Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a34303a3a2f34322d3432203d3e20343031363236.roa
File:                     323630323a663732653a34303a3a2f34322d3432203d3e20343031363236.roa (raw, json)
Hash identifier:          fse9nxWvzUrJwrDW28j5cTPvENiFGY5Iii4OLEs9ECw=
Subject key identifier:   17:1C:CA:18:0B:91:A0:71:1A:24:ED:FF:E1:CC:27:05:D2:97:9D:95
Certificate issuer:       /CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
Certificate serial:       56828E8F657665F73EAF8DE735741A41F1577EE0
Authority key identifier: 0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a34303a3a2f34322d3432203d3e20343031363236.roa
Signing time:             Wed 15 Oct 2025 20:24:36 +0000
ROA not before:           Wed 15 Oct 2025 20:19:36 +0000
ROA not after:            Wed 14 Oct 2026 20:24:36 +0000
asID:                     401626
IP address blocks:        2602:f72e:40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 11:45:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:82:8e:8f:65:76:65:f7:3e:af:8d:e7:35:74:1a:41:f1:57:7e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
        Validity
            Not Before: Oct 15 20:19:36 2025 GMT
            Not After : Oct 14 20:24:36 2026 GMT
        Subject: CN=171CCA180B91A0711A24EDFFE1CC2705D2979D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:e3:ed:91:a8:e9:29:21:9d:06:70:fe:3e:
                    78:06:a0:4f:2a:65:1f:7a:03:1a:42:f1:02:81:66:
                    ad:6e:dd:92:a0:1f:16:1d:d3:9f:d4:87:58:70:98:
                    06:95:90:42:23:44:df:6c:94:32:c2:9a:1c:c6:69:
                    bd:83:5f:1d:70:b8:7c:db:54:43:43:fe:88:b2:16:
                    5c:18:c3:d2:cd:d3:21:ad:da:71:6a:c9:e1:14:ac:
                    03:15:b1:e8:02:4a:da:bf:3c:93:fa:f2:f4:24:1a:
                    c4:05:7a:df:12:b8:ae:8c:8e:b0:36:a6:81:dc:60:
                    2d:3d:70:0c:e9:b8:cf:c1:8c:e3:69:f4:67:17:03:
                    64:9c:cd:38:e6:8d:15:76:bd:82:4c:35:d6:37:f0:
                    8d:d1:43:1e:5d:44:93:64:9a:51:81:1c:ec:bd:9a:
                    fc:45:4b:2b:61:d1:fb:22:9e:58:55:15:ef:44:dc:
                    56:ad:f1:c3:a0:b6:9a:64:c0:92:df:81:29:f4:2b:
                    c4:38:46:2f:b3:14:b1:10:d3:20:ef:11:8c:b4:99:
                    64:f4:64:3a:e2:e1:d3:68:46:aa:2a:f1:14:82:84:
                    de:a8:ea:fd:ec:e6:14:a5:bb:98:ef:5b:c2:25:5c:
                    64:29:07:1f:89:2b:e2:3c:4d:54:0c:cb:c6:46:ca:
                    f8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1C:CA:18:0B:91:A0:71:1A:24:ED:FF:E1:CC:27:05:D2:97:9D:95
            X509v3 Authority Key Identifier:
                keyid:0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a34303a3a2f34322d3432203d3e20343031363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:40::/42

    Signature Algorithm: sha256WithRSAEncryption
         4b:58:5d:1d:26:f3:9d:32:3c:b1:33:fd:d7:0d:41:7e:93:88:
         95:48:dd:69:ec:c2:02:9b:1d:73:0d:7f:3a:d8:06:95:ab:24:
         6e:5a:25:c7:29:b6:86:aa:b1:6e:42:6a:93:f4:aa:ba:95:29:
         d9:8a:ee:80:1a:6e:7b:3e:77:b6:4b:ad:1c:9b:e0:53:d7:c3:
         ea:29:80:d2:e6:ca:97:de:14:d0:3b:11:5d:29:d3:25:47:67:
         7e:ed:39:d9:67:77:75:ac:a3:a4:1c:79:73:3a:6f:53:eb:a0:
         cd:2a:2f:1a:b1:7a:a3:58:ca:cf:bb:9d:ce:ce:32:3a:56:68:
         fb:13:05:48:4d:7c:2b:18:b9:f0:dd:9d:69:b4:3a:3e:82:e9:
         96:2e:7a:c5:cd:2d:80:2d:e2:df:a6:6b:8e:06:a1:23:78:70:
         51:42:9a:c3:c7:48:6e:c7:bd:9c:48:e5:6e:ad:21:2a:00:d1:
         8a:81:a3:e9:81:f0:fb:27:86:53:4b:37:19:ce:34:62:d8:b0:
         1e:3c:4b:14:2c:c0:a9:25:2a:16:9a:92:15:20:91:cb:18:86:
         41:1f:08:2a:4a:d0:25:c8:e5:51:0c:76:15:84:cb:e3:c8:da:
         e4:a4:12:32:a8:a2:f5:2e:73:d2:69:61:96:76:01:2d:d0:68:
         c9:19:07:a7
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUVoKOj2V2Zfc+r43nNXQaQfFXfuAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzY5ZGJjMmVjMTNlYzQyNmMwMjA5MmQ2MTg4YjllYjM0
YmIzMWM2NGRjYWEzMmVlMDUwHhcNMjUxMDE1MjAxOTM2WhcNMjYxMDE0MjAyNDM2
WjAzMTEwLwYDVQQDEygxNzFDQ0ExODBCOTFBMDcxMUEyNEVERkZFMUNDMjcwNUQy
OTc5RDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMzj7ZGo6Skh
nQZw/j54BqBPKmUfegMaQvECgWatbt2SoB8WHdOf1IdYcJgGlZBCI0TfbJQywpoc
xmm9g18dcLh821RDQ/6IshZcGMPSzdMhrdpxasnhFKwDFbHoAkravzyT+vL0JBrE
BXrfEriujI6wNqaB3GAtPXAM6bjPwYzjafRnFwNknM045o0Vdr2CTDXWN/CN0UMe
XUSTZJpRgRzsvZr8RUsrYdH7Ip5YVRXvRNxWrfHDoLaaZMCS34Ep9CvEOEYvsxSx
ENMg7xGMtJlk9GQ64uHTaEaqKvEUgoTeqOr97OYUpbuY71vCJVxkKQcfiSviPE1U
DMvGRsr4TwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFBccyhgLkaBxGiTt/+HMJwXS
l52VMB8GA1UdIwQYMBaAFAwlmUiXZlArmOSarSbT6bMFsUBPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUzZjgyMGY1LzQv
MEMyNTk5NDg5NzY2NTAyQjk4RTQ5QUFEMjZEM0U5QjMwNUIxNDA0Ri5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzY2MzNmLTM0M2QtNGFjMy1hOTM2LTk4OTU4ZTU2MzBlNi8zNjlk
YmMyZWMxM2VjNDI2YzAyMDkyZDYxODhiOWViMzRiYjMxYzY0ZGNhYTMyZWUwNS5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVk
MzA1M2Y4MjBmNS80LzMyMzYzMDMyM2E2NjM3MzI2NTNhMzQzMDNhM2EyZjM0MzIy
ZDM0MzIyMDNkM2UyMDM0MzAzMTM2MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBiYC9y4AQDANBgkq
hkiG9w0BAQsFAAOCAQEAS1hdHSbznTI8sTP91w1BfpOIlUjdaezCApsdcw1/OtgG
laskblolxym2hqqxbkJqk/SqupUp2YrugBpuez53tkutHJvgU9fD6imA0ubKl94U
0DsRXSnTJUdnfu052Wd3dayjpBx5czpvU+ugzSovGrF6o1jKz7udzs4yOlZo+xMF
SE18Kxi58N2dabQ6PoLpli56xc0tgC3i36ZrjgahI3hwUUKaw8dIbse9nEjlbq0h
KgDRioGj6YHw+yeGU0s3Gc40YtiwHjxLFCzAqSUqFpqSFSCRyxiGQR8IKkrQJcjl
UQx2FYTL48ja5KQSMqii9S5z0mlhlnYBLdBoyRkHpw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:36:02 2025 by rpki-client