Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32303a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a32303a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          jK6TDp9GUfORne+Wh5sM1WKgSk5+dJEa/3mehtjOzRU=
Subject key identifier:   39:6F:2C:4D:06:AA:A3:89:51:79:1C:F1:B9:E6:CE:B9:CF:B4:C8:6F
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       110FA4540A92258C237BEE21B0F1C9EB14143213
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32303a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 25 Sep 2025 21:45:11 +0000
ROA not before:           Thu 25 Sep 2025 21:40:11 +0000
ROA not after:            Thu 24 Sep 2026 21:45:11 +0000
asID:                     54148
IP address blocks:        2602:fa43:20::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:0f:a4:54:0a:92:25:8c:23:7b:ee:21:b0:f1:c9:eb:14:14:32:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Sep 25 21:40:11 2025 GMT
            Not After : Sep 24 21:45:11 2026 GMT
        Subject: CN=396F2C4D06AAA38951791CF1B9E6CEB9CFB4C86F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:54:16:7d:cd:53:3d:46:88:8f:8d:f2:0c:3f:
                    f1:e9:70:ba:bd:8e:13:62:28:d0:61:f5:ab:e7:ae:
                    f9:34:da:9b:42:b5:d4:93:45:67:15:b8:d3:04:0b:
                    39:02:98:1c:f9:c7:db:73:ff:e2:1a:cb:20:2b:95:
                    05:15:cb:ef:fd:f0:ce:05:97:6b:fe:f8:57:26:1c:
                    75:47:50:4c:59:a4:a1:cf:99:07:f3:dc:7e:1b:de:
                    bc:0a:23:f2:4b:7e:57:d0:b6:14:54:a6:15:4e:e5:
                    74:7c:e4:ca:68:19:0d:98:41:56:69:45:9f:fa:88:
                    56:da:da:30:23:5e:63:e6:aa:47:de:87:0f:cd:f7:
                    de:86:23:9b:84:0a:98:f7:e3:3f:43:be:7d:ce:82:
                    dd:fa:b8:7c:60:31:ec:ce:07:c9:fc:44:62:0e:70:
                    dd:0c:26:2f:4d:eb:93:30:77:ea:18:a1:dc:fc:51:
                    4c:b2:61:6c:5d:44:0b:8e:1b:4c:ff:e4:b1:2f:2a:
                    e5:4e:41:12:28:90:bd:b0:6e:96:b4:ab:93:c1:c7:
                    3b:f3:ce:d9:d6:66:40:85:1c:94:01:5e:5e:67:a9:
                    a1:bc:46:98:f2:ac:92:9a:5a:fd:b4:57:9e:82:60:
                    2f:d2:d1:d8:51:4b:71:9f:96:a1:d7:df:86:39:60:
                    8e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6F:2C:4D:06:AA:A3:89:51:79:1C:F1:B9:E6:CE:B9:CF:B4:C8:6F
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32303a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:20::/46

    Signature Algorithm: sha256WithRSAEncryption
         5d:bc:75:d3:41:d3:ec:7f:67:af:c6:ed:8c:12:6f:15:4a:c2:
         4a:fb:2b:2d:32:9a:4f:53:6e:a0:0a:19:25:36:57:e3:73:0e:
