Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/323630363a623934303a3a2f33322d3438203d3e20343031363635.roa
File:                     323630363a623934303a3a2f33322d3438203d3e20343031363635.roa (raw, json)
Hash identifier:          CaN7etEPD4WqjunrltE3V1SYeJxTq4daFgL7/8DcdW8=
Subject key identifier:   04:35:97:8F:94:FE:E4:0F:F0:2C:25:1F:5A:17:8F:88:B0:4A:BE:45
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       3D00D6F421B730AD26F60F74CD6DE9F8CDD98946
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/323630363a623934303a3a2f33322d3438203d3e20343031363635.roa
Signing time:             Thu 16 Oct 2025 10:28:54 +0000
ROA not before:           Thu 16 Oct 2025 10:23:54 +0000
ROA not after:            Thu 15 Oct 2026 10:28:54 +0000
asID:                     401665
IP address blocks:        2606:b940::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:00:d6:f4:21:b7:30:ad:26:f6:0f:74:cd:6d:e9:f8:cd:d9:89:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Oct 16 10:23:54 2025 GMT
            Not After : Oct 15 10:28:54 2026 GMT
        Subject: CN=0435978F94FEE40FF02C251F5A178F88B04ABE45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:0d:2c:64:cc:a6:4b:85:6d:a4:32:29:03:
                    7f:87:f7:a9:54:fc:3b:b5:b4:ab:71:cf:a1:ab:c9:
                    4b:7a:54:bf:a8:cf:57:8d:0b:05:52:aa:5e:50:bd:
                    84:65:de:d1:08:ab:44:e0:63:d6:90:e5:6c:0b:cc:
                    09:09:f4:8e:ed:1f:2f:81:d3:0b:b9:45:a5:86:0f:
                    12:d8:cd:82:05:bf:b2:92:6d:b7:4a:6b:13:17:97:
                    36:0b:a8:d9:07:88:79:03:55:d6:7f:3a:6b:3d:30:
                    f9:37:8a:f7:33:2c:56:d0:88:0d:50:3c:3c:ea:56:
                    8c:5f:85:95:81:15:5d:1e:47:e8:df:14:05:20:5f:
                    14:d6:a9:e8:a1:9c:57:ff:24:5c:35:ba:1d:dc:4c:
                    e0:9e:e4:c3:8b:83:de:d6:4c:de:89:20:59:33:4b:
                    7d:03:bf:c4:1a:bc:66:e8:fd:70:8a:f6:7f:f1:a4:
                    c9:94:05:3d:c7:cd:a4:10:8e:1a:7e:03:c5:30:84:
                    60:5e:bc:be:33:b4:6b:52:79:6b:8e:94:a9:b8:c8:
                    b7:46:2d:91:46:bf:dc:3d:aa:1c:cf:bf:a9:c7:4f:
                    7c:63:2f:aa:f7:4f:c0:51:3b:12:aa:3a:eb:6c:34:
                    6f:d8:2e:70:95:ed:d0:ae:fa:de:7c:38:05:84:e3:
                    74:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:35:97:8F:94:FE:E4:0F:F0:2C:25:1F:5A:17:8F:88:B0:4A:BE:45
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/323630363a623934303a3a2f33322d3438203d3e20343031363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b940::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:a0:f6:4e:76:34:2b:44:aa:f6:d1:ef:1a:66:13:9d:98:6b:
         26:28:f3:4e:70:bd:6f:a6:8f:96:62:28:ce:0b:8c:88:8b:69:
         ee:a4:41:26:d1:e7:a4:25:c5:ef:97:f7:8a:8e:d6:90:a6:4d:
         57:50:38:58:0e:06:41:6f:56:12:9c:90:a5:8e:8f:1d:b6:69:
         ff:89:88:02:60:d7:df:69:3d:6e:2a:17:03:3c:93:00:06:ed:
         aa:e4:8f:e8:61:77:24:24:d0:a3:39:fe:df:30:55:82:63:d0:
         d2:32:ee:da:e4:47:ca:64:6a:a5:cd:4a:46:06:96:36:5d:41:
         7c:2e:fa:ac:c8:64:14:72:40:61:3f:36:f3:34:6f:fc:3a:df:
         51:3b:2d:35:93:a5:44:3c:e3:c8:1d:74:6b:10:cf:85:e8:98:
         a2:77:43:ff:1a:2b:f5:0a:39:6d:b4:f6:c6:cb:ac:8e:f4:0d:
         f1:67:e4:4b:6a:67:f8:16:af:0e:4d:1c:9e:d6:33:6f:c7:cc:
         1e:9e:30:81:cf:02:f1:3f:36:21:41:49:8c:5b:93:c4:be:1c:
         ca:3b:5d:e9:97:66:dc:20:2b:b8:ff:07:fa:a6:6d:7f:46:fa:
         9a:a7:38:85:b7:4d:39:52:56:78:4e:7c:9f:ad:57:87:5c:9b:
         0f:80:8b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:12:07 2025 by rpki-client