Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a34323a3a2f34382d3438203d3e20343031353037.roa
File:                     323630323a663738613a34323a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          RM7XL+E6ouVF+5Q3F/Bn2AZYwSthDi9p2peBDAr/QeY=
Subject key identifier:   76:5D:7E:95:2C:A0:41:26:9B:8C:FA:22:4B:10:18:A1:22:8A:D8:F8
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       2377ABC50A333C0528A75E3F9888D49C8D64329D
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a34323a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Tue 17 Jun 2025 07:26:33 +0000
ROA not before:           Tue 17 Jun 2025 07:21:33 +0000
ROA not after:            Tue 16 Jun 2026 07:26:33 +0000
asID:                     401507
IP address blocks:        2602:f78a:42::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:77:ab:c5:0a:33:3c:05:28:a7:5e:3f:98:88:d4:9c:8d:64:32:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Jun 17 07:21:33 2025 GMT
            Not After : Jun 16 07:26:33 2026 GMT
        Subject: CN=765D7E952CA041269B8CFA224B1018A1228AD8F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9f:b3:86:23:11:be:90:6e:59:4f:0b:9d:b7:
                    d9:c2:34:9d:b9:08:d8:ac:29:be:39:e2:f6:fa:b7:
                    25:54:4a:a8:1b:cd:60:f9:be:64:b3:49:6c:23:89:
                    16:0e:9d:3e:e6:80:b8:74:cc:d4:55:5b:a1:fb:51:
                    60:df:bb:5a:78:b9:84:5d:92:05:ab:b6:d8:3c:db:
                    8b:07:8b:20:12:15:11:9e:63:8b:53:bc:2c:4e:98:
                    c5:cf:43:fc:ac:f2:40:6f:92:3e:bc:17:40:95:8e:
                    cd:b8:e3:9b:96:b4:cf:17:4a:8b:d4:bb:1b:fd:0b:
                    2b:99:92:b5:a4:47:af:c3:b3:8c:39:86:72:e8:b8:
                    80:a5:31:4d:82:04:2a:e6:ac:f6:c1:ec:e3:c7:b5:
                    fd:30:1c:a9:46:1d:7c:eb:7c:06:ad:8e:2d:78:f5:
                    20:cf:4a:e3:8d:7a:0d:44:79:7a:13:b8:b0:23:04:
                    a3:4f:d9:7f:bc:00:ec:60:70:7a:dd:e5:18:7a:ee:
                    8d:47:26:13:d4:b2:0c:86:8d:4a:93:c2:0d:02:fd:
                    3d:27:9a:d3:c6:ad:d4:5a:1f:58:ed:83:1c:fd:30:
                    9a:04:fb:97:04:6b:54:9c:6c:a9:04:60:8e:cc:db:
                    06:06:21:c5:ad:67:b1:fb:55:92:57:fd:eb:17:ae:
                    7d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5D:7E:95:2C:A0:41:26:9B:8C:FA:22:4B:10:18:A1:22:8A:D8:F8
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a34323a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:42::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:41:07:a8:4b:2e:5a:5f:be:a2:1e:2d:49:52:0f:c8:ad:ca:
         55:fe:5b:ee:5d:32:df:aa:9a:c5:f9:bc:7f:3a:de:91:5f:9e:
         c4:04:30:a2:fb:29:e6:39:80:2d:ec:d1:99:0b:ba:65:86:f8:
         81:fc:0b:d6:bc:c0:47:8f:69:69:d4:25:07:73:8d:ee:a1:33:
         b4:76:5e:2f:be:59:e2:a4:1a:65:e5:1c:45:fa:a3:d6:aa:e8:
         ba:9e:aa:52:d7:dd:d3:66:24:67:58:76:06:3f:9a:75:c7:49:
         4c:d6:0b:8f:27:08:0d:8d:ff:ea:8e:42:5c:33:32:6f:18:a5:
         6c:07:f8:e8:9b:00:4d:68:03:61:b0:c3:aa:5f:79:f9:74:cd:
         e0:35:de:42:35:23:8b:67:d0:d3:c4:e1:ee:fb:81:ad:9a:a8:
         28:c0:71:28:b2:e1:75:cf:c5:e8:be:5e:9d:6e:04:84:52:65:
         ed:1e:ab:de:ed:91:ba:21:35:f4:e7:00:cd:59:31:3c:a2:4b:
         cd:6a:2c:e1:d9:a2:e1:4c:d7:e4:bc:8b:78:8d:bb:2e:16:2a:
         ef:d1:ec:dd:fc:a3:42:ee:a6:42:29:cf:77:73:28:c3:c8:13:
         e5:06:4f:c8:9c:29:71:18:bd:a3:79:ba:27:42:d5:d9:c4:3a:
         40:5d:72:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:37:24 2025 by rpki-client