Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38323a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a38323a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          iDhZHM2FjD1ksaMLu94zff9k7a59lrbZOclpD7V31pU=
Subject key identifier:   56:A8:53:6D:3F:AA:20:C8:86:BF:C6:87:C0:E7:66:80:0F:2F:FE:90
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       5C4E61A8377C118AB90734685788AB9DD8236173
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38323a3a2f34382d3438203d3e203534313438.roa
Signing time:             Thu 25 Sep 2025 21:45:11 +0000
ROA not before:           Thu 25 Sep 2025 21:40:11 +0000
ROA not after:            Thu 24 Sep 2026 21:45:11 +0000
asID:                     54148
IP address blocks:        2602:fa43:82::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4e:61:a8:37:7c:11:8a:b9:07:34:68:57:88:ab:9d:d8:23:61:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Sep 25 21:40:11 2025 GMT
            Not After : Sep 24 21:45:11 2026 GMT
        Subject: CN=56A8536D3FAA20C886BFC687C0E766800F2FFE90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:03:a0:2a:21:a8:e5:c1:c4:5b:5c:47:97:70:
                    72:03:5f:e1:33:4b:fa:a4:42:2f:33:54:15:82:9d:
                    2d:ba:a3:ae:17:b4:7d:a0:53:51:a8:77:04:32:85:
                    57:6b:1b:dd:d8:96:2b:94:4a:77:15:58:02:16:44:
                    b0:fe:39:ac:cc:e5:8a:c4:52:3c:aa:c7:88:29:ac:
                    56:49:85:f7:4b:9e:a0:ce:cf:81:f5:dd:d9:24:eb:
                    33:3a:08:45:54:f9:ec:34:af:e1:e3:20:c4:46:0e:
                    0e:3f:95:74:76:d4:d5:0a:0f:4e:34:cb:7f:74:75:
                    8c:19:0c:78:f6:2d:d8:ce:d4:29:bc:cc:cb:e3:8e:
                    6b:37:e7:bc:05:fa:44:59:7d:20:42:6a:d0:ae:da:
                    e9:04:ba:80:31:ea:52:d0:e6:44:b5:15:eb:d4:7a:
                    f7:a0:6a:92:23:ea:ce:46:6d:0d:ee:74:9a:e0:50:
                    70:56:14:09:40:29:c6:e9:2e:97:2d:3e:30:ab:6c:
                    cb:69:a7:4f:45:a0:58:c3:00:21:33:d7:2a:95:5a:
                    44:6f:c9:60:ca:e8:4f:5e:38:30:4a:6a:6a:aa:3b:
                    e0:a3:55:16:0e:d3:5f:94:10:ac:4d:68:53:7f:2e:
                    e1:06:62:ed:73:52:65:cb:22:c4:1c:3f:1e:16:a0:
                    b2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A8:53:6D:3F:AA:20:C8:86:BF:C6:87:C0:E7:66:80:0F:2F:FE:90
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38323a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:82::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:06:6d:03:4e:79:84:a1:ba:5f:63:01:4b:c5:90:f0:5a:b4:
         05:c7:7c:ed:e8:f3:ad:04:9f:99:ed:0b:e3:eb:e4:85:e7:d1:
         56:71:dc:ef:7c:e0:90:af:05:8e:ae:d6:cf:fe:98:08:b9:ab:
         40:ec:72:40:c3:6e:d1:ec:d2:3f:dd:6c:70:b1:86:40:07:39:
         a4:73:45:d3:3f:f7:05:35:44:b2:a1:1b:a8:9d:b7:2d:f1:60:
         e8:bf:1a:73:7b:4e:33:0d:59:30:ce:fd:ed:68:3a:1a:91:f3:
         93:b0:88:04:d5:e4:11:0c:89:de:c1:95:d3:21:56:a9:f8:c7:
         a5:57:b3:c7:65:fb:56:0c:36:15:4f:8e:6f:42:4c:8e:2d:21:
         33:24:74:54:ec:4a:58:f3:aa:5c:fa:e0:e0:90:01:a6:df:46:
         53:2d:60:eb:80:f6:54:7d:da:a3:13:64:37:a4:a9:9a:d3:91:
         d3:80:39:ca:fb:df:97:e0:0a:45:18:3d:9d:fe:12:25:3c:68:
         2c:72:f7:53:e6:e5:95:a4:d2:bd:14:9c:99:f9:ab:5e:48:71:
         85:3b:ff:55:d3:b9:a6:3c:07:db:39:47:e7:ce:14:58:63:9b:
         e4:15:4b:51:7b:0f:e3:0c:65:4d:54:44:a1:cb:37:fa:a7:9a:
         46:f5:42:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:06 2025 by rpki-client