Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61383a3a2f34382d3438203d3e20313337393038.roa
File:                     323630323a663962613a61383a3a2f34382d3438203d3e20313337393038.roa (raw, json)
Hash identifier:          YNS+EfD/NYBp+4YcjTSUfm7ayjgsfs8QP9e6yUpcjeo=
Subject key identifier:   B9:B2:3F:1E:57:DF:AA:88:15:33:0E:1D:A5:0E:C0:34:09:AE:E4:9B
Certificate issuer:       /CN=8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43
Certificate serial:       2A406900E76CD15A9FB739731E3EFE18FE31980F
Authority key identifier: CD:BC:A8:B0:E7:B6:83:42:F6:E8:52:C6:E4:9C:97:62:19:46:8A:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61383a3a2f34382d3438203d3e20313337393038.roa
Signing time:             Wed 11 Jun 2025 22:33:35 +0000
ROA not before:           Wed 11 Jun 2025 22:28:35 +0000
ROA not after:            Wed 10 Jun 2026 22:33:35 +0000
asID:                     137908
IP address blocks:        2602:f9ba:a8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 10:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:40:69:00:e7:6c:d1:5a:9f:b7:39:73:1e:3e:fe:18:fe:31:98:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43
        Validity
            Not Before: Jun 11 22:28:35 2025 GMT
            Not After : Jun 10 22:33:35 2026 GMT
        Subject: CN=B9B23F1E57DFAA8815330E1DA50EC03409AEE49B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:44:f2:86:7e:87:04:fa:23:4c:57:97:a3:
                    66:50:59:93:23:03:2b:c9:5d:81:2f:65:d9:ea:68:
                    cf:3a:4d:e0:7d:d7:b0:57:20:81:e7:b5:f0:89:a7:
                    11:47:b6:d1:d3:c5:5a:9d:61:5d:e9:c5:13:03:fb:
                    3f:29:dc:99:d6:a4:8e:e1:f6:b8:af:4d:11:8a:00:
                    c0:c7:49:69:41:91:91:8f:13:1b:06:8f:6f:e6:11:
                    4f:5c:4e:17:7f:a1:93:42:50:62:67:5f:72:19:93:
                    c2:e6:44:6f:ca:78:df:66:ba:cf:78:12:4d:28:69:
                    ca:de:f8:6e:de:3a:df:81:3f:19:11:b8:92:e0:7c:
                    8f:8c:ad:fc:fa:0a:40:3a:f7:9f:71:51:94:c2:7c:
                    0c:b2:22:eb:92:3e:77:99:88:b8:70:5c:4e:f1:ac:
                    14:e7:b6:71:a8:65:e6:35:2b:73:a9:8b:a6:ce:15:
                    6f:6f:19:77:0f:74:2e:ba:46:8f:c2:90:b6:d7:8d:
                    db:29:6e:6e:c6:f4:7c:d2:05:d6:dd:16:7d:82:7d:
                    98:46:56:81:ed:fb:94:d4:91:8b:5e:d9:2b:2b:50:
                    fd:40:a2:e6:30:49:06:4a:eb:b4:eb:d2:8c:79:77:
                    04:a9:7b:de:b0:73:95:de:6c:3e:65:be:45:8f:12:
                    42:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B2:3F:1E:57:DF:AA:88:15:33:0E:1D:A5:0E:C0:34:09:AE:E4:9B
            X509v3 Authority Key Identifier:
                keyid:CD:BC:A8:B0:E7:B6:83:42:F6:E8:52:C6:E4:9C:97:62:19:46:8A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61383a3a2f34382d3438203d3e20313337393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:a8::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:16:9a:78:fc:56:5e:38:37:f6:50:4e:0c:1b:1e:01:3a:8c:
         d9:d5:d6:57:3c:c8:d6:9b:00:5f:1e:3b:c7:d1:93:0b:84:9f:
         e8:c7:14:da:9e:70:a4:84:92:93:db:8d:b4:6b:bd:04:b1:d8:
         a8:ff:1c:f3:1d:ac:1f:c5:eb:ef:05:19:d6:a6:a5:81:f6:c8:
         80:99:5b:67:de:94:5e:69:1b:4b:d8:b4:5c:0e:97:45:88:59:
         7d:91:d0:63:19:c0:93:f7:2a:c4:28:6b:4f:9b:41:4c:aa:7f:
         38:e8:0c:56:c2:d5:a9:7b:a9:4b:f7:87:4e:f5:f4:b6:ff:3a:
         14:1a:14:cb:9a:68:1e:01:7a:a6:79:29:50:e6:8c:47:59:4e:
         c3:fb:c4:31:b2:50:e0:67:b5:22:2a:b4:69:65:12:c6:bb:78:
         67:bb:ea:7b:b6:9b:60:da:98:27:64:f9:a6:0d:1a:79:04:8c:
         22:d1:1b:30:7f:0d:b8:6c:b6:9d:2c:15:b3:2c:f6:7a:f5:ee:
         d4:5d:a3:80:40:fa:3f:79:20:9e:d3:00:c4:01:26:eb:60:3e:
         14:8b:8d:3c:50:ba:b3:24:c0:ec:be:18:94:29:e6:49:e9:29:
         29:ad:17:11:98:59:6f:36:c8:99:d0:46:60:69:eb:e2:63:ce:
         48:bd:15:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:22:59 2025 by rpki-client