Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38333a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a38333a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          gujjx4HxKm/Q1twcOuBhu2FvrmJ48HKayVcz+8ihD30=
Subject key identifier:   8F:B1:5C:AF:90:4D:1D:72:20:6F:65:EB:66:94:D2:FB:C3:B7:D3:97
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       0AC4F21FD80EEECB0F35240147075DA5006CFF5C
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38333a3a2f34382d3438203d3e203534313438.roa
Signing time:             Mon 18 Aug 2025 06:44:17 +0000
ROA not before:           Mon 18 Aug 2025 06:39:17 +0000
ROA not after:            Mon 17 Aug 2026 06:44:17 +0000
asID:                     54148
IP address blocks:        2602:fa43:83::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:54:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c4:f2:1f:d8:0e:ee:cb:0f:35:24:01:47:07:5d:a5:00:6c:ff:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Aug 18 06:39:17 2025 GMT
            Not After : Aug 17 06:44:17 2026 GMT
        Subject: CN=8FB15CAF904D1D72206F65EB6694D2FBC3B7D397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:06:54:c5:8f:d3:6b:05:b1:8a:19:0d:5e:ba:
                    7f:12:00:08:bc:69:f6:b6:fe:59:f4:e4:3b:2b:73:
                    7f:68:09:a4:23:b8:b5:4d:64:f9:71:b8:71:68:f4:
                    11:ed:76:ec:e2:d5:bf:33:97:4b:73:a3:bf:8c:92:
                    bc:c1:1b:89:22:43:35:c1:29:e4:b9:23:81:b8:d3:
                    09:0a:42:36:19:96:72:69:f7:36:a1:14:a6:41:66:
                    c8:8c:81:b8:50:88:06:66:d3:60:17:e5:ee:79:54:
                    0f:81:01:0d:de:d3:68:f8:6b:e3:4c:2f:fa:dc:5d:
                    8a:b8:d4:04:41:d6:42:7a:be:56:4e:a9:71:08:d5:
                    46:00:eb:ec:bd:13:7a:48:b9:c3:63:4d:42:36:e5:
                    52:c3:fa:79:5a:9d:ab:9c:88:d3:a5:74:22:32:6a:
                    3d:68:aa:af:46:67:b4:f0:71:dc:93:24:38:34:b0:
                    e6:ba:e3:c3:c6:06:6c:3a:cd:a8:ea:d6:fe:66:c1:
                    78:0f:5e:c5:01:65:76:0e:85:9f:7f:24:1a:e6:84:
                    eb:fc:68:13:22:7d:e8:26:33:f8:66:d3:7c:a6:ba:
                    9c:8d:42:76:f0:df:fe:f2:9d:4c:8d:5a:ba:7b:f4:
                    c6:bf:1b:e7:1b:d4:c4:72:a5:1c:1d:73:ba:39:60:
                    37:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B1:5C:AF:90:4D:1D:72:20:6F:65:EB:66:94:D2:FB:C3:B7:D3:97
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38333a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:83::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:7a:34:d0:40:30:91:ed:59:c3:e7:63:60:22:ea:bc:83:ed:
         e0:0d:b7:d0:2c:df:74:57:f6:ed:51:34:6e:78:65:9c:ba:80:
         c4:1a:87:40:f3:9a:70:1f:91:c9:54:3b:20:10:27:3d:04:ef:
         e0:ae:42:f2:0c:01:7e:0e:6d:a5:e8:e4:0e:6d:10:af:9d:54:
         68:8c:f1:3a:9d:b7:64:64:9a:37:f9:6a:4f:68:5c:a7:d8:1c:
         90:96:f3:ba:3f:9e:3d:39:71:6c:f1:76:68:b3:16:be:78:7a:
         26:75:c6:fc:23:7d:5e:81:09:b0:d9:f9:e6:25:49:e8:98:01:
         25:22:1b:85:e7:31:0d:cb:d5:42:0c:e5:88:b1:fe:e5:d7:8a:
         2a:12:54:5f:e8:38:d4:54:2b:1e:44:39:98:0f:37:bb:ce:b5:
         e7:4f:ff:bc:84:31:f1:27:2d:39:1b:a9:b8:b5:2c:bb:75:c9:
         78:53:00:46:22:7e:4f:0a:5f:ed:e4:90:a8:d4:20:79:c2:91:
         c5:db:f2:34:df:17:de:fd:f0:43:46:ad:36:fb:3c:57:e1:cb:
         1e:2c:25:5a:51:7c:2a:ea:3b:de:88:c4:80:e2:00:e2:8f:30:
         fe:64:4d:a0:0e:f0:f8:bd:3f:17:b3:54:8c:d6:88:4f:77:7d:
         ee:eb:7f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:14:59 2025 by rpki-client