Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62333a3a2f34382d3438203d3e20323039353532.roa
File:                     323630323a663962613a62333a3a2f34382d3438203d3e20323039353532.roa (raw, json)
Hash identifier:          Az0jXiSK6/sV/56L7zVyPpDbjaRjax3hB66i77sipFA=
Subject key identifier:   24:3F:48:80:00:82:F4:E6:18:63:FF:EA:8E:F3:02:BE:3E:DE:05:65
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       01BC3BC0E6A8577C5804B1E0B4F27AE6993645B5
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62333a3a2f34382d3438203d3e20323039353532.roa
Signing time:             Sat 11 Jul 2026 17:16:42 +0000
ROA not before:           Sat 11 Jul 2026 17:11:42 +0000
ROA not after:            Sat 10 Jul 2027 17:16:42 +0000
asID:                     209552
IP address blocks:        2602:f9ba:b3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 07:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bc:3b:c0:e6:a8:57:7c:58:04:b1:e0:b4:f2:7a:e6:99:36:45:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jul 11 17:11:42 2026 GMT
            Not After : Jul 10 17:16:42 2027 GMT
        Subject: CN=243F48800082F4E61863FFEA8EF302BE3EDE0565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ae:aa:1d:91:1d:e8:5c:10:7c:ef:ff:5f:dd:
                    b7:f3:f4:d0:49:32:ad:d5:00:ea:60:6c:6c:48:a2:
                    66:9f:76:77:15:3d:48:b2:50:4c:93:62:11:d2:b7:
                    c3:58:39:3d:35:ca:46:0d:59:4a:96:2a:9d:cf:52:
                    15:24:f1:52:5f:c9:a6:e2:f4:89:e6:09:f4:d4:39:
                    94:ca:81:70:ec:d5:8e:7d:24:04:61:dd:41:4d:00:
                    68:88:ad:c7:06:de:da:4b:71:8e:05:44:9e:18:24:
                    04:c1:c0:b4:a2:ac:ff:72:51:91:e8:5f:f4:7e:15:
                    59:b5:68:30:3e:25:8d:45:ad:20:56:a2:f8:67:67:
                    65:25:d7:c0:30:de:ae:7d:98:db:84:30:36:6f:02:
                    00:44:cd:49:8b:35:05:7c:eb:62:15:89:0c:82:33:
                    3e:1f:ea:9e:c1:39:b1:7b:76:70:18:1e:63:a2:ba:
                    74:91:18:ed:68:ef:b0:e6:87:ec:83:ce:e1:81:e2:
                    ac:23:5a:31:68:8e:1d:16:34:08:92:61:e5:49:3f:
                    a8:e9:27:57:e5:9d:b1:2f:f4:cd:bd:d2:d9:ca:34:
                    0d:c6:d3:19:2f:7b:55:ab:18:a2:22:52:c3:3e:40:
                    5c:27:e2:c3:61:36:96:7f:18:63:cc:4c:4d:1c:e9:
                    71:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3F:48:80:00:82:F4:E6:18:63:FF:EA:8E:F3:02:BE:3E:DE:05:65
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62333a3a2f34382d3438203d3e20323039353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:b3::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:55:1d:cf:3f:c8:f7:88:0f:05:f2:96:7d:26:53:e6:53:ad:
         dd:ca:62:74:ec:bf:bb:e6:c0:f4:43:e4:a7:9f:f5:e4:c6:89:
         dd:95:f8:b5:f8:a4:28:24:92:12:91:dd:41:64:15:5f:dd:82:
         ad:33:9d:19:f1:e4:02:7b:95:99:cb:e3:95:b4:39:6e:e3:37:
         d5:5a:3d:99:00:2d:4f:03:35:74:2d:e5:9f:c3:58:89:35:42:
         3c:98:98:97:12:26:d1:ff:df:e5:b7:1f:e0:6c:94:34:bd