Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62623a3a2f34382d3438203d3e20333934383339.roa
File:                     323630323a663962613a62623a3a2f34382d3438203d3e20333934383339.roa (raw, json)
Hash identifier:          uL8m8OwH/oJe/2330RIY9a06/pjQDzLNUJWKebrU3sE=
Subject key identifier:   E6:04:E0:E4:0D:1D:4C:0B:AF:9F:01:F2:98:2E:EF:A0:45:31:32:1D
Certificate issuer:       /CN=8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43
Certificate serial:       514E62BFB7A1BB6A11A879F93EC829EADB355CBC
Authority key identifier: CD:BC:A8:B0:E7:B6:83:42:F6:E8:52:C6:E4:9C:97:62:19:46:8A:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62623a3a2f34382d3438203d3e20333934383339.roa
Signing time:             Wed 11 Jun 2025 22:35:01 +0000
ROA not before:           Wed 11 Jun 2025 22:30:01 +0000
ROA not after:            Wed 10 Jun 2026 22:35:01 +0000
asID:                     394839
IP address blocks:        2602:f9ba:bb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 18:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4e:62:bf:b7:a1:bb:6a:11:a8:79:f9:3e:c8:29:ea:db:35:5c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43
        Validity
            Not Before: Jun 11 22:30:01 2025 GMT
            Not After : Jun 10 22:35:01 2026 GMT
        Subject: CN=E604E0E40D1D4C0BAF9F01F2982EEFA04531321D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:15:aa:07:1e:36:e7:da:22:20:db:2a:7c:0f:
                    bc:9e:95:95:5f:9a:bf:ef:ee:99:ba:75:51:d3:7b:
                    74:b4:a7:09:3c:a1:9e:ab:fb:bd:5c:84:88:f1:10:
                    2d:3e:52:05:7b:1d:d6:60:54:e9:d6:d5:b4:31:1d:
                    00:e8:06:a6:2a:7d:f6:75:78:08:d9:b3:d5:74:f8:
                    13:a9:59:a6:01:0f:d7:1a:9c:3c:82:b2:b9:49:0e:
                    70:3f:f7:55:7d:8b:a2:b2:8a:d3:88:a9:c3:6c:4d:
                    4c:da:ca:b7:ca:4c:92:d6:39:c9:f6:dc:0f:38:5c:
                    7b:a1:a2:b2:35:78:d9:92:20:d2:1a:07:90:f5:eb:
                    48:ec:36:ef:9c:74:c3:35:21:45:9b:93:b1:b5:a7:
                    49:04:5a:3f:32:fe:9f:b0:52:2e:74:87:54:b8:a4:
                    33:46:8d:d9:08:a4:d8:a6:fc:de:b0:d3:d6:6a:28:
                    48:26:fe:54:a3:76:b1:4b:32:68:97:a0:32:fe:f8:
                    51:67:ad:0d:d0:34:00:d3:12:96:28:33:45:32:68:
                    c6:d0:67:6f:87:1d:7b:62:8b:f7:2d:ef:1f:a8:d2:
                    ba:b0:d8:77:ba:15:85:c2:12:98:ae:54:63:0f:b4:
                    34:ed:fe:aa:a7:66:97:78:8b:69:8a:a8:23:71:c0:
                    dd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:04:E0:E4:0D:1D:4C:0B:AF:9F:01:F2:98:2E:EF:A0:45:31:32:1D
            X509v3 Authority Key Identifier:
                keyid:CD:BC:A8:B0:E7:B6:83:42:F6:E8:52:C6:E4:9C:97:62:19:46:8A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62623a3a2f34382d3438203d3e20333934383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:bb::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:00:ad:25:25:78:d1:44:a8:34:d1:5b:57:4c:54:f0:67:32:
         18:93:21:72:59:32:3c:d6:17:b2:d5:2c:48:f0:a8:22:9f:ea:
         5b:48:f2:db:4a:bd:f4:b1:a1:cc:96:b0:1d:35:38:f3:db:b9:
         51:9d:25:1d:a9:24:60:1c:a6:7d:cb:16:a6:22:44:85:81:bb:
         2b:2c:78:12:c9:64:02:41:92:60:1e:28:5f:03:5e:b5:bd:4c:
         0e:c8:fe:d0:f6:ec:5a:d4:98:f1:fa:49:b8:83:0c:cd:1a:fa:
         02:e1:af:2f:f9:79:57:56:e3:58:9b:e2:e6:a4:43:a2:66:8c:
         c2:7e:61:4e:dc:2d:13:b9:cb:26:35:b6:57:30:84:d2:18:36:
         4f:74:6d:42:d1:93:28:78:5f:94:7f:b0:f8:7f:b1:33:64:32:
         b7:15:ec:62:75:a0:14:61:cc:7d:49:10:cc:e4:c9:49:d0:47:
         ae:4d:0d:20:3b:12:ee:f4:52:64:a0:ff:cd:0d:d5:99:2a:95:
         83:1e:c3:a9:94:97:95:ba:5c:ab:25:17:2b:21:03:b3:4d:2c:
         b4:d1:2b:55:b2:bf:e1:5f:86:90:7e:7f:bc:0d:95:9a:11:4b:
         4f:9b:cf:f1:cb:33:3d:a9:90:41:83:03:0e:fe:f8:6c:8c:79:
         fa:24:c7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:30:22 2025 by rpki-client