZUIiwsGoO9XFUk9si/M2UJF0PiKS+w71PTi3Y8TXfI3mCtu
v3MwHKIFDwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFEFcVDZe9HQHa/GyIfXGHbyd
xsEVMB8GA1UdIwQYMBaAFARA7JGuBOgEkb9mFzYJfzVpx9sbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyYmFjYjdhYmI3YTI4LzMv
MDQ0MEVDOTFBRTA0RTgwNDkxQkY2NjE3MzYwOTdGMzU2OUM3REIxQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiL2VlMWJkZmY4LWRiYjUtNGYwZi05OGU2LWM4ZTEzMjZiYTc5Yi83ZWNh
ZTMyMDQ5NTJkYTc0ZWIxYjkzNzE0YjY3Y2M2MWJjNGY3YjE1OTVhMjEzMjc4OC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5MmJh
Y2I3YWJiN2EyOC8zLzMyMzYzMDMyM2E2NjYxMzQzMzNhMzEzMjNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDM1MzQzMTM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvpDABIwDQYJKoZI
hvcNAQELBQADggEBAKu/1DGR9gK+6erpunjTyoYO3Wh+PmeG0rmwSVBN9jekym6Z
KfcEID+ZKhQlp55I5AHX0TAQMdnG9v3qWxlaK/FWfs+3fUgRF/FE6UZ63lqsPRue
oaC4XFAaCoCTqA7ltQyoBh8jdsUJDMZT7+tSMsc627ZijdSpDU9yugRVmJyKY9CB
k3IB6RaFv8ZSY6U2r+LclMja+tD34WlySdrmyquDIAlSc/wZDKsOXcZLrH+lz+Jb
ZG0a5fvHRX55IxDWy8piserbEwpsGtNuXo9h0J1VChaZk15e+jF0HqhJkIRwpQSL
usdlpUGm/bFd+mxHtEIcd5e2SMHelKpLIQiZ11s=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:44:13 2025 by rpki-client