Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32643a3a2f34382d3438203d3e203131393637.roa
File:                     323630323a663732653a32643a3a2f34382d3438203d3e203131393637.roa (raw, json)
Hash identifier:          qmMfIrQFl3Zx8lMCBrnHFuPEqXQU4TDW2q+TTuMwwYo=
Subject key identifier:   0F:3D:BB:7F:9D:86:47:91:88:7D:21:4E:C4:ED:E6:4C:F2:24:65:83
Certificate issuer:       /CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
Certificate serial:       1F22C6FCCC94EE21C08EAEC229DA8DD80894AE02
Authority key identifier: 41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32643a3a2f34382d3438203d3e203131393637.roa
Signing time:             Thu 08 May 2025 13:53:51 +0000
ROA not before:           Thu 08 May 2025 13:48:51 +0000
ROA not after:            Thu 07 May 2026 13:53:51 +0000
asID:                     11967
IP address blocks:        2602:f72e:2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:22:c6:fc:cc:94:ee:21:c0:8e:ae:c2:29:da:8d:d8:08:94:ae:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Validity
            Not Before: May  8 13:48:51 2025 GMT
            Not After : May  7 13:53:51 2026 GMT
        Subject: CN=0F3DBB7F9D864791887D214EC4EDE64CF2246583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:26:91:b9:3a:65:8d:b2:35:3e:40:d7:d8:
                    9c:73:ba:df:32:a5:2c:0e:9a:d2:76:63:5c:b3:25:
                    7b:c3:1e:45:41:b5:1b:7e:1c:be:0c:af:b8:9e:54:
                    ba:b0:c1:a6:c4:9c:8d:31:47:95:67:d0:af:af:c2:
                    c4:18:5a:ed:c0:ea:14:6c:74:39:8b:c9:85:7b:20:
                    67:e2:73:e3:3b:53:36:84:6e:e5:46:1a:fa:b5:28:
                    5f:9c:dc:da:b4:8d:c5:c4:d6:1c:83:26:40:d4:04:
                    5f:8f:4e:4c:3f:d2:98:09:d0:ef:16:b5:42:06:3e:
                    4f:51:ab:44:e6:90:be:e0:a6:26:57:74:52:1a:98:
                    a2:3b:79:2d:03:5a:5c:01:4f:f2:ba:ab:71:2f:4b:
                    a6:8e:d3:f4:58:35:f6:6c:56:4e:17:13:84:fd:43:
                    e1:27:06:a7:af:f1:0a:f7:3a:0d:25:4b:3f:56:5b:
                    a8:12:d2:c7:93:a4:81:fd:cc:71:f9:37:c9:36:b9:
                    98:fc:77:5a:97:4f:63:07:3a:ce:53:39:e8:36:2d:
                    c2:57:36:8b:36:9f:f5:ad:55:ff:34:6f:b8:c9:70:
                    25:87:87:47:fa:59:18:b0:59:3b:b5:49:05:b4:12:
                    08:f9:7e:cc:c6:95:a6:ee:41:6b:b4:35:02:9e:4c:
                    e1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3D:BB:7F:9D:86:47:91:88:7D:21:4E:C4:ED:E6:4C:F2:24:65:83
            X509v3 Authority Key Identifier:
                keyid:41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32643a3a2f34382d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:2d::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:a7:4a:5a:dd:9b:fd:9c:e8:77:c7:08:d7:fa:58:47:43:aa:
         e8:8c:b2:ef:fc:61:88:b6:4e:98:ef:e6:1b:45:e7:06:ae:63:
         63:a6:56:d2:a2:09:de:d1:86:7b:cb:b1:bc:42:07:ce:a3:ef:
         d9:09:e6:af:68:5c:6f:38:b9:a2:73:73:80:63:a4:99:16:2c:
         02:7f:39:07:8c:a1:64:49:d8:39:3b:5a:85:11:c1:57:be:c9:
         c2:df:2f:6f:f6:fe:a0:04:21:89:f8:a9:b8:3c:c8:7b:a4:42:
         d1:1b:cd:e0:86:6a:9e:bc:e4:45:c6:4b:84:fd:1d:66:61:93:
         2b:03:58:ec:d5:e9:32:dc:3a:b0:90:b0:7f:36:ac:83:a3:c1:
         27:b6:b4:9f:27:7c:ac:20:3c:9e:70:16:68:ff:78:65:d5:47:
         d2:7e:ae:2b:86:00:39:84:94:0a:65:02:6b:09:be:19:4b:38:
         9f:0d:73:67:25:9c:fa:d8:59:fc:75:8d:d2:ea:75:1c:7e:46:
         ea:c8:7d:1f:a1:e8:16:f3:85:67:ae:ea:f6:75:87:ca:55:be:
         d1:d3:26:5e:01:9d:a0:6f:f4:aa:d5:20:77:38:df:33:8a:c9:
         1a:fe:c2:6b:5f:04:7a:bb:b8:9e:68:f0:51:e7:09:88:1e:29:
         35:dc:73:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:13:57 2025 by rpki-client