Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3435343a3a2f34382d3438203d3e20313939323033.roa
File:                     323630323a666161383a3435343a3a2f34382d3438203d3e20313939323033.roa (raw, json)
Hash identifier:          ORphdoyuFmFmZz9M9FCgTtTcs7EcAzyhSk0iFZsvfeA=
Subject key identifier:   02:3F:DB:3D:49:01:A2:20:A6:4E:7E:68:4E:F5:9A:D0:A3:91:3E:BB
Certificate issuer:       /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial:       47044A407BCBF7C2F691E6AA5034854B11E3CC16
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3435343a3a2f34382d3438203d3e20313939323033.roa
Signing time:             Mon 12 May 2025 04:04:02 +0000
ROA not before:           Mon 12 May 2025 03:59:02 +0000
ROA not after:            Mon 11 May 2026 04:04:02 +0000
asID:                     199203
IP address blocks:        2602:faa8:454::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 06:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:04:4a:40:7b:cb:f7:c2:f6:91:e6:aa:50:34:85:4b:11:e3:cc:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
        Validity
            Not Before: May 12 03:59:02 2025 GMT
            Not After : May 11 04:04:02 2026 GMT
        Subject: CN=023FDB3D4901A220A64E7E684EF59AD0A3913EBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c4:15:52:7d:aa:45:17:75:71:a4:57:ae:74:
                    a3:63:9d:12:30:fc:27:eb:d2:ab:c8:81:f9:20:03:
                    bc:b5:1f:a2:6a:9b:36:11:19:45:34:10:e8:e9:5b:
                    d2:85:8b:ce:19:df:ae:14:72:67:33:40:03:16:c5:
                    54:6a:55:cc:b4:3c:52:8f:83:0b:0a:29:35:83:35:
                    dd:b7:e2:69:ba:19:b4:4b:be:7b:ad:33:f7:79:24:
                    45:1d:5c:86:ee:10:4a:b8:61:e2:c9:46:65:f0:6d:
                    ea:26:7d:6b:ba:88:fb:19:2a:72:4d:66:4e:22:0e:
                    89:f5:95:93:84:1c:7e:1a:08:f5:55:39:00:52:b3:
                    6c:a4:21:d0:62:eb:d5:6f:bf:53:69:4a:98:3f:3a:
                    14:c7:30:69:ec:39:f9:c6:0f:2a:ba:ee:b8:ec:12:
                    24:d8:8b:a4:77:01:af:e5:e6:f5:97:11:4d:42:f7:
                    bd:59:46:b6:5a:c8:89:c7:f6:e8:9e:66:31:2e:b3:
                    00:7d:3c:16:41:6d:23:f9:f9:85:74:8b:de:a6:ec:
                    4c:4d:e7:13:eb:a1:a5:3a:98:7a:c6:03:75:c3:76:
                    a5:56:d6:6b:39:bb:ed:95:bd:12:a5:7a:4c:af:e9:
                    71:f2:58:a1:a9:b2:0a:a2:a3:89:2f:6f:0d:c8:fe:
                    6a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3F:DB:3D:49:01:A2:20:A6:4E:7E:68:4E:F5:9A:D0:A3:91:3E:BB
            X509v3 Authority Key Identifier:
                keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3435343a3a2f34382d3438203d3e20313939323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:454::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:2d:bf:cf:bc:50:87:0e:86:0f:f7:a9:41:bc:df:05:12:3b:
         77:19:16:64:93:d1:1a:8c:f6:dd:53:f3:39:41:3c:89:ab:33:
         00:aa:d1:cb:ed:e5:2a:73:d9:e7:5b:c9:0c:59:f5:6e:2c:6c:
         b6:82:16:50:67:ae:57:1b:5c:d4:98:c3:55:8a:c8:54:18:a0:
         e2:b3:d2:2b:4f:7f:18:be:22:36:35:73:f4:dd:d9:81:02:bb:
         96:fd:29:a2:e2:47:c6:a5:58:a5:b1:26:4f:84:31:57:5e:b6:
         d4:ac:9d:c6:a8:fc:0c:79:85:d8:64:24:c5:bd:79:24:44:ec:
         b8:3e:d7:af:35:47:49:d3:f9:39:39:c7:5c:7e:11:8b:d5:57:
         ef:76:69:fb:0c:b8:9c:f4:bc:7b:09:27:25:3f:10:68:af:54:
         b1:68:e6:2e:c2:62:aa:68:ee:b4:5a:44:ba:1d:e8:be:a2:90:
         49:fb:5c:b0:6a:a9:98:a9:9f:bb:bf:c5:5d:99:28:f0:02:d7:
         a4:df:92:02:8d:f6:9d:af:35:d5:f8:1c:d3:32:f4:01:00:7c:
         72:7b:33:ff:1b:bd:58:2b:f9:93:c1:d5:b8:bd:88:54:e3:f4:
         10:82:53:86:06:3a:93:32:70:c8:74:75:28:57:4c:07:90:e7:
         13:13:a1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:25:51 2025 by rpki-client