Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a32303a3a2f34342d3438203d3e203134343437.roa
File:                     323630323a663631333a32303a3a2f34342d3438203d3e203134343437.roa (raw, json)
Hash identifier:          qhTK80Fd0DuwnXoeCDLcr+M18RWZfLD6RIw2HWrlb+0=
Subject key identifier:   F2:F4:98:41:5B:9B:AE:53:F4:D6:4A:03:2D:E7:DE:82:C6:44:1E:4F
Certificate issuer:       /CN=5d9371e706db917120354ce162e131307448d445d3bda534e4
Certificate serial:       6ECB32BF6801508F3FD92B2A5CFBB47AEA14C889
Authority key identifier: 31:8A:31:E0:F9:B2:FD:58:4D:99:4E:84:8E:7E:81:7C:CC:91:52:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a32303a3a2f34342d3438203d3e203134343437.roa
Signing time:             Tue 09 Sep 2025 13:42:36 +0000
ROA not before:           Tue 09 Sep 2025 13:37:36 +0000
ROA not after:            Tue 08 Sep 2026 13:42:36 +0000
asID:                     14447
IP address blocks:        2602:f613:20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/15838c48-cf11-45c4-8e0b-0455f2640cd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/15838c48-cf11-45c4-8e0b-0455f2640cd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:cb:32:bf:68:01:50:8f:3f:d9:2b:2a:5c:fb:b4:7a:ea:14:c8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9371e706db917120354ce162e131307448d445d3bda534e4
        Validity
            Not Before: Sep  9 13:37:36 2025 GMT
            Not After : Sep  8 13:42:36 2026 GMT
        Subject: CN=F2F498415B9BAE53F4D64A032DE7DE82C6441E4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:39:f0:23:12:d0:4c:3a:76:d4:a7:25:23:
                    9b:bd:ae:db:9c:3a:9b:5a:dc:e4:a5:bf:43:92:90:
                    07:6e:d7:8d:62:70:54:fb:93:55:c0:af:f0:ff:bf:
                    ac:85:2f:3c:db:4e:8a:6b:aa:15:45:f1:62:53:80:
                    3a:7a:1d:2a:4f:40:db:b2:26:9a:7b:1d:fc:0e:44:
                    be:3b:c1:5f:00:a2:55:4a:73:29:69:8c:dc:7f:c3:
                    93:db:41:a1:13:79:df:36:52:49:3a:78:f4:c3:30:
                    db:84:6c:e8:fa:d9:83:d9:49:b6:a6:82:40:75:b0:
                    97:0c:b2:00:0f:55:be:7c:91:f2:c6:0f:0c:63:95:
                    2c:d8:59:2a:e6:3b:61:29:15:a5:75:73:bd:7f:78:
                    ce:82:5e:3e:b8:83:da:64:2a:ce:25:da:11:61:fd:
                    92:ac:cf:5f:3d:67:df:a9:09:1e:fb:76:ef:42:f7:
                    53:ad:ef:3a:bd:65:0d:29:22:4c:21:b9:76:f5:6b:
                    de:84:b2:12:10:bc:01:f5:0f:3b:6a:97:06:1c:56:
                    e0:46:f0:9d:f9:7b:8b:68:a9:85:61:91:1a:94:3c:
                    2a:b1:bc:a0:82:2e:31:bd:e9:cc:b7:b4:14:5f:c9:
                    fa:d2:21:5a:96:f2:83:da:1e:e2:6f:bc:55:7e:29:
                    ac:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F4:98:41:5B:9B:AE:53:F4:D6:4A:03:2D:E7:DE:82:C6:44:1E:4F
            X509v3 Authority Key Identifier:
                keyid:31:8A:31:E0:F9:B2:FD:58:4D:99:4E:84:8E:7E:81:7C:CC:91:52:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a32303a3a2f34342d3438203d3e203134343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f613:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         4b:1b:34:d2:99:3f:a3:2e:ba:f0:98:80:39:e0:dd:64:d4:88:
         c1:41:bd:d1:c1:36:3b:94:8c:d5:7f:9f:f4:69:9c:77:15:3c:
         c5:89:35:49:5c:c5:f8:fb:e9:c3:39:f5:e4:7c:39:ae:be:51:
         6b:43:ea:c6:68:fd:57:e5:36:74:24:5a:e9:ff:03:23:00:e5:
         90:d6:2c:7c:7a:df:76:65:1f:a7:2d:d4:c6:6c:70:da:a3:39:
         55:d8:e0:1c:81:01:7b:b4:2e:81:99:e3:1a:2d:ba:f5:5d:28:
         bc:dc:d5:87:53:be:7a:2c:e6:50:23:9a:17:7c:48:a1:4a:f8:
         92:a8:a7:95:ec:b4:87:9c:ad:b0:f8:d7:e0:d4:14:e5:9f:1f:
         3d:12:49:2c:83:8f:0e:7f:3e:cd:33:ba:90:c4:df:8a:3f:9e:
         15:94:5d:2b:17:2c:b4:85:e0:fa:b0:7f:4f:4d:f9:0b:1c:c7:
         4c:cb:e8:39:76:ab:f1:a7:b3:4e:1a:5f:dd:78:a2:84:81:8b:
         eb:af:05:83:a9:84:a3:14:19:12:30:bd:59:19:06:cb:61:f1:
         c4:7f:1d:d2:d2:c9:1d:9c:1f:4e:30:5b:9e:b4:b9:59:30:de:
         a2:c2:9d:57:51:c9:4f:3d:99:b0:59:a6:63:cc:9e:10:62:49:
         eb:a6:66:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:50:29 2025 by rpki-client