Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32343a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a32343a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          eWVxkJxkvsrE/hcLxIiVauZba4bVdQLfKn+taS5nis4=
Subject key identifier:   D9:D7:22:7E:60:EF:EE:06:6D:38:C8:9B:54:6E:4E:75:46:E6:C9:6C
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       6017D82389539AE72F7BB9D2F6D7BB5654F2DFD6
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32343a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 25 Sep 2025 21:45:12 +0000
ROA not before:           Thu 25 Sep 2025 21:40:12 +0000
ROA not after:            Thu 24 Sep 2026 21:45:12 +0000
asID:                     54148
IP address blocks:        2602:fa43:24::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:17:d8:23:89:53:9a:e7:2f:7b:b9:d2:f6:d7:bb:56:54:f2:df:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Sep 25 21:40:12 2025 GMT
            Not After : Sep 24 21:45:12 2026 GMT
        Subject: CN=D9D7227E60EFEE066D38C89B546E4E7546E6C96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:f1:e2:41:21:10:51:64:51:d2:79:84:1a:
                    96:2e:ad:c4:03:0d:f5:48:55:19:c7:04:7b:7b:90:
                    22:fb:d5:41:8b:ca:03:69:11:fd:96:15:64:94:fe:
                    29:d7:0f:30:c6:ae:93:fe:23:da:7f:55:53:e4:2c:
                    7c:a5:00:74:6a:69:5c:ea:3f:36:bf:5b:e2:73:81:
                    e7:9a:2d:1a:8e:e5:5f:bd:63:2f:25:f3:25:c1:b5:
                    1e:be:bd:e6:49:21:cb:e6:0d:cc:74:5e:07:13:47:
                    25:60:3c:92:01:28:22:e2:5f:3e:57:12:61:19:06:
                    43:7a:55:dd:8d:ea:b2:21:ce:4b:90:8c:c2:df:fb:
                    ba:e1:9a:b7:78:59:00:a4:3a:1f:41:66:2d:77:27:
                    0b:70:7d:5a:62:51:a3:d5:98:a4:f3:68:06:c7:9f:
                    ef:a5:32:6d:36:e7:64:30:f7:af:e7:24:ec:4e:1e:
                    fb:61:ca:3b:0e:9f:1b:eb:23:e7:48:c4:40:c7:5c:
                    ea:5b:b2:85:9d:51:1a:78:cf:42:ff:08:f2:6c:fe:
                    64:09:29:b5:7f:0e:2a:8d:a7:1e:88:68:2e:cb:f3:
                    db:e1:fd:a4:0e:26:94:c1:f6:70:bd:63:85:24:f8:
                    3f:db:84:a8:be:27:ea:26:db:30:d1:bc:51:46:49:
                    21:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D7:22:7E:60:EF:EE:06:6D:38:C8:9B:54:6E:4E:75:46:E6:C9:6C
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32343a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:24::/46

    Signature Algorithm: sha256WithRSAEncryption
         44:09:a7:3e:c5:49:1c:1e:8b:ca:d5:2b:f3:39:cb:f6:9d:c0:
         89:52:20:47:67:e6:e0:43:c3:58:a6:98:b0:ab:c2:d7:71:6c:
         ff:15:a1:32:70:86:a3:83:6c:91:a5:e9:89:2f:fa:3f:8d:09:
         84:e6:9e:73:35:da:6d:f6:f8:0b:93:2f:d7:73:c3:54:fb:3a:
         64:d8:29:0b:eb:13:a5:a0:47:f5:8d:37:2b:c3:ac:33:b3:58:
         c0:a7:3c:5a:6c:e9:c9:58:ad:c1:4d:ba:a3:21:82:24:3f:d7:
         cd:8e:5d:e6:d1:51:bf:47:f0:19:79:a2:1f:8e:91:b5:f6:14:
         3a:d8:b0:c3:6d:21:04:12:25:98:dc:e3:18:96:b2:98:42:12:
         b6:47:4b:47:51:99:97:42:91:23:30:ae:82:e0:36:1a:df:f3:
         2e:41:2e:65:5a:97:2d:fc:ee:f0:73:94:65:53:60:02:16:fd:
         53:91:52:36:f2:b9:50:53:9f:fe:0e:71:ed:28:68:c1:fc:bc:
         8d:fd:ca:75:fe:d2:71:ee:77:9a:e8:c9:9f:e9:01:d7:7c:48:
         b5:f4:d4:25:53:5f:e4:ce:ee:de:11:62:6f:35:18:44:a8:29:
         e2:32:1f:20:9e:00:56:a4:db:a6:86:59:f9:fb:2a:b7:e8:69:
         1a:12:67:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:27 2025 by rpki-client