Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/323630323a3239313a33653a3a2f34382d3438203d3e20323134303932.roa
File:                     323630323a3239313a33653a3a2f34382d3438203d3e20323134303932.roa (raw, json)
Hash identifier:          3X/xZNXNQqYhxBdrBCob2cSv3ePv5jtDCFalvPvhnlE=
Subject key identifier:   05:C4:B3:39:04:72:A1:D9:C7:87:C0:2A:4C:1C:BE:6C:D3:DE:57:B1
Certificate issuer:       /CN=0735111c25496db3ae70272cbbfc4973e5fb6ae2bc8628e470
Certificate serial:       42462572ECA762A7DA032E578E2355A7D8721994
Authority key identifier: 00:1F:62:BF:34:17:95:C8:2E:A8:06:7E:1C:2E:28:C9:07:FB:E2:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25496db3ae70272cbbfc4973e5fb6ae2bc8628e470.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/323630323a3239313a33653a3a2f34382d3438203d3e20323134303932.roa
Signing time:             Wed 11 Jun 2025 22:34:02 +0000
ROA not before:           Wed 11 Jun 2025 22:29:02 +0000
ROA not after:            Wed 10 Jun 2026 22:34:02 +0000
asID:                     214092
IP address blocks:        2602:291:3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/001F62BF341795C82EA8067E1C2E28C907FBE2EB.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/001F62BF341795C82EA8067E1C2E28C907FBE2EB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25496db3ae70272cbbfc4973e5fb6ae2bc8628e470.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 12:54:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:46:25:72:ec:a7:62:a7:da:03:2e:57:8e:23:55:a7:d8:72:19:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735111c25496db3ae70272cbbfc4973e5fb6ae2bc8628e470
        Validity
            Not Before: Jun 11 22:29:02 2025 GMT
            Not After : Jun 10 22:34:02 2026 GMT
        Subject: CN=05C4B3390472A1D9C787C02A4C1CBE6CD3DE57B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:f3:40:f8:31:99:a8:3c:cc:9d:d6:4b:22:
                    e1:ac:a1:a4:e2:5d:b6:d7:7b:f6:be:6f:f6:7c:da:
                    36:fa:de:78:1d:83:ef:63:8c:e9:28:16:16:17:e6:
                    18:75:94:11:21:f5:a3:43:8e:98:c4:df:0d:d8:44:
                    18:b6:bc:72:fc:e0:33:25:d8:96:32:c4:27:c7:65:
                    e8:82:7c:d5:90:b2:2d:00:3e:14:89:c1:26:0f:f0:
                    46:63:f1:b6:1c:6e:48:41:ba:e6:e2:08:ec:39:d9:
                    b6:cb:53:56:22:03:95:92:6b:3f:9e:97:93:98:23:
                    66:e1:43:96:90:61:49:b1:02:2d:71:96:9b:4c:38:
                    27:d5:63:9e:02:cf:cb:af:2e:3d:5d:ed:e2:15:cd:
                    25:12:c6:06:85:e7:2e:44:3c:fb:17:11:8d:34:99:
                    20:b3:4b:11:c4:59:07:c7:a7:d6:bb:30:58:cd:06:
                    1f:8d:34:d5:0e:3c:45:6a:3c:dc:28:c2:bb:45:73:
                    37:fa:a6:8d:86:9a:4d:20:99:af:7d:c3:fb:1c:fd:
                    9a:38:b2:32:e3:d6:27:66:db:17:b4:6b:0d:38:a7:
                    05:f4:6a:a9:3a:f1:d6:42:d9:46:61:4c:04:e1:54:
                    70:85:6b:f2:e3:f2:02:93:e0:c0:5a:bc:46:5f:97:
                    f2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C4:B3:39:04:72:A1:D9:C7:87:C0:2A:4C:1C:BE:6C:D3:DE:57:B1
            X509v3 Authority Key Identifier:
