Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39303a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a39303a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          mtcmeswIRq9jTervBvf8xt5Chkm9bhpxEwPieqITejs=
Subject key identifier:   A5:84:A2:55:27:B3:89:05:94:42:19:0E:E4:BF:AF:F6:D2:18:38:53
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       16FE5F85537737AA433119ACDD4D12F6011236BB
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39303a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 25 Sep 2025 21:45:13 +0000
ROA not before:           Thu 25 Sep 2025 21:40:13 +0000
ROA not after:            Thu 24 Sep 2026 21:45:13 +0000
asID:                     54148
IP address blocks:        2602:fa43:90::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:fe:5f:85:53:77:37:aa:43:31:19:ac:dd:4d:12:f6:01:12:36:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Sep 25 21:40:13 2025 GMT
            Not After : Sep 24 21:45:13 2026 GMT
        Subject: CN=A584A25527B389059442190EE4BFAFF6D2183853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:2a:45:f5:b5:14:c5:d9:a7:c7:24:89:06:
                    ea:39:ad:df:5c:df:13:57:31:0f:2f:1e:e3:e3:c1:
                    0c:bb:af:7f:dc:d3:6b:77:44:82:dc:dd:2f:e9:d4:
                    82:b8:f3:6d:c3:df:6b:bf:cf:09:f6:25:7b:af:3e:
                    65:04:d8:1e:68:fe:f8:43:e2:cf:bc:7e:13:85:11:
                    6d:0e:d0:b6:b7:8e:55:a7:33:6a:3a:86:3f:b7:0d:
                    76:7a:4a:3a:35:01:b4:00:4d:70:28:e4:ee:10:9c:
                    18:a2:25:ed:4d:5f:48:cd:89:c9:14:44:a2:9b:c7:
                    ee:a8:21:e3:25:73:df:f4:81:0e:be:03:d7:b7:e5:
                    c5:c9:64:a8:84:97:fd:7a:19:0a:43:0a:87:f3:8d:
                    07:a2:d6:68:43:74:62:e3:c2:1c:fd:52:9d:00:f8:
                    2c:95:c3:9d:22:8d:2e:dc:84:a5:5c:7a:cb:50:b7:
                    16:43:47:b5:14:83:10:1f:cd:78:19:bd:76:16:6d:
                    ff:c3:71:7b:6b:b1:35:ae:3a:8b:21:95:21:ca:64:
                    61:5f:1b:30:9f:76:11:54:90:70:0e:6e:39:6a:e4:
                    46:93:85:35:3a:78:ef:81:87:f4:0d:05:45:49:1d:
                    cc:e2:fd:4c:d8:37:e3:b3:a4:ae:da:ee:d1:e3:50:
                    3c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:84:A2:55:27:B3:89:05:94:42:19:0E:E4:BF:AF:F6:D2:18:38:53
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39303a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:90::/46

    Signature Algorithm: sha256WithRSAEncryption
         2a:78:40:4c:34:f1:e6:60:24:78:74:5e:c6:12:cb:47:cf:1a:
         9d:6a:1a:70:8f:99:94:22:4b:54:4f:84:e2:06:e4:00:1d:78:
         8b:4e:18:b7:13:79:87:89:24:24:90:66:cf:0d:f9:98:da:69:
         be:7f:4c:e6:b0:e9:8f:45:73:36:49:cf:b7:da:ac:35:a2:8b:
         80:78:bb:13:e3:17:a5:09:d0:01:da:de:7f:4e:d9:3d:91:4a:
         7e:6d:c8:1f:9b:01:5c:8a:00:e7:1d:a9:8c:b2:e9:2f:94:f8:
         bf:6d:51:df:75:ff:84:d2:e9:63:ba:c9:78:ab:bc:14:91:ac:
         17:49:2a:d6:45:34:d9:26:77:cf:09:4f:60:a0:bc:9c:76:93:
         b1:2c:47:50:d8:7b:97:79:a6:80:cd:12:46:69:38:15:a6:79:
         9f:7b:43:42:da:42:b5:68:b2:c2:f0:d2:93:2e:24:cf:0f:5b:
         19:68:70:10:08:2d:6b:f0:d4:d0:3a:af:93:f7:24:2b:38:5e:
         c5:f7:29:5d:70:d4:72:a1:67:7a:81:f0:a6:95:ae:01:6e:ea:
         b7:60:b1:ae:41:d7:7d:74:42:e3:25:95:2b:c2:8d:43:67:45:
         bf:49:67:db:d0:64:13:6f:51:3e:49:a0:39:15:36:92:eb:95:
         a8:b1:00:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:52 2025 by rpki-client