Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a6131303a3a2f34382d3438203d3e20323135383535.roa
File:                     323630323a663962613a6131303a3a2f34382d3438203d3e20323135383535.roa (raw, json)
Hash identifier:          fjtK53O8rOL0kIWP8gsG/TTqK1nWE/wtqdAFpDu5IqU=
Subject key identifier:   A7:3F:A2:33:AD:69:28:7B:1E:CC:57:54:2E:92:ED:8F:E6:24:A8:24
Certificate issuer:       /CN=8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43
Certificate serial:       0495E9F377F4EC35FE630720230A32BCA697CF10
Authority key identifier: CD:BC:A8:B0:E7:B6:83:42:F6:E8:52:C6:E4:9C:97:62:19:46:8A:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a6131303a3a2f34382d3438203d3e20323135383535.roa
Signing time:             Wed 11 Jun 2025 22:34:06 +0000
ROA not before:           Wed 11 Jun 2025 22:29:06 +0000
ROA not after:            Wed 10 Jun 2026 22:34:06 +0000
asID:                     215855
IP address blocks:        2602:f9ba:a10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 10:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:95:e9:f3:77:f4:ec:35:fe:63:07:20:23:0a:32:bc:a6:97:cf:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43
        Validity
            Not Before: Jun 11 22:29:06 2025 GMT
            Not After : Jun 10 22:34:06 2026 GMT
        Subject: CN=A73FA233AD69287B1ECC57542E92ED8FE624A824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:89:ac:fe:30:15:be:97:1a:20:ad:71:ed:b4:
                    66:2b:86:98:2e:bd:d5:07:cd:66:0e:4f:61:ec:6b:
                    4e:16:b7:cf:b9:23:7d:84:7e:c0:e2:36:b6:52:6e:
                    80:bf:9c:0f:e6:1b:63:0a:f1:41:76:0d:b6:1f:ae:
                    c5:32:85:ab:9f:4a:79:ec:b0:4a:34:3e:b3:eb:d0:
                    47:f0:58:97:57:16:f6:3a:f6:91:e4:e3:fd:1f:1a:
                    4a:03:ef:cf:35:91:30:9c:0e:99:f5:d3:21:a7:61:
                    c9:64:85:ba:ce:f9:d7:45:c7:25:c3:21:c5:1a:43:
                    2c:a4:7d:cb:be:0a:a9:b4:08:24:c6:dd:49:d3:3a:
                    9b:11:67:2a:05:83:84:a7:3a:da:ff:dd:3f:ec:ee:
                    2e:00:84:71:f6:3e:83:62:51:1b:e3:71:e4:15:4e:
                    b4:36:04:8d:90:dd:36:fc:a9:e7:f3:dc:16:93:08:
                    dc:10:e7:d8:40:a7:40:e4:7f:d3:54:f1:76:e6:94:
                    75:03:a7:46:f2:cf:4f:f2:4d:87:61:0b:17:46:da:
                    13:20:9f:97:62:f0:45:d3:58:94:42:e1:53:e7:af:
                    92:4a:6c:e6:57:d6:bc:c5:3a:e5:d2:98:c2:5a:03:
                    9c:ab:42:79:e1:22:3a:1d:47:a9:f9:98:fd:ec:f6:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3F:A2:33:AD:69:28:7B:1E:CC:57:54:2E:92:ED:8F:E6:24:A8:24
            X509v3 Authority Key Identifier:
                keyid:CD:BC:A8:B0:E7:B6:83:42:F6:E8:52:C6:E4:9C:97:62:19:46:8A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a6131303a3a2f34382d3438203d3e20323135383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:a10::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:74:0b:39:85:f1:d9:21:d4:f8:73:0c:f3:89:4d:58:2c:75:
         29:f7:2a:b9:57:4a:af:c9:2f:e6:ba:4a:12:7d:83:88:8f:7f:
         d0:3a:13:55:56:74:64:85:3a:41:53:fa:01:ef:b3:39:bd:94:
         53:b7:b9:e8:a6:c9:55:71:f4:76:22:55:c6:2d:d3:dd:4d:9c:
         67:54:5d:f6:0d:5a:3b:46:bc:68:80:53:36:1d:0c:cb:60:fb:
         f7:a4:e5:9d:dd:86:70:84:23:83:c7:04:1f:5c:c8:62:9a:2d:
         73:84:01:3e:a8:2c:1f:40:bf:86:55:fe:df:50:55:4d:e2:19:
         a5:cd:5e:9d:92:b9:3e:2b:c2:e1:58:4c:5e:4e:95:9a:d6:14:
         96:a1:03:b1:45:1e:eb:dc:10:47:32:91:cf:8e:de:8a:af:b2:
         bc:23:34:81:d1:75:24:4d:2c:ac:6f:43:56:35:8a:c6:60:c6:
         b6:79:2a:c1:e3:12:a1:f5:d3:34:4e:0a:b7:8b:e5:29:ea:03:
         62:b8:56:d2:bf:a5:c5:a8:a6:0b:cc:9b:17:82:ad:df:37:63:
         cd:9b:47:e8:90:32:87:b6:e7:7a:58:7b:6f:82:2d:a9:f8:d6:
         54:ff:89:38:9d:1c:c4:70:f6:95:b3:ee:fd:13:74:4d:20:28:
         7f:4c:78:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:51:18 2025 by rpki-client