                keyid:00:1F:62:BF:34:17:95:C8:2E:A8:06:7E:1C:2E:28:C9:07:FB:E2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/001F62BF341795C82EA8067E1C2E28C907FBE2EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25496db3ae70272cbbfc4973e5fb6ae2bc8628e470.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/323630323a3239313a33653a3a2f34382d3438203d3e20323134303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:291:3e::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:ae:96:6c:3d:34:8e:f4:65:ca:d1:b0:5d:83:4d:0a:ff:24:
         32:c9:cf:ed:d7:38:af:4b:ab:f8:32:5e:fa:65:b8:da:06:ad:
         d2:12:50:dd:15:d6:6f:bb:14:4d:47:3c:00:43:06:27:b5:e5:
         5a:4f:2b:ee:b0:8f:b1:96:1b:30:32:ee:a1:a6:64:85:0a:98:
         55:4c:a2:eb:03:2e:0d:39:5e:e2:01:9c:37:4d:ce:ab:89:76:
         af:d2:0d:a8:e8:fb:60:5b:8c:b1:f2:bd:b8:67:8f:ac:c1:30:
         ed:32:0c:eb:83:d5:c1:9b:31:31:f4:df:57:98:4f:53:b9:cf:
         13:5f:6d:6c:fe:32:76:65:a3:ec:ad:6c:93:7d:46:9e:48:37:
         29:bf:a7:a8:5a:46:f4:74:d4:7b:13:15:ea:53:83:60:c4:84:
         e7:79:2a:c7:e9:01:18:41:d9:36:f5:e8:76:dc:73:6f:31:36:
         2e:8d:26:3a:ae:4a:ea:d9:92:08:da:79:f8:ea:45:29:a6:25:
         44:1b:d7:44:45:29:48:5f:e9:64:3e:dd:66:4f:e0:18:ee:7c:
         c7:68:56:05:b6:17:b4:b1:03:6e:18:e2:d2:c2:c7:88:f9:d0:
         f7:e7:ae:70:e3:b4:51:03:f9:0b:f7:68:a2:28:99:e4:07:6a:
         30:7c:f2:15
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUQkYlcuynYqfaAy5XjiNVp9hyGZQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDczNTExMWMyNTQ5NmRiM2FlNzAyNzJjYmJmYzQ5NzNl
NWZiNmFlMmJjODYyOGU0NzAwHhcNMjUwNjExMjIyOTAyWhcNMjYwNjEwMjIzNDAy
WjAzMTEwLwYDVQQDEygwNUM0QjMzOTA0NzJBMUQ5Qzc4N0MwMkE0QzFDQkU2Q0Qz
REU1N0IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDTzQPgxmag8
zJ3WSyLhrKGk4l2213v2vm/2fNo2+t54HYPvY4zpKBYWF+YYdZQRIfWjQ46YxN8N
2EQYtrxy/OAzJdiWMsQnx2XognzVkLItAD4UicEmD/BGY/G2HG5IQbrm4gjsOdm2
y1NWIgOVkms/npeTmCNm4UOWkGFJsQItcZabTDgn1WOeAs/Lry49Xe3iFc0lEsYG
hecuRDz7FxGNNJkgs0sRxFkHx6fWuzBYzQYfjTTVDjxFajzcKMK7RXM3+qaNhppN
IJmvfcP7HP2aOLIy49YnZtsXtGsNOKcF9GqpOvHWQtlGYUwE4VRwhWvy4/ICk+DA
WrxGX5fyDQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFAXEszkEcqHZx4fAKkwcvmzT
3lexMB8GA1UdIwQYMBaAFAAfYr80F5XILqgGfhwuKMkH++LrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzlhNjg5NjRmNWZmNjQwZWJhZDEwMGRlZWE3YzliYTQ2LzAv
MDAxRjYyQkYzNDE3OTVDODJFQTgwNjdFMUMyRTI4QzkwN0ZCRTJFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzc4N2ViYmY5LTFhMGUtNDQxMC04MWEwLWE0YTAyYTI3ZmEyYi8wNzM1
MTExYzI1NDk2ZGIzYWU3MDI3MmNiYmZjNDk3M2U1ZmI2YWUyYmM4NjI4ZTQ3MC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS85YTY4OTY0ZjVmZjY0MGViYWQxMDBk
ZWVhN2M5YmE0Ni8wLzMyMzYzMDMyM2EzMjM5MzEzYTMzNjUzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMjMxMzQzMDM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAgKRAD4wDQYJKoZI
hvcNAQELBQADggEBAFmulmw9NI70ZcrRsF2DTQr/JDLJz+3XOK9Lq/gyXvpluNoG
rdISUN0V1m+7FE1HPABDBie15VpPK+6wj7GWGzAy7qGmZIUKmFVMousDLg05XuIB
nDdNzquJdq/SDajo+2BbjLHyvbhnj6zBMO0yDOuD1cGbMTH031eYT1O5zxNfbWz+
MnZlo+ytbJN9Rp5INym/p6haRvR01HsTFepTg2DEhOd5KsfpARhB2Tb16Hbcc28x
Ni6NJjquSurZkgjaefjqRSmmJUQb10RFKUhf6WQ+3WZP4BjufMdoVgW2F7SxA24Y
4tLCx4j50PfnrnDjtFED+Qv3aKIomeQHajB88hU=
-----END CERTIFICATE-----
Generated at Tue Jul 1 16:01:05 2025 by rpki-client