Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a3a2f33362d3336203d3e203131333538.roa
File:                     323630323a663937653a3a2f33362d3336203d3e203131333538.roa (raw, json)
Hash identifier:          6wWhh4ZVy2I6gmW8Dr/nOusXCwoMSaIVcg8w8wQgLFk=
Subject key identifier:   78:DC:D1:F8:1B:47:05:33:45:8B:E2:54:81:EE:AB:F3:5B:1A:09:2E
Certificate issuer:       /CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Certificate serial:       4752925B7547E6EEE6687F4307108CBE6DA5BBD0
Authority key identifier: D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a3a2f33362d3336203d3e203131333538.roa
Signing time:             Sun 19 Oct 2025 01:18:51 +0000
ROA not before:           Sun 19 Oct 2025 01:13:51 +0000
ROA not after:            Sun 18 Oct 2026 01:18:51 +0000
asID:                     11358
IP address blocks:        2602:f97e::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:52:92:5b:75:47:e6:ee:e6:68:7f:43:07:10:8c:be:6d:a5:bb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
        Validity
            Not Before: Oct 19 01:13:51 2025 GMT
            Not After : Oct 18 01:18:51 2026 GMT
        Subject: CN=78DCD1F81B470533458BE25481EEABF35B1A092E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1a:f7:bc:36:8e:e7:8d:10:24:45:35:77:d0:
                    f2:2e:a2:6c:9f:56:8e:da:6b:69:04:76:71:17:c7:
                    77:15:91:41:41:84:eb:b7:51:1e:34:69:4d:6d:58:
                    36:dd:84:e8:f7:64:82:d2:35:73:fc:ed:8b:cf:10:
                    97:f7:a7:2f:77:94:16:bd:12:52:fa:49:76:e2:a3:
                    72:72:7c:ed:5a:b1:e5:db:72:dd:7c:50:60:67:bc:
                    6b:59:87:de:05:fc:ce:d4:ff:93:14:7d:18:77:84:
                    7e:3d:cb:9b:d1:7c:5c:26:87:a3:f3:10:bf:a9:47:
                    7a:12:de:b6:b8:40:47:02:44:71:7f:de:1e:aa:74:
                    d8:1b:b2:b2:70:ee:8c:56:0d:da:a7:d9:8f:79:79:
                    b9:27:ce:86:78:79:c6:43:3c:b9:32:10:6e:95:62:
                    bd:57:07:af:a8:87:02:7c:57:0e:5f:98:2d:1d:23:
                    e7:93:6b:2a:e2:04:60:b3:3d:92:1d:d8:30:31:af:
                    b1:33:4f:fc:3c:1c:1e:c9:7b:8c:21:f8:2f:e5:2c:
                    47:ea:8d:7c:db:bb:bb:51:31:c6:15:76:71:ec:28:
                    0a:cf:c7:ec:6c:6f:37:4d:11:6d:25:c2:1f:3c:98:
                    98:81:ba:56:73:35:8f:43:cb:54:a3:72:7b:85:4a:
                    c2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DC:D1:F8:1B:47:05:33:45:8B:E2:54:81:EE:AB:F3:5B:1A:09:2E
            X509v3 Authority Key Identifier:
                keyid:D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a3a2f33362d3336203d3e203131333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f97e::/36

    Signature Algorithm: sha256WithRSAEncryption
         74:5a:e2:6b:64:a3:4f:c2:17:b6:95:1f:89:be:f2:75:02:84:
         83:b9:0a:58:67:1c:7a:76:74:30:03:9b:75:cc:0a:81:70:1e:
         b3:3c:b4:ae:29:90:2d:fd:56:07:96:7a:46:8a:a3:db:c5:4a:
         64:d7:aa:67:a6:2c:83:ab:36:2e:4a:70:18:2c:8f:79:4c:69:
         f7:84:df:dc:d0:4f:ee:0f:2f:a6:2c:e4:6d:ab:87:24:b2:e4:
         90:aa:27:87:7e:f6:a0:ce:c9:a9:7f:0f:1c:d9:6f:c9:67:bf:
         e8:42:5f:6f:df:be:14:0e:94:55:84:3b:00:8d:64:e6:cc:38:
         2f:c3:d1:80:95:24:cc:2e:da:64:eb:96:be:77:fa:c4:a2:24:
         74:d5:d9:d9:98:e3:fe:23:de:68:99:87:e4:4c:00:89:86:ec:
         b4:a3:54:75:a1:04:2d:a5:87:13:78:90:03:58:83:3f:d7:29:
         9a:ea:55:15:4f:e0:df:1c:9d:94:7f:a0:45:b2:a7:4c:b0:48:
         07:42:9f:b9:e4:30:8f:9f:45:56:be:12:2d:ff:1a:a1:9e:06:
         58:9b:4c:51:78:24:9a:b1:b6:f3:ab:a2:12:07:f3:ec:50:c6:
         25:42:61:33:c3:e6:bf:41:1f:3a:1e:23:bb:43:16:5e:75:f6:
         b6:16:93:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:16:19 2025 by rpki-client