Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a343a3a2f34362d3438203d3e20333936303530.roa
File:                     323630323a663764633a343a3a2f34362d3438203d3e20333936303530.roa (raw, json)
Hash identifier:          rlLzn//JcDU82MnemCpOiFcDuAi43doBSnStGYdr2sM=
Subject key identifier:   35:E9:D9:87:59:55:24:E9:7A:A8:6A:D8:06:9E:36:AE:CC:F1:9E:A5
Certificate issuer:       /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial:       7AFE34186FC775CC4E406B2E2BD7E7013437D858
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a343a3a2f34362d3438203d3e20333936303530.roa
Signing time:             Sat 20 Sep 2025 18:12:49 +0000
ROA not before:           Sat 20 Sep 2025 18:07:49 +0000
ROA not after:            Sat 19 Sep 2026 18:12:49 +0000
asID:                     396050
IP address blocks:        2602:f7dc:4::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fe:34:18:6f:c7:75:cc:4e:40:6b:2e:2b:d7:e7:01:34:37:d8:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
        Validity
            Not Before: Sep 20 18:07:49 2025 GMT
            Not After : Sep 19 18:12:49 2026 GMT
        Subject: CN=35E9D987595524E97AA86AD8069E36AECCF19EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a3:95:ce:7b:9d:ed:8b:01:e4:5b:dc:86:c2:
                    bc:e6:44:c2:66:46:64:2a:30:95:1a:6c:62:d5:7c:
                    19:bb:8a:80:d3:d5:8b:72:57:eb:d1:24:07:11:18:
                    9b:61:53:5e:46:64:1d:ab:cf:9c:2c:d2:35:48:4b:
                    bf:93:c4:56:24:66:78:b9:41:0f:58:04:f7:92:74:
                    6f:1e:b9:9b:50:d6:86:f4:22:94:c4:cd:71:3a:51:
                    ad:15:d0:4b:d0:2a:fe:fb:ac:a9:c5:d3:a4:9f:09:
                    2e:6a:1e:47:ce:8d:0a:b4:a9:fa:6f:f9:fb:ef:87:
                    53:b1:94:46:80:66:ff:55:4a:e1:34:fd:8f:79:c1:
                    29:95:1c:80:56:9c:3d:17:af:96:ef:51:e2:a5:b7:
                    5e:5f:eb:e2:d9:c0:22:91:71:17:34:be:c6:9e:ce:
                    48:bb:f8:f2:af:56:60:d0:20:54:33:b1:ac:e2:c4:
                    c9:cd:97:98:46:b7:98:7d:36:49:12:cb:d0:53:81:
                    ab:1d:cd:61:a0:f3:80:09:f2:06:5d:82:18:1c:e4:
                    44:96:dd:ba:c2:06:84:5e:47:27:ea:09:a0:72:f6:
                    7b:ed:f2:92:67:21:ed:57:7a:bc:b0:dc:b3:c0:5c:
                    09:c5:b3:50:ae:e5:27:f6:a9:43:aa:91:e7:1f:52:
                    d3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E9:D9:87:59:55:24:E9:7A:A8:6A:D8:06:9E:36:AE:CC:F1:9E:A5
            X509v3 Authority Key Identifier:
                keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a343a3a2f34362d3438203d3e20333936303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7dc:4::/46

    Signature Algorithm: sha256WithRSAEncryption
         65:13:44:42:4c:f5:14:b5:10:a7:ab:03:56:57:8d:84:6a:1b:
         ab:f1:78:58:9d:bf:98:18:d7:fe:86:45:3e:28:21:17:ed:bf:
         59:ac:19:65:ae:ee:ba:07:54:39:c6:61:a1:b2:54:88:32:f0:
         9b:02:c7:17:d9:3a:51:fe:fb:da:50:25:3a:6c:a1:47:2a:83:
         65:9b:b7:b7:22:b0:c1:1a:ef:1e:28:4f:98:f6:15:f8:d5:6b:
         1a:c9:5e:0f:bd:92:9a:07:ee:01:42:af:1b:10:c8:33:a2:a4:
         0b:2a:c0:09:74:6d:c0:79:eb:1f:c8:85:c6:2f:9b:e7:a9:5a:
         7f:05:42:0e:03:e5:3c:1f:b9:76:4c:0f:84:fc:28:45:9a:a0:
         ed:b6:10:7d:4c:a2:e9:39:70:b5:74:1b:fd:84:e2:cf:44:fb:
         42:d0:c3:99:44:02:f1:38:ae:ae:0a:98:c9:70:c8:32:be:22:
         aa:7e:1b:14:5c:f7:d6:87:3a:7e:f5:4a:d6:cf:52:2d:6d:f7:
         5d:e1:97:b4:ab:9c:a4:8d:4b:14:ac:97:b1:a0:a3:5a:07:2b:
         2f:42:c1:d0:67:5f:d0:9f:89:26:06:fc:a8:47:40:14:dc:bf:
         8d:28:a7:03:0f:1b:b2:d2:24:d9:05:8d:30:22:db:63:6a:41:
         8f:9e:d1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:28:21 2025 by rpki-client