Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61383a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a61383a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          euVMIVeXQjrct7/PXd1TknoifUtYLrFdwBgZZg0Nj94=
Subject key identifier:   4F:52:C8:7F:74:AB:3D:1B:2B:9C:28:66:96:50:36:D7:28:47:03:7A
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       49369C576C9F24259D969DF19F3A72736C785EFB
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61383a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 25 Sep 2025 21:45:13 +0000
ROA not before:           Thu 25 Sep 2025 21:40:13 +0000
ROA not after:            Thu 24 Sep 2026 21:45:13 +0000
asID:                     54148
IP address blocks:        2602:fa43:a8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:36:9c:57:6c:9f:24:25:9d:96:9d:f1:9f:3a:72:73:6c:78:5e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Sep 25 21:40:13 2025 GMT
            Not After : Sep 24 21:45:13 2026 GMT
        Subject: CN=4F52C87F74AB3D1B2B9C2866965036D72847037A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:63:d0:0b:18:0d:bd:b3:0d:9c:a7:a1:22:94:
                    47:38:15:bf:da:ea:c7:71:71:c2:a7:27:47:07:90:
                    c0:2e:d3:d7:7b:2d:fe:da:f9:21:af:f4:25:5e:1a:
                    2a:41:91:84:00:d3:33:57:eb:d7:d9:90:4e:23:3a:
                    eb:80:2d:a1:3b:63:0b:9b:92:1b:8e:c3:7d:ca:62:
                    0c:95:ba:ee:fe:8c:40:ba:01:46:a7:1a:d4:c9:f6:
                    9f:55:54:0d:48:b0:c7:6c:dc:91:72:43:70:87:48:
                    b6:70:d6:89:4b:58:14:74:c7:aa:d8:49:c1:87:90:
                    e1:41:cb:7f:ce:f2:84:a8:40:92:69:f5:96:3c:1a:
                    0c:01:d1:4f:71:1e:c6:ba:aa:f4:7a:95:9e:7a:20:
                    9c:bb:b2:5b:1a:6f:58:33:13:fa:7a:ee:61:f6:95:
                    64:03:a6:22:21:e4:78:33:dc:61:ae:55:d4:d7:b2:
                    0f:da:93:bf:6a:7d:29:68:f0:95:e0:59:71:c7:87:
                    ad:9b:d3:61:9d:1e:cb:8a:65:9a:79:a6:c5:40:07:
                    40:39:7e:24:48:bb:3e:0f:6a:91:d4:55:d5:9e:9c:
                    db:91:27:e5:8c:96:40:44:8e:25:55:9e:8c:9e:d2:
                    a0:94:7d:8e:18:05:7b:5b:e3:b1:9e:10:cf:0c:14:
                    ae:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:52:C8:7F:74:AB:3D:1B:2B:9C:28:66:96:50:36:D7:28:47:03:7A
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61383a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:a8::/46

    Signature Algorithm: sha256WithRSAEncryption
         47:6b:9b:c0:36:b9:bb:2c:c8:58:62:77:5a:6b:03:98:17:12:
         25:fe:75:8b:78:26:12:cc:14:48:54:b1:b9:ae:0c:73:6c:d8:
         c4:de:ef:35:00:06:0c:f6:1b:15:a1:18:ef:a4:cb:30:d1:43:
         a3:f6:c1:9f:d3:42:bf:90:5b:60:69:8d:56:87:a1:55:c5:6e:
         15:39:27:98:07:a3:b4:a4:dc:e7:1c:95:57:ae:f1:f4:41:12:
         0c:b7:96:68:3f:e6:8a:df:c3:14:d8:57:40:19:d4:1a:55:29:
         2f:73:c3:64:f0:20:04:5d:01:8d:c6:d4:ed:59:ad:3e:99:b2:
         f1:6f:f2:2b:62:93:b4:c9:9f:9e:db:aa:f5:20:7b:d8:a5:bd:
         d9:20:0d:1a:c6:76:97:18:94:28:65:c5:b7:80:13:d0:0c:73:
         ab:93:fe:36:b3:8b:87:29:78:7c:2b:34:dd:b6:a5:11:8b:1a:
         41:82:01:24:51:f2:18:63:07:13:55:20:24:d3:6e:03:1a:d7:
         2f:58:5b:ca:1a:c5:0e:33:6c:b5:e6:b6:98:6f:60:d8:8f:9c:
         48:5b:5e:6e:9b:a2:f6:4e:39:e7:80:d6:d1:64:66:88:02:00:
         fa:47:3f:da:ea:bb:2f:76:10:d5:23:c0:93:87:a1:f9:5c:b7:
         45:d6:4d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:07 2025 by rpki-client