Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62313a3a2f34382d3438203d3e20323134393239.roa
File:                     323630323a663962613a62313a3a2f34382d3438203d3e20323134393239.roa (raw, json)
Hash identifier:          egIYaCdIguxBnvng8+SQ0/C3qiAIo+AqOcn19i8txTI=
Subject key identifier:   89:C6:EF:85:31:DA:E9:26:09:8A:64:47:8E:B2:25:B1:A5:3D:31:CA
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       48033AC59228A7B0E1983178B15DE1DCA3734EBD
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62313a3a2f34382d3438203d3e20323134393239.roa
Signing time:             Mon 06 Jul 2026 11:00:55 +0000
ROA not before:           Mon 06 Jul 2026 10:55:55 +0000
ROA not after:            Mon 05 Jul 2027 11:00:55 +0000
asID:                     214929
IP address blocks:        2602:f9ba:b1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 07:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:03:3a:c5:92:28:a7:b0:e1:98:31:78:b1:5d:e1:dc:a3:73:4e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jul  6 10:55:55 2026 GMT
            Not After : Jul  5 11:00:55 2027 GMT
        Subject: CN=89C6EF8531DAE926098A64478EB225B1A53D31CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6e:b4:4b:ed:40:e5:85:bf:f3:98:c5:0d:d6:
                    a8:26:a9:72:8d:80:ef:42:49:5a:95:67:10:2c:5a:
                    6a:83:91:d8:23:5f:98:4b:11:c3:2e:8d:27:0b:2c:
                    24:d4:a7:f3:9b:a2:b5:14:fa:55:ac:72:f2:50:d9:
                    98:fe:4f:ad:6b:c6:b1:f1:ac:ef:c8:09:d1:8e:9a:
                    ce:54:ef:2c:85:18:2b:94:64:6b:c9:06:6b:10:46:
                    51:6c:a5:5f:20:3f:f4:63:e6:88:fd:16:5e:04:cc:
                    83:e9:89:ce:8b:3c:1e:c8:55:76:46:7b:c6:a9:ea:
                    d7:21:5b:fe:2b:05:e2:ff:82:42:47:da:a8:dd:9c:
                    4b:9c:0e:60:81:30:5e:5e:23:93:ea:d7:6b:6d:7a:
                    fe:e4:27:01:48:3b:c1:ab:f6:70:f2:1b:03:e0:08:
                    b4:84:7f:b3:79:66:f0:6b:cf:79:8b:04:15:5e:e7:
                    4c:9c:48:ff:ac:d6:7a:87:fa:d7:ab:a8:9c:0c:fc:
                    e0:cf:08:f9:48:0f:a8:d8:ef:62:8a:42:cd:7d:3c:
                    20:d8:45:89:58:d7:a3:05:b5:d1:ce:35:ba:d9:9f:
                    07:56:12:98:80:4e:84:25:8e:d1:e4:4b:9c:cc:a5:
                    38:1c:2a:6d:3e:56:96:98:f8:2c:66:fb:6e:32:87:
                    cb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C6:EF:85:31:DA:E9:26:09:8A:64:47:8E:B2:25:B1:A5:3D:31:CA
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62313a3a2f34382d3438203d3e20323134393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:b1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:20:29:55:66:72:b7:c6:4b:ed:cd:51:bf:71:62:d5:a8:b6:
         15:3b:10:6d:1e:5f:9f:92:68:d8:68:94:a1:5b:2b:1f:3b:43:
         c9:6a:7f:43:b9:fe:1a:44:ee:9a:13:20:b0:0a:0d:69:af:06:
         a3:42:87:72:c2:d5:f7:03:84:de:dd:76:57:f7:08:6b:9f:b1:
         5b:30:fd:9f:1e:29:d7:63:cc:15:d0:e3:59:da:c0:ca:9a:8f:
         bc:87:f0:19:2d:5e:74:7a:69:f4:1c:b7:e3:0c:db:b7:75:82:
         e0:63:15:05:76:f1:c8:da:c5:7a:1e:9b:88:51:b4:54:f4:d4:
         b6:e1:46:50:9f:e5:c4:69:da:7b:1e:7b:06:66:9e:9e:15:72:
         2c:73:bd:25:fa:7b:44:45:ed:9d:af:26:30:94:0a:6b:b1:d5:
         29:14:83:07:3a:b7:6e:b0:49:2e:2c:cc:4f:16:c4:72:31:8f:
         ac:d8:4a:1a:fa:19:6a:1f:e6:23:ce:42:19:9c:d3:43:82:50:
         3f:f4:75:91:a4:41:fd:5d:77:7d:5f:ba:aa:65:1d:1a:93:73:
         e6:64:23:2f:ba:38:06:fa:ed:82:51:6e:3a:72:a5:b6:23:6c:
         70:f8:f0:1c:85:e7:de:2f:2f:19:5e:f0:b7:d2:3d:02:e4:5c:
         4a:f1:31:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:46:37 2026 by rpki-client