Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a383a3a2f34382d3438203d3e20323136333131.roa
File:                     323630323a663732653a383a3a2f34382d3438203d3e20323136333131.roa (raw, json)
Hash identifier:          MD+uoJQKYrVF/g3P4Qqof7VgXnSPl7eV+Bav9xBdWi4=
Subject key identifier:   B9:AD:2C:63:B7:AB:81:0C:53:68:FA:B9:B9:B6:50:DF:6A:7F:A8:A2
Certificate issuer:       /CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
Certificate serial:       49E44F9CED07E6C2E32199A63198D7D7AFDA627B
Authority key identifier: 0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a383a3a2f34382d3438203d3e20323136333131.roa
Signing time:             Wed 15 Oct 2025 20:24:36 +0000
ROA not before:           Wed 15 Oct 2025 20:19:36 +0000
ROA not after:            Wed 14 Oct 2026 20:24:36 +0000
asID:                     216311
IP address blocks:        2602:f72e:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 11:45:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e4:4f:9c:ed:07:e6:c2:e3:21:99:a6:31:98:d7:d7:af:da:62:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
        Validity
            Not Before: Oct 15 20:19:36 2025 GMT
            Not After : Oct 14 20:24:36 2026 GMT
        Subject: CN=B9AD2C63B7AB810C5368FAB9B9B650DF6A7FA8A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:5a:4f:87:c8:fe:f6:43:92:12:3e:53:e6:
                    19:49:29:29:34:d9:b0:7f:37:da:48:15:97:96:b5:
                    e2:e6:04:14:81:ee:d7:72:e0:c9:65:13:69:31:24:
                    20:50:0e:79:b4:22:2a:eb:67:b3:b1:8f:ce:d1:5f:
                    9c:04:99:b7:8e:bb:f4:9a:ae:9f:14:07:cc:80:da:
                    fc:b6:7e:1b:d9:0e:8b:ac:b1:b3:e0:b7:6b:69:d0:
                    65:7d:16:6b:84:a3:d8:56:b8:c3:4b:db:e7:bc:7a:
                    be:07:32:5e:da:73:63:7f:11:1c:01:ef:7c:65:fe:
                    0c:87:18:ce:01:3a:06:3d:66:32:59:cf:f0:90:6a:
                    40:62:ce:40:3f:26:ae:b1:3a:78:1d:58:71:2d:6c:
                    8c:93:2e:90:80:88:32:95:83:79:a2:0d:84:96:0e:
                    f7:82:26:c4:69:6f:7f:7d:d5:76:20:4c:70:ce:26:
                    a7:fa:f4:5b:43:41:fd:d3:67:87:52:46:ee:32:f4:
                    67:c0:de:1c:ca:e4:4a:ca:60:5a:88:f6:80:6c:a8:
                    44:6e:d9:81:da:36:1f:c1:bc:86:a7:8d:eb:93:c6:
                    6e:0e:97:53:81:9b:26:52:65:f7:a2:03:ea:7a:e8:
                    a9:d0:78:d7:58:3a:40:a7:f7:09:1e:57:f5:54:a0:
                    59:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AD:2C:63:B7:AB:81:0C:53:68:FA:B9:B9:B6:50:DF:6A:7F:A8:A2
            X509v3 Authority Key Identifier:
                keyid:0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a383a3a2f34382d3438203d3e20323136333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:b0:22:ee:e6:b1:7e:a9:bb:f2:5e:d8:df:c6:14:61:86:b6:
         23:74:36:66:75:b2:4f:1f:2f:25:f5:59:7c:93:19:7b:c0:b7:
         9e:a8:c6:2a:2c:bc:ae:c0:a9:94:60:c2:38:73:59:20:2c:78:
         4c:ee:38:8d:35:67:1f:e5:86:18:44:3c:84:21:b5:1a:e8:08:
         a8:2a:e0:ea:86:5c:2e:19:b0:18:1a:84:3f:87:75:a4:94:4a:
         8c:d1:1e:66:3c:b1:8e:a0:35:62:41:3b:5b:3a:75:4a:51:ab:
         27:3b:c1:07:a2:6d:87:05:89:dc:70:d2:68:c2:b4:76:0e:b3:
         55:c0:e2:7e:6c:0c:66:9b:94:93:2e:c5:4e:42:2b:1a:2e:2f:
         56:47:bb:50:d3:cd:6a:5e:ab:62:c5:a9:c0:4b:d2:00:46:c6:
         d0:b6:54:93:8d:d5:61:06:8f:7a:b2:1b:08:28:c6:56:5e:ae:
         40:42:a8:c5:93:89:70:05:8d:fd:6f:f9:9b:36:72:08:cc:b4:
         76:b9:bb:cd:bb:36:40:92:70:e6:e3:95:2e:65:bf:b8:03:de:
         93:26:d6:ad:cb:47:ed:23:53:4f:d4:1a:63:de:35:e1:96:b1:
         8c:ad:66:47:ff:94:29:f8:5c:19:76:9f:46:b3:0d:23:53:63:
         0e:6c:d8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:15:51 2025 by rpki-client