Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a33643a3a2f34382d3438203d3e20323035393431.roa
File:                     323630323a663732653a33643a3a2f34382d3438203d3e20323035393431.roa (raw, json)
Hash identifier:          90ZadeGB1kVIDVdmZONOVW2GVkGAs80R3alLvZSUlns=
Subject key identifier:   E1:AF:0B:F8:37:F6:A7:D4:43:9D:9C:E6:30:4E:C9:BE:56:96:87:06
Certificate issuer:       /CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
Certificate serial:       3BC38568EA4264448F854281DA043F51D39B736D
Authority key identifier: 0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a33643a3a2f34382d3438203d3e20323035393431.roa
Signing time:             Wed 15 Oct 2025 20:24:36 +0000
ROA not before:           Wed 15 Oct 2025 20:19:36 +0000
ROA not after:            Wed 14 Oct 2026 20:24:36 +0000
asID:                     205941
IP address blocks:        2602:f72e:3d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 11:45:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c3:85:68:ea:42:64:44:8f:85:42:81:da:04:3f:51:d3:9b:73:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
        Validity
            Not Before: Oct 15 20:19:36 2025 GMT
            Not After : Oct 14 20:24:36 2026 GMT
        Subject: CN=E1AF0BF837F6A7D4439D9CE6304EC9BE56968706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e8:81:c6:0a:d3:63:b5:ac:36:48:2e:26:54:
                    22:7b:f0:0c:fd:0c:fe:8b:5d:6b:8b:01:6a:30:53:
                    45:58:57:fa:48:bd:87:24:bc:12:bf:40:48:6d:a2:
                    96:62:c0:df:b2:fb:fc:42:34:a2:55:4b:64:f4:78:
                    89:32:1b:50:3a:0d:b6:fe:66:48:94:ff:20:ca:ea:
                    92:d0:41:a6:d3:6e:b8:92:25:a0:08:71:c3:65:c4:
                    c6:17:a0:c4:c3:d6:df:3b:fe:0a:f8:28:0b:71:67:
                    c6:e3:5c:ac:a6:ff:d9:20:85:ed:82:13:0c:cb:9b:
                    0b:cb:bf:35:1a:2e:ae:49:0e:dc:92:3b:5e:68:17:
                    07:b3:a5:c4:d3:46:e2:a9:fd:a8:b6:3f:c5:8c:4d:
                    b4:05:79:1d:05:c0:b9:79:5b:67:56:4f:68:17:3c:
                    30:43:22:5d:25:27:45:e2:53:ea:c8:1f:ca:86:03:
                    bd:cf:fb:77:11:0f:46:c6:24:e1:d3:62:f1:2c:e9:
                    c3:e3:9d:18:39:37:d1:29:2f:3e:ec:48:e3:97:34:
                    9d:74:f2:6b:14:cf:2f:7f:5d:65:fe:d7:5a:21:e8:
                    08:18:c9:48:11:10:b9:20:60:10:8e:d4:ab:66:cd:
                    7c:d2:1d:fe:84:c9:a5:fb:83:45:6d:41:af:e8:0e:
                    8a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AF:0B:F8:37:F6:A7:D4:43:9D:9C:E6:30:4E:C9:BE:56:96:87:06
            X509v3 Authority Key Identifier:
                keyid:0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a33643a3a2f34382d3438203d3e20323035393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:3d::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:c4:66:6d:ae:7f:aa:2c:11:18:0e:cf:fb:b3:e4:9c:de:ee:
         90:51:bc:1d:01:49:f7:fb:d6:38:a9:ec:f5:71:d0:b3:26:59:
         ff:ea:90:bd:51:c8:0c:38:c4:c0:0d:35:85:f4:06:1e:11:e1:
         81:d8:54:2b:f3:14:f8:b6:7a:fe:b2:a3:1b:11:8f:14:c0:7a:
         80:4d:a8:bf:bb:7c:7e:3a:f7:3b:ff:0e:90:f6:76:45:db:53:
         b5:5c:c4:8a:48:1f:17:a4:cc:dc:09:a8:68:c3:cd:b1:c8:bc:
         fb:70:63:68:95:f0:e6:7c:22:4f:fb:a4:5e:6e:5b:5b:d2:9c:
         45:d8:34:ce:f0:5a:c2:39:cd:15:ab:9a:71:9a:e9:4d:06:68:
         e2:72:86:e3:0a:ee:fe:d0:a8:78:26:fa:dc:ad:31:17:08:e0:
         cb:7a:0c:16:95:ee:5e:e1:bd:28:55:4d:c0:c5:ba:bc:c4:d7:
         84:c8:81:30:5b:5b:dd:a8:b6:2a:76:f3:dc:53:6e:0e:60:b8:
         5d:d2:d8:f9:ce:07:e6:fa:07:e2:9e:43:f8:72:f7:1c:4f:50:
         3e:65:f3:f7:1b:1e:40:ca:37:86:2d:c0:25:49:57:48:3a:0b:
         b2:fe:1d:ef:17:0e:df:21:60:bd:f0:26:93:da:54:f0:f0:c2:
         2c:1a:24:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:18:45 2025 by rpki-client