Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a31313a3a2f34382d3438203d3e203131333538.roa
File:                     323630323a663937653a31313a3a2f34382d3438203d3e203131333538.roa (raw, json)
Hash identifier:          tVXU3Z/7QIqt/tofD35wwJmwp1zZl74TO7/bjD++kAY=
Subject key identifier:   0F:00:C5:4E:7E:3A:6E:92:1F:B0:8E:7F:72:4F:CE:12:9A:0E:49:6F
Certificate issuer:       /CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Certificate serial:       5AA3866FA435F65B0010B4E06BECBF395CD369F7
Authority key identifier: D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a31313a3a2f34382d3438203d3e203131333538.roa
Signing time:             Sun 19 Oct 2025 01:18:51 +0000
ROA not before:           Sun 19 Oct 2025 01:13:51 +0000
ROA not after:            Sun 18 Oct 2026 01:18:51 +0000
asID:                     11358
IP address blocks:        2602:f97e:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a3:86:6f:a4:35:f6:5b:00:10:b4:e0:6b:ec:bf:39:5c:d3:69:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
        Validity
            Not Before: Oct 19 01:13:51 2025 GMT
            Not After : Oct 18 01:18:51 2026 GMT
        Subject: CN=0F00C54E7E3A6E921FB08E7F724FCE129A0E496F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:c6:15:e5:47:b9:14:b2:a1:af:3b:e8:cb:
                    a9:88:a1:82:ac:7f:45:32:b2:64:87:6e:f7:14:59:
                    18:db:1d:8f:14:2e:fd:77:63:d7:ed:43:92:23:5f:
                    7c:c4:18:a4:d8:58:0d:30:ff:55:ea:06:02:19:9e:
                    ca:88:6b:2c:3b:66:d0:31:a8:a0:9e:8b:7c:ec:a6:
                    c8:10:45:f2:5a:c6:20:f4:d0:c6:f9:5f:3c:22:2b:
                    4a:bd:67:12:d0:9f:8e:a8:56:9f:af:d7:3b:5f:45:
                    51:40:36:7f:ce:02:8a:1f:77:7a:52:fc:bc:4d:36:
                    56:49:09:36:f1:29:0d:80:0d:09:d8:9f:75:d9:8c:
                    1c:ee:38:6a:bd:a7:34:b4:cf:71:09:5a:1d:93:56:
                    1c:df:3a:39:0f:ce:2d:f3:95:79:c5:2e:58:3e:60:
                    67:6d:f1:ba:62:0c:7b:28:f3:92:ee:99:e0:f0:f2:
                    92:74:91:33:b8:c6:cb:16:c9:ef:64:17:43:ed:65:
                    ba:26:5c:63:de:4e:82:20:0e:2b:e4:f6:3d:22:0b:
                    f1:2c:bb:ce:5d:1d:f5:2b:63:fa:67:d8:01:2f:a5:
                    1a:a9:3d:d7:7b:8a:51:40:55:5e:10:8e:3a:4b:3b:
                    e4:07:e9:37:79:a9:d3:9b:f2:71:34:0a:ba:95:4b:
                    e0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:00:C5:4E:7E:3A:6E:92:1F:B0:8E:7F:72:4F:CE:12:9A:0E:49:6F
            X509v3 Authority Key Identifier:
                keyid:D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a31313a3a2f34382d3438203d3e203131333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f97e:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:20:76:b6:11:d9:45:a7:2c:96:15:0c:da:90:19:ca:a9:5d:
         57:64:f9:a2:76:5a:36:7b:7f:14:ac:74:60:a6:3d:4b:24:ad:
         0f:7b:2f:17:5c:ca:83:2c:0a:bc:7b:da:84:ea:53:fa:f9:29:
         8c:84:fb:12:26:df:92:a0:10:0b:2b:12:6f:01:84:f9:66:51:
         6c:92:8c:8f:e9:41:17:53:ca:e2:39:5b:20:4b:41:4b:1a:56:
         0d:1a:9c:6d:5c:fe:76:fb:4e:9a:86:57:4c:30:8d:d1:67:1a:
         84:dc:f5:65:a4:ec:57:48:83:1b:a6:51:87:98:eb:c9:fc:06:
         c3:15:ba:eb:62:e7:c0:7e:8a:5f:12:33:ae:f7:16:4f:a5:44:
         27:2c:54:ab:64:5a:80:6f:e6:97:00:c7:9d:c9:c1:cd:ee:c2:
         2f:c2:fd:9f:8b:67:bf:3d:39:55:18:d0:04:d8:17:56:b0:f2:
         2c:92:bb:7a:23:77:9f:0c:1d:3b:af:e3:1a:ab:29:0c:ef:04:
         10:14:99:75:7e:85:76:71:6e:d2:9b:99:cd:dc:38:51:2d:34:
         87:9b:0f:b3:9b:a3:c2:ff:c9:52:44:c3:ac:fa:66:8f:2d:08:
         7d:0d:45:a4:ab:8f:58:71:71:1b:ee:7d:e0:78:0c:35:5d:ef:
         c9:78:79:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:16:36 2025 by rpki-client