Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a38623a3a2f34382d3438203d3e203534323836.roa
File:                     323630323a666161383a38623a3a2f34382d3438203d3e203534323836.roa (raw, json)
Hash identifier:          bSh2zP7vAQeGvKmLSHigMBFpcadQWhq1N+ICpkoGxiI=
Subject key identifier:   F6:AF:F1:2B:DC:54:60:C9:63:CD:01:A9:B0:FC:94:C6:E6:8B:4E:03
Certificate issuer:       /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial:       7ED569491299B0389FB237278E3015FF803A4F1C
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a38623a3a2f34382d3438203d3e203534323836.roa
Signing time:             Mon 12 May 2025 04:03:54 +0000
ROA not before:           Mon 12 May 2025 03:58:54 +0000
ROA not after:            Mon 11 May 2026 04:03:54 +0000
asID:                     54286
IP address blocks:        2602:faa8:8b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 06:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d5:69:49:12:99:b0:38:9f:b2:37:27:8e:30:15:ff:80:3a:4f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
        Validity
            Not Before: May 12 03:58:54 2025 GMT
            Not After : May 11 04:03:54 2026 GMT
        Subject: CN=F6AFF12BDC5460C963CD01A9B0FC94C6E68B4E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:75:e4:af:f1:31:72:a8:66:d6:87:c1:1c:82:
                    f1:f9:8d:0f:15:60:18:d9:58:30:e5:0e:be:bd:ee:
                    d6:99:4b:89:78:2a:d5:37:07:6f:d2:16:9c:51:84:
                    16:7b:bb:65:bb:a9:6a:11:79:e6:52:f2:68:7d:7e:
                    5b:88:89:df:29:0a:ee:43:03:63:14:56:4d:b5:d3:
                    2b:9f:22:8b:30:1b:0c:d6:0f:69:0e:d3:97:ec:da:
                    d3:d8:b4:79:2d:ae:6c:20:f8:21:0f:b6:e2:98:8f:
                    c6:99:54:83:07:1b:bf:67:71:66:99:f0:de:d4:a6:
                    cc:c5:aa:e6:54:c5:02:e1:79:d5:a9:e4:cc:63:53:
                    32:71:52:b5:84:c1:7f:55:c3:f6:89:91:29:61:8b:
                    87:e1:8a:70:c2:ab:60:7b:fb:d3:fc:e2:ab:a1:31:
                    94:22:a3:64:fc:f0:5e:da:71:78:2b:e8:ea:99:dc:
                    3a:4c:e8:56:c8:b1:1c:58:85:d6:3f:d1:50:7b:f6:
                    02:68:5f:1c:b9:8b:6e:35:66:c2:96:1b:21:ba:31:
                    b4:6f:b3:87:a4:68:68:ee:00:a3:a8:c2:2d:32:4c:
                    98:79:1d:d3:e1:ac:24:5f:af:d9:e0:38:47:3b:e1:
                    e6:9a:00:be:d3:df:ef:a9:d7:a2:9f:8d:db:a3:95:
                    d4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AF:F1:2B:DC:54:60:C9:63:CD:01:A9:B0:FC:94:C6:E6:8B:4E:03
            X509v3 Authority Key Identifier:
                keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a38623a3a2f34382d3438203d3e203534323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:8b::/48

    Signature Algorithm: sha256WithRSAEncryption