         92:fc:e4:0d:ab:d8:3e:69:c2:15:f1:91:66:f8:e1:1d:f9:23:
         ea:4b:88:b9:9f:df:0a:92:2d:91:3e:bf:49:aa:b9:3a:68:40:
         25:7e:76:56:91:96:b0:6d:cb:28:a8:2f:a6:5e:fe:ca:af:44:
         9b:6d:60:bd:e4:df:6d:1f:33:ab:64:e8:16:2f:10:89:89:ba:
         7a:0c:14:4e:eb:4b:3b:0f:b8:03:a8:27:18:d0:d6:7e:12:a1:
         fb:ac:cd:76:68:ca:39:54:e0:14:23:78:70:ca:b2:bd:46:8b:
         38:84:31:b9:a3:da:e5:eb:6e:cb:e5:b0:86:42:46:61:64:31:
         62:29:15:6c:62:9e:b8:45:65:cc:04:24:ed:02:a0:33:5d:5d:
         72:62:51:8e:e1:fa:c5:4f:30:8f:0d:72:ad:ba:25:17:57:d2:
         07:49:26:5a:75:25:b1:3b:47:8e:4f:35:6b:b8:44:18:59:44:
         d1:6d:ca:7e:7d:5f:29:c8:dd:8b:26:8c:75:ff:80:28:ae:64:
         c2:46:bb:06:60:fe:3f:c4:54:70:48:19:6b:d7:00:5a:e1:6d:
         19:20:41:2c
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUEQ+kVAqSJYwje+4hsPHJ6xQUMhMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2VjYWUzMjA0OTUyZGE3NGViMWI5MzcxNGI2N2NjNjFi
YzRmN2IxNTk1YTIxMzI3ODgwHhcNMjUwOTI1MjE0MDExWhcNMjYwOTI0MjE0NTEx
WjAzMTEwLwYDVQQDEygzOTZGMkM0RDA2QUFBMzg5NTE3OTFDRjFCOUU2Q0VCOUNG
QjRDODZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lQWfc1TPUaI
j43yDD/x6XC6vY4TYijQYfWr5675NNqbQrXUk0VnFbjTBAs5Apgc+cfbc//iGssg
K5UFFcvv/fDOBZdr/vhXJhx1R1BMWaShz5kH89x+G968CiPyS35X0LYUVKYVTuV0
fOTKaBkNmEFWaUWf+ohW2towI15j5qpH3ocPzffehiObhAqY9+M/Q759zoLd+rh8
YDHszgfJ/ERiDnDdDCYvTeuTMHfqGKHc/FFMsmFsXUQLjhtM/+SxLyrlTkESKJC9
sG6WtKuTwcc7887Z1mZAhRyUAV5eZ6mhvEaY8qySmlr9tFeegmAv0tHYUUtxn5ah
19+GOWCOpQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFDlvLE0GqqOJUXkc8bnmzrnP
tMhvMB8GA1UdIwQYMBaAFARA7JGuBOgEkb9mFzYJfzVpx9sbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyYmFjYjdhYmI3YTI4LzMv
MDQ0MEVDOTFBRTA0RTgwNDkxQkY2NjE3MzYwOTdGMzU2OUM3REIxQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiL2VlMWJkZmY4LWRiYjUtNGYwZi05OGU2LWM4ZTEzMjZiYTc5Yi83ZWNh
ZTMyMDQ5NTJkYTc0ZWIxYjkzNzE0YjY3Y2M2MWJjNGY3YjE1OTVhMjEzMjc4OC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5MmJh
Y2I3YWJiN2EyOC8zLzMyMzYzMDMyM2E2NjYxMzQzMzNhMzIzMDNhM2EyZjM0MzYy
ZDM0MzYyMDNkM2UyMDM1MzQzMTM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwImAvpDACAwDQYJKoZI
hvcNAQELBQADggEBAF28ddNB0+x/Z6/G7YwSbxVKwkr7Ky0ymk9TbqAKGSU2V+Nz
DpL85A2r2D5pwhXxkWb44R35I+pLiLmf3wqSLZE+v0mquTpoQCV+dlaRlrBtyyio
L6Ze/sqvRJttYL3k320fM6tk6BYvEImJunoMFE7rSzsPuAOoJxjQ1n4SofuszXZo
yjlU4BQjeHDKsr1GiziEMbmj2uXrbsvlsIZCRmFkMWIpFWxinrhFZcwEJO0CoDNd
XXJiUY7h+sVPMI8Ncq26JRdX0gdJJlp1JbE7R45PNWu4RBhZRNFtyn59XynI3Ysm
jHX/gCiuZMJGuwZg/j/EVHBIGWvXAFrhbRkgQSw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:43 2025 by rpki-client