Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61343a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a61343a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          ALoVxDbdvMUlmOIbl55gy4IqGnyhVd/qaFuopYum+/w=
Subject key identifier:   67:01:21:25:C5:B3:02:FA:23:C7:D1:85:01:C9:07:32:92:97:32:FC
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       596994B9A5EEE510CEE1ACE4D1C465D13EBB80E4
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61343a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 25 Sep 2025 21:45:11 +0000
ROA not before:           Thu 25 Sep 2025 21:40:11 +0000
ROA not after:            Thu 24 Sep 2026 21:45:11 +0000
asID:                     54148
IP address blocks:        2602:fa43:a4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:69:94:b9:a5:ee:e5:10:ce:e1:ac:e4:d1:c4:65:d1:3e:bb:80:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Sep 25 21:40:11 2025 GMT
            Not After : Sep 24 21:45:11 2026 GMT
        Subject: CN=67012125C5B302FA23C7D18501C90732929732FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:25:cd:41:c8:d8:0a:23:9e:bc:38:48:de:4b:
                    1b:37:47:43:26:42:84:b1:60:db:d4:4d:35:bd:94:
                    16:73:2a:0b:2d:f3:fe:87:3f:95:3e:73:85:31:b5:
                    d2:5c:75:7f:78:3e:51:a2:10:97:14:51:de:07:02:
                    72:41:d6:9f:c0:f5:0b:81:2d:ed:4e:cf:19:de:9c:
                    a6:34:9f:9b:69:8f:32:02:cd:a5:13:26:7b:9c:62:
                    b8:11:08:9a:e1:8b:3e:e0:47:cc:35:ab:ca:ef:3d:
                    eb:db:1e:81:91:ef:9d:a4:ba:eb:61:7a:f4:dc:90:
                    1d:0a:55:02:47:9d:f4:18:68:a8:1f:16:a2:78:55:
                    e0:8e:43:95:27:23:59:10:a8:85:49:01:42:91:90:
                    29:c5:75:ee:b7:1d:8a:57:dd:ba:3d:de:44:b7:02:
                    74:71:0c:0a:83:17:d3:99:5c:17:a0:6f:e5:a4:2a:
                    b5:c6:3c:58:06:0c:59:74:b1:84:c8:a3:78:3f:92:
                    62:6f:8b:fc:6d:45:a3:3a:7c:8f:82:e4:69:57:cc:
                    5d:d1:bf:e3:f4:0a:25:d4:18:75:fb:11:a7:c5:c9:
                    64:61:57:d4:a9:ab:8e:a8:c0:51:8c:85:2b:48:9a:
                    ef:77:0c:af:b5:42:34:66:b8:a5:70:2f:14:7f:70:
                    63:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:01:21:25:C5:B3:02:FA:23:C7:D1:85:01:C9:07:32:92:97:32:FC
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61343a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:a4::/46

    Signature Algorithm: sha256WithRSAEncryption
         1a:65:0b:58:e0:c0:28:0f:67:34:1c:35:e0:5e:3d:f9:95:62:
         a3:87:d2:1f:2b:21:ac:10:e4:56:5d:bb:76:a6:a4:b7:13:a4:
         f2:dd:9e:41:66:e0:44:dd:48:d2:0c:05:51:d9:8d:c7:cd:a6:
         d0:6d:53:b7:76:a0:5e:0c:2b:56:5e:60:5d:f1:9a:58:88:bc:
         67:9e:5f:df:02:43:d9:81:3b:f3:07:83:03:36:3a:e8:9e:23:
         b0:78:66:c5:56:45:b5:d6:81:8c:17:5a:16:e7:e9:2f:bf:ef:
         0f:ed:3e:c6:7d:35:8b:86:a4:ed:86:4c:b7:f1:b4:8f:38:56:
         d4:04:fb:7a:e5:79:d9:7e:ad:94:e4:cc:48:ba:85:92:1a:23:
         08:02:99:7c:86:57:09:25:f1:f0:5c:2a:ab:1c:ea:9b:d7:23:
         09:7a:16:4e:07:f0:42:50:35:7d:e3:73:08:99:19:ed:d5:7a:
         e2:d1:84:2d:99:00:da:c8:48:8c:78:86:b7:9e:c0:12:94:db:
         ef:a3:b7:cb:01:4c:6c:71:a1:cc:59:3d:37:d5:0b:9e:e7:d7:
         bc:7a:d1:98:2f:0c:c2:31:6f:d5:00:29:67:ad:16:d3:38:62:
         1e:b4:54:59:62:b9:d7:67:4f:04:8f:ff:a7:8d:91:58:1a:fa:
         b9:81:45:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:19:03 2025 by rpki-client