         d4:ec:18:ce:b2:a5:31:46:b1:d1:fa:b4:9f:71:20:ab:21:0f:
         71:f6:16:d3:b7:a9:0d:b7:20:ad:5c:d9:0a:78:d9:59:34:7c:
         5b:d0:95:60:c1:9b:65:13:5e:de:70:8f:45:74:1e:7a:57:47:
         c0:18:31:8d:2e:91:42:00:95:bc:0f:79:70:cb:f5:92:87:fe:
         dd:ea:a6:1b:2f:b3:00:c0:01:a6:9b:72:e5:f8:e8:73:aa:47:
         b0:bc:7d:a9:18:6a:24:42:62:9b:58:36:fa:1e:c5:ea:e2:a8:
         db:34:a5:dc:c7:76:cf:2f:0a:10:c3:ce:8e:80:af:65:ed:9f:
         32:2d:48:1e:9e:cb:48:2e:b5:f1:f2:c4:14:a2:eb:ee:2b:23:
         a0:d3:c3:34:bb:41:ee:1c:a8:51:56:f8:89:c7:58:69:f7:6d:
         f1:65:09:5c:de:3b:7e:fc:65:9d:f4:4e:2f:d3:fb:ca:e0:f6:
         c8:3f:3a:f8:b7:cb:e3:d9:6a:70:6c:9f:54:c9:53:a6:c8:e5:
         83:53:ce:22:66:a8:d9:b1:1e:e3:bc:36:b2:50:3d:b3:29:2c:
         ba:dc:e1:0d:93:6c:7e:a9:36:10:81:c8:b2:51:79:b0:4e:31:
         57:de:c6:27:f2:d9:93:8e:04:dc:3d:53:3b:72:ac:cf:dc:78:
         c0:00:16:44
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUftVpSRKZsDifsjcnjjAV/4A6TxwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMmE1YWY3NGRiYjA2YzRlMDBiYTM0OGVjY2RjOTRiZDRl
NzUxY2MzN2FkZmY2YjdkNDQwHhcNMjUwNTEyMDM1ODU0WhcNMjYwNTExMDQwMzU0
WjAzMTEwLwYDVQQDEyhGNkFGRjEyQkRDNTQ2MEM5NjNDRDAxQTlCMEZDOTRDNkU2
OEI0RTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53Xkr/Excqhm
1ofBHILx+Y0PFWAY2Vgw5Q6+ve7WmUuJeCrVNwdv0hacUYQWe7tlu6lqEXnmUvJo
fX5biInfKQruQwNjFFZNtdMrnyKLMBsM1g9pDtOX7NrT2LR5La5sIPghD7bimI/G
mVSDBxu/Z3FmmfDe1KbMxarmVMUC4XnVqeTMY1MycVK1hMF/VcP2iZEpYYuH4Ypw
wqtge/vT/OKroTGUIqNk/PBe2nF4K+jqmdw6TOhWyLEcWIXWP9FQe/YCaF8cuYtu
NWbClhshujG0b7OHpGho7gCjqMItMkyYeR3T4awkX6/Z4DhHO+HmmgC+09/vqdei
n43bo5XUOwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFPav8SvcVGDJY80BqbD8lMbm
i04DMB8GA1UdIwQYMBaAFKNNW+y4AcKoWphbvD+edOQHepVHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODcyODk4ODgwMTg3NjAyYTUwYTAzOTEwLzAv
QTM0RDVCRUNCODAxQzJBODVBOTg1QkJDM0Y5RTc0RTQwNzdBOTU0Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzcwZjVkODBjLTlkYWEtNGY2Zi04ZjU4LTE4MWM1ZjBjNGIwYS8yYTVh
Zjc0ZGJiMDZjNGUwMGJhMzQ4ZWNjZGM5NGJkNGU3NTFjYzM3YWRmZjZiN2Q0NC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg3Mjg5ODg4MDE4NzYw
MmE1MGEwMzkxMC8wLzMyMzYzMDMyM2E2NjYxNjEzODNhMzg2MjNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDM1MzQzMjM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvqoAIswDQYJKoZI
hvcNAQELBQADggEBANTsGM6ypTFGsdH6tJ9xIKshD3H2FtO3qQ23IK1c2Qp42Vk0
fFvQlWDBm2UTXt5wj0V0HnpXR8AYMY0ukUIAlbwPeXDL9ZKH/t3qphsvswDAAaab
cuX46HOqR7C8fakYaiRCYptYNvoexeriqNs0pdzHds8vChDDzo6Ar2XtnzItSB6e
y0gutfHyxBSi6+4rI6DTwzS7Qe4cqFFW+InHWGn3bfFlCVzeO378ZZ30Ti/T+8rg
9sg/Ovi3y+PZanBsn1TJU6bI5YNTziJmqNmxHuO8NrJQPbMpLLrc4Q2TbH6pNhCB
yLJRebBOMVfexify2ZOOBNw9UztyrM/ceMAAFkQ=
-----END CERTIFICATE-----
Generated at Mon May 12 23:57:05 2025 by rpki-client