Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32383a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a32383a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          mPVrPcTsyor9vH/ZbZzXfswqvs4egOaiY9IUmsnQIQU=
Subject key identifier:   57:8C:32:23:7F:B9:7B:D8:22:8B:E6:45:49:57:23:9C:74:03:57:05
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       55DB44477A2057755B15B49416E636BBE87BC33B
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32383a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 25 Sep 2025 21:45:12 +0000
ROA not before:           Thu 25 Sep 2025 21:40:12 +0000
ROA not after:            Thu 24 Sep 2026 21:45:12 +0000
asID:                     54148
IP address blocks:        2602:fa43:28::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:db:44:47:7a:20:57:75:5b:15:b4:94:16:e6:36:bb:e8:7b:c3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Sep 25 21:40:12 2025 GMT
            Not After : Sep 24 21:45:12 2026 GMT
        Subject: CN=578C32237FB97BD8228BE6454957239C74035705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:c7:20:76:82:0d:a5:3f:96:99:ea:b0:73:
                    66:de:23:46:e1:ee:84:a2:76:df:23:da:6f:75:4b:
                    e3:bd:88:3f:34:65:fd:88:b1:4c:86:21:75:a8:a7:
                    26:0c:b8:aa:04:ab:0a:de:34:88:81:2c:16:03:8f:
                    48:a7:99:76:a0:3d:91:90:57:dc:0b:c6:9f:22:56:
                    cd:33:50:c5:ae:1f:f8:53:2f:ca:52:84:df:b6:91:
                    eb:6a:71:be:93:c2:d4:2a:14:9b:a0:4c:b6:bd:71:
                    08:44:c9:87:b1:fc:3e:c5:60:74:16:f4:18:fa:6d:
                    f2:33:de:a2:0f:13:60:25:1b:be:5f:bc:97:fc:17:
                    81:ac:c1:5a:a7:79:02:74:d6:77:95:fd:d2:32:8b:
                    84:d2:c1:28:b4:3c:37:a6:6e:bd:64:6e:49:23:ce:
                    5e:a0:05:98:86:f0:90:a0:54:57:1b:18:d5:5e:18:
                    82:e8:3c:ae:9a:f9:3f:e1:14:f5:9e:c1:db:f5:93:
                    32:2f:a3:16:5b:e7:6a:ab:2a:4a:0f:49:68:9b:8a:
                    78:e3:3a:c1:ab:26:a0:13:38:47:10:ab:25:81:61:
                    5f:91:37:07:74:f0:41:7c:ba:24:55:e5:c9:ed:42:
                    64:ba:99:68:c7:96:5e:8b:ff:a4:73:c4:f1:bf:62:
                    c9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8C:32:23:7F:B9:7B:D8:22:8B:E6:45:49:57:23:9C:74:03:57:05
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32383a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:28::/46

    Signature Algorithm: sha256WithRSAEncryption
         44:f6:f7:58:eb:f3:d7:31:4a:e7:44:ed:55:a4:e4:19:91:86:
         bb:e5:65:00:66:54:d6:53:78:0c:1d:20:ad:4c:fa:52:b1:f3:
         34:70:6a:61:7f:49:a8:76:cd:21:77:1d:76:3f:d6:cb:8e:5f:
         45:9a:8a:0c:4a:88:65:63:0a:06:c8:59:43:15:39:a1:fd:dc:
         d6:59:61:82:92:7c:65:de:75:93:d0:27:0e:6d:4b:f3:31:1c:
         af:03:83:aa:a1:58:2a:82:1b:d7:42:d0:a6:a0:39:cc:1b:7e:
         88:5d:07:3b:7d:92:57:3f:3c:e0:6e:16:c0:42:02:09:b6:f2:
         a9:22:d2:04:59:59:07:91:91:7f:47:f6:32:cd:18:c2:60:bd:
         af:64:67:36:44:ac:d9:f2:8b:2b:58:1d:8d:c8:61:c5:37:b1:
         80:1f:c5:16:e0:25:36:5b:e5:84:46:e9:e1:19:f8:9b:06:3c:
         50:f2:f6:44:00:e9:83:a2:53:dc:1e:cb:81:32:b9:2c:82:94:
         98:e5:94:80:3a:c0:57:58:e6:ed:15:86:f4:61:30:c0:d4:3d:
         1a:66:db:f8:29:20:67:d8:c2:da:c0:59:0c:94:ce:74:cf:53:
         1f:93:14:a8:18:97:e9:4c:13:c0:65:65:b0:2a:54:eb:d8:ee:
         c6:b3:de:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:34:34 2025 by rpki-client