Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38303a3a2f34342d3434203d3e203534313438.roa
File:                     323630323a666134333a38303a3a2f34342d3434203d3e203534313438.roa (raw, json)
Hash identifier:          sW3w297nuF0pxfEqFW0+59kC/NkVjCLq02zfnuoG4yg=
Subject key identifier:   BE:45:73:53:53:40:4F:4F:69:F7:88:35:80:91:3F:B4:EA:76:17:81
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       045884490ACB8B2486C7A1C9BFB052BC73410B6C
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38303a3a2f34342d3434203d3e203534313438.roa
Signing time:             Thu 25 Sep 2025 21:45:11 +0000
ROA not before:           Thu 25 Sep 2025 21:40:11 +0000
ROA not after:            Thu 24 Sep 2026 21:45:11 +0000
asID:                     54148
IP address blocks:        2602:fa43:80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:58:84:49:0a:cb:8b:24:86:c7:a1:c9:bf:b0:52:bc:73:41:0b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Sep 25 21:40:11 2025 GMT
            Not After : Sep 24 21:45:11 2026 GMT
        Subject: CN=BE45735353404F4F69F7883580913FB4EA761781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7f:de:d3:d9:69:7a:af:5c:7e:f5:41:74:bd:
                    33:df:36:91:27:65:2c:2c:a8:e5:21:60:5a:83:df:
                    fd:e7:db:6a:2e:cb:10:87:d5:ef:e3:37:f6:54:f6:
                    62:7d:bc:29:c1:fd:41:cc:7e:47:14:3e:4d:38:d1:
                    43:b6:cb:c4:05:03:59:4c:af:bf:bf:8b:7c:0b:92:
                    dd:9d:46:aa:de:62:60:df:a5:d5:11:c4:f6:82:86:
                    4e:6d:9c:2f:84:01:ad:8e:34:8b:76:bf:37:89:c7:
                    5f:5a:9d:b0:da:f4:a8:2e:a5:cd:06:9e:9f:b0:07:
                    67:13:bb:ef:0f:31:24:20:93:a5:59:74:e5:11:17:
                    ca:40:cd:03:62:66:fe:65:a0:61:28:d3:67:f9:40:
                    2b:05:24:68:fa:ec:ad:6b:0b:99:aa:61:72:d4:52:
                    2e:18:08:5d:4f:5e:fa:ad:e0:63:73:ed:d1:fd:da:
                    9c:44:72:26:34:ef:be:23:c2:50:a4:94:aa:c3:68:
                    e7:30:af:a4:d0:f5:1f:97:db:e2:4c:58:fe:c6:9b:
                    fe:a1:44:60:0d:fe:21:16:00:95:de:9c:fa:68:c9:
                    7f:71:6e:27:1b:62:be:b7:40:fd:a6:cc:44:d8:e9:
                    8a:dc:ac:42:1b:00:9c:1e:22:49:29:88:30:9c:a3:
                    4f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:45:73:53:53:40:4F:4F:69:F7:88:35:80:91:3F:B4:EA:76:17:81
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38303a3a2f34342d3434203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         90:05:b6:b4:98:53:33:74:79:69:48:60:39:db:20:be:9d:e2:
         48:42:e8:b2:39:ff:74:7c:35:60:fb:04:d7:37:60:7e:31:06:
         2f:00:53:71:48:45:e9:76:79:96:45:12:bb:45:b9:84:a9:4b:
         0f:09:07:f1:82:58:40:a9:cd:04:01:ba:7b:de:6a:ec:ed:5e:
         05:b7:18:36:34:16:6a:49:6c:b5:8e:93:50:ad:e9:8d:41:24:
         ff:4b:87:ac:b4:07:af:ec:7e:5c:ac:e1:30:16:d4:42:4d:51:
         1e:fe:23:ed:ba:40:02:cf:97:d3:60:19:80:83:f0:9c:6d:40:
         c6:b9:db:fd:0b:7b:89:97:eb:d5:74:c4:d6:17:2d:8c:5d:c1:
         d3:d3:3b:e6:f0:d9:2e:d6:d8:b1:a0:4b:8d:11:10:a7:0a:a1:
         90:9c:2d:7f:ee:6a:3e:23:0a:c1:71:50:a1:6a:f7:1d:26:bb:
         42:02:32:18:a5:ae:a2:86:0d:0c:12:ba:f2:2e:f1:01:66:1e:
         ff:1c:00:ab:d0:21:3d:a5:a3:b7:4c:ea:1d:16:e6:35:89:c8:
         57:2e:6e:7e:33:50:1e:1a:91:86:dd:22:ab:80:c8:24:e5:e3:
         24:fa:7d:90:a8:f6:bc:5b:2a:a3:a9:0f:7d:99:1e:0e:c8:dd:
         20:eb:c3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:40:28 2025 by rpki-client