Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a3130303a3a2f34302d3438203d3e20323039313039.roa
File:                     323630323a663764633a3130303a3a2f34302d3438203d3e20323039313039.roa (raw, json)
Hash identifier:          tgHd/GQ4Mlf0uv/EGsgFMLYe2ajocDRl8e+YHlBQpa8=
Subject key identifier:   9B:58:E3:62:65:CE:FE:A9:E6:9D:C9:35:3C:37:9E:A4:6F:BE:F2:FC
Certificate issuer:       /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial:       07161F841EE0BC99E9B28A59EAE82200376A9D6A
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a3130303a3a2f34302d3438203d3e20323039313039.roa
Signing time:             Thu 11 Sep 2025 14:11:05 +0000
ROA not before:           Thu 11 Sep 2025 14:06:05 +0000
ROA not after:            Thu 10 Sep 2026 14:11:05 +0000
asID:                     209109
IP address blocks:        2602:f7dc:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:16:1f:84:1e:e0:bc:99:e9:b2:8a:59:ea:e8:22:00:37:6a:9d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
        Validity
            Not Before: Sep 11 14:06:05 2025 GMT
            Not After : Sep 10 14:11:05 2026 GMT
        Subject: CN=9B58E36265CEFEA9E69DC9353C379EA46FBEF2FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:a9:d2:8b:0c:25:39:87:f0:0b:06:b1:89:
                    9f:ed:5a:e2:2a:2b:7a:ba:1b:04:84:71:37:73:3a:
                    52:70:a8:f0:0b:79:14:60:ac:b2:bd:8c:5d:cb:4a:
                    96:31:0f:7f:a7:72:bf:b8:ce:61:db:83:63:dc:15:
                    54:12:ef:33:27:12:25:38:fb:ee:e5:34:63:bb:0b:
                    46:34:02:82:64:d2:0c:0a:06:74:e1:c4:76:9b:ea:
                    d3:8f:30:50:d4:02:87:72:11:18:e4:60:f5:c9:3d:
                    a1:7a:7c:ba:6c:67:22:c7:a5:fb:89:04:43:61:a5:
                    ca:28:9e:28:c7:3a:c0:28:8c:02:fc:6e:10:30:09:
                    20:41:4a:69:bc:de:1a:53:ea:45:ea:12:25:bc:66:
                    da:c1:cb:20:9e:c8:ab:40:f6:2c:75:85:af:04:30:
                    cb:01:77:9f:d0:fc:4e:d1:1c:33:b4:8e:c1:00:4e:
                    a1:34:26:c2:4d:e6:ba:a1:8e:2c:76:3d:91:54:87:
                    28:b2:21:15:da:d4:42:d6:80:48:14:90:bc:8c:e0:
                    f9:45:aa:c6:36:14:73:09:12:d9:da:ee:5b:b6:91:
                    7c:28:46:ff:40:7c:4b:2a:63:c0:20:b4:d6:01:74:
                    44:b5:3d:3c:24:50:cf:77:2f:ce:1f:32:1a:2d:a9:
                    b2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:58:E3:62:65:CE:FE:A9:E6:9D:C9:35:3C:37:9E:A4:6F:BE:F2:FC
            X509v3 Authority Key Identifier:
                keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a3130303a3a2f34302d3438203d3e20323039313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7dc:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         ad:2a:e3:09:9a:32:fe:f1:b3:09:64:ba:2b:88:2b:90:8f:86:
         e7:75:10:9f:7e:33:16:eb:06:f4:a4:77:be:40:8b:46:0f:7e:
         2f:71:31:4f:3f:43:d0:76:1a:4b:81:d8:a1:46:2f:c5:f9:a4:
         7a:ac:b5:78:cd:d9:35:56:f5:58:5e:13:af:3d:d7:49:7f:d0:
         af:84:8d:54:43:32:f4:50:08:00:86:de:f3:03:a3:81:83:45:
         8e:f5:1c:0b:e9:4e:3d:50:9f:1f:14:be:74:c5:df:81:c8:ea:
         e3:4f:44:96:38:5e:f8:14:91:60:da:60:71:4b:2a:f0:3d:af:
         7c:bb:78:a0:c6:d7:19:8b:f0:20:41:9f:ce:72:d5:7a:99:4e:
         47:b5:92:f5:7c:16:98:c1:20:1c:66:37:33:b6:bb:a5:cd:85:
         2f:ba:4a:e0:08:5d:01:ea:f1:62:3f:1d:55:31:92:15:fe:a3:
         86:32:7f:2c:ee:49:24:b7:ef:e2:cd:b8:be:17:b8:d5:d6:90:
         16:78:66:ff:cf:57:30:c4:0d:29:24:49:19:b2:45:7a:54:8d:
         53:25:38:82:3c:64:42:58:c6:58:fc:5d:ee:ee:8c:20:17:54:
         cc:58:aa:30:66:60:42:92:42:33:f6:d2:ae:ca:e1:15:bb:c6:
         b1:c0:97:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:22:06 2025 by rpki-client