Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62333a3a2f34382d3438203d3e20323039353532.roa
File:                     323630323a663962613a62333a3a2f34382d3438203d3e20323039353532.roa (raw, json)
Hash identifier:          dYVB0TvKM6FdmddM7TUtcIitQ1ftRvM8nsUooiz2haM=
Subject key identifier:   3A:62:58:B9:5E:C5:EE:DD:02:B6:B3:87:BE:B6:77:EB:BD:B6:FB:64
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       38DD190BDE0096259777D356A4A106219E873A0F
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62333a3a2f34382d3438203d3e20323039353532.roa
Signing time:             Sat 09 Aug 2025 16:24:38 +0000
ROA not before:           Sat 09 Aug 2025 16:19:38 +0000
ROA not after:            Sat 08 Aug 2026 16:24:38 +0000
asID:                     209552
IP address blocks:        2602:f9ba:b3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:dd:19:0b:de:00:96:25:97:77:d3:56:a4:a1:06:21:9e:87:3a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Aug  9 16:19:38 2025 GMT
            Not After : Aug  8 16:24:38 2026 GMT
        Subject: CN=3A6258B95EC5EEDD02B6B387BEB677EBBDB6FB64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:80:33:d9:f1:4c:e1:05:6d:2b:00:90:49:
                    4d:d9:d1:2c:3b:51:79:77:a8:d5:e0:0b:97:8b:fa:
                    e8:31:f4:97:1b:c2:18:e2:15:6a:db:23:b5:e3:c4:
                    7d:eb:3c:35:51:b4:bd:24:8d:b6:93:e4:7d:d5:0c:
                    25:c7:4b:1a:8a:c8:07:99:4f:9f:6b:b7:27:37:27:
                    e4:29:cb:05:c1:c7:a1:4f:ee:fe:6f:7c:05:f4:72:
                    eb:32:61:e1:86:04:9a:4f:fa:10:b0:9c:80:1a:75:
                    c5:5f:e6:3c:ef:18:de:b6:04:5d:63:2b:75:5f:9d:
                    6f:7a:2b:e8:77:61:47:25:d7:b0:ae:72:6e:00:f6:
                    d6:12:61:00:9f:e7:49:4b:c1:9d:6d:a9:f3:82:4c:
                    17:af:d2:e0:50:83:b1:6b:9e:b8:2d:93:29:50:39:
                    e7:0e:99:08:bd:b8:ad:94:84:4d:13:10:69:5c:91:
                    31:e7:e5:b0:f9:2d:91:b4:76:a3:c3:ad:63:a0:17:
                    fd:f0:39:af:4f:2a:67:34:b9:7d:f4:2f:6b:5f:ab:
                    04:b3:6a:20:c0:80:8a:37:40:e8:55:5e:86:4a:24:
                    86:5c:06:9d:4a:53:fe:11:55:5d:36:2d:9a:51:98:
                    bd:4c:59:54:0a:6d:5a:e3:c2:b8:c6:b2:e4:e5:75:
                    a7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:62:58:B9:5E:C5:EE:DD:02:B6:B3:87:BE:B6:77:EB:BD:B6:FB:64
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62333a3a2f34382d3438203d3e20323039353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:b3::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:e9:b8:0a:05:2e:15:ed:32:93:44:22:46:46:fc:ed:c0:db:
         7d:3d:7a:3f:b2:da:04:0f:22:f3:1a:09:12:f5:d7:f7:86:06:
         bb:f9:29:9f:2d:2e:27:72:92:94:b2:d5:49:6f:36:94:29:85:
         8c:87:25:a7:cc:a7:49:6a:98:a9:6a:e7:37:e7:ff:1f:c6:15:
         4b:e9:c3:19:be:dc:f3:71:85:18:a9:61:2e:89:6a:28:a4:07:
         1c:92:60:cb:2b:fd:23:f6:85:3f:10:28:fb:c9:4d:78:d3:74:
         4d:70:27:00:f7:e1:97:e2:57:40:5c:2f:66:21:9e:5a:b3:78:
         01:c9:d4:06:0d:c4:2e:c4:c0:2e:fe:44:bb:b3:c1:f3:1a:85:
         f2:49:6d:90:dc:25:77:89:27:45:c3:43:01:e4:77:71:6a:87:
         76:e5:cb:7f:b2:11:63:6b:fb:8f:87:da:1e:81:f2:75:bd:50:
         00:52:75:1f:80:1a:be:bc:ea:a6:1e:ac:aa:4a:0c:8b:be:e8:
         70:5c:31:e0:2d:fc:3b:25:c8:fa:59:70:2d:a8:27:11:bc:5f:
         44:1b:48:08:de:a3:38:81:56:3e:ed:ad:2c:05:06:0c:b1:8c:
         b0:7a:94:9a:61:8c:75:db:28:9b:6f:ad:5e:33:08:b5:15:ed:
         d0:b3:11:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:46:15 2025 by rpki-client