Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a37303a3a2f34342d3434203d3e203633323836.roa
File:                     323630323a663732653a37303a3a2f34342d3434203d3e203633323836.roa (raw, json)
Hash identifier:          fyT9AMXdTX9BmauUst6blG9MMw3OpH0xL+rJOJ9Y1oA=
Subject key identifier:   25:AB:54:C9:EE:95:8B:58:B6:5C:10:8E:FB:C5:06:6A:59:EF:AC:16
Certificate issuer:       /CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
Certificate serial:       6F2F1073354EA5A8264A2069D7BB93E7A6E36652
Authority key identifier: 0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a37303a3a2f34342d3434203d3e203633323836.roa
Signing time:             Tue 24 Mar 2026 08:08:27 +0000
ROA not before:           Tue 24 Mar 2026 08:03:27 +0000
ROA not after:            Tue 23 Mar 2027 08:08:27 +0000
asID:                     63286
IP address blocks:        2602:f72e:70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2f:10:73:35:4e:a5:a8:26:4a:20:69:d7:bb:93:e7:a6:e3:66:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
        Validity
            Not Before: Mar 24 08:03:27 2026 GMT
            Not After : Mar 23 08:08:27 2027 GMT
        Subject: CN=25AB54C9EE958B58B65C108EFBC5066A59EFAC16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b9:ca:2a:30:50:67:1b:ea:a4:2b:e1:ed:74:
                    39:85:68:24:53:b1:8d:1c:fa:cd:7d:ee:1e:33:97:
                    f9:3b:9e:a9:8b:21:01:ed:69:6e:6c:ed:55:4a:08:
                    d9:c2:87:42:e9:c6:26:45:18:30:91:e6:4e:c9:99:
                    d4:43:26:ff:de:38:be:34:0c:92:89:58:e1:0a:50:
                    7d:ae:1d:e0:26:de:58:55:03:c7:40:93:67:6b:64:
                    0b:41:da:91:84:bb:63:c1:31:c5:8c:6a:10:d2:3a:
                    7f:dd:cb:6e:81:0e:5f:69:1e:c4:cb:3d:71:c6:e0:
                    23:37:a8:1c:3c:d6:b3:74:fe:34:ad:6e:8f:e4:5d:
                    6c:21:69:ca:04:73:37:c3:02:cb:bd:5d:2d:c8:95:
                    a4:24:47:99:fd:28:de:a2:d4:75:4f:c4:13:ad:ea:
                    be:72:8a:59:76:38:c7:c7:a2:45:4a:70:df:09:50:
                    4c:e6:64:f9:24:b7:e6:e3:47:72:1f:8e:35:ed:76:
                    56:7c:e5:5d:f9:64:de:ff:e8:27:0e:07:bd:81:bc:
                    ae:5b:7a:a2:b2:23:4e:c3:cd:ff:0e:76:27:96:7a:
                    de:29:7a:2a:ba:3b:97:10:32:77:e1:91:99:9b:b1:
                    fb:72:21:ef:4f:29:77:c6:3b:2c:a2:91:d3:6e:3e:
                    e9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AB:54:C9:EE:95:8B:58:B6:5C:10:8E:FB:C5:06:6A:59:EF:AC:16
            X509v3 Authority Key Identifier:
                keyid:0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a37303a3a2f34342d3434203d3e203633323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:70::/44

    Signature Algorithm: sha256WithRSAEncryption
         69:62:68:df:ce:d7:f9:22:af:37:0f:d2:a9:db:0c:8a:2a:c2:
         ed:a2:f4:d7:6f:0d:ae:a2:bc:92:55:6f:e2:35:6f:4f:97:d1:
         ea:f2:c4:55:66:05:04:4b:37:1d:29:07:e0:bc:7a:99:0e:21:
         e9:28:ab:a1:4d:6b:a3:a8:c2:15:33:1e:fb:07:89:31:d6:77:
         94:25:25:69:20:73:e4:4a:d9:f7:6f:88:be:c3:c2:82:60:03:
         d3:93:6c:24:6c:4c:85:e4:c4:d0:f0:58:05:ba:a5:58:57:3e:
         aa:a6:5c:ca:e0:85:6c:68:e9:f6:8b:fb:ec:12:6d:29:1a:aa:
         03:f4:28:1d:c1:1c:aa:6a:c0:6e:5b:03:9f:74:26:ad:50:19:
         96:ea:9b:75:c9:bc:9f:e7:15:60:16:a3:11:da:84:b1:b6:7e:
         f8:64:a4:4b:ef:c6:91:ae:76:28:42:12:fd:20:97:87:ce:b9:
         20:f8:9b:21:3d:3e:28:49:1d:7d:75:25:76:d7:a1:0e:44:5d:
         ae:e1:28:72:ad:9f:e7:b7:82:5b:96:ef:b9:42:d7:b2:db:b4:
         c7:3e:59:f3:22:34:a1:a0:5d:e5:40:a3:4a:48:e5:52:b9:11:
         42:88:62:9c:ea:03:42:98:ee:08:f1:9f:5a:c6:37:9a:35:31:
         5d:4b:54:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:29:12 2026 by rpki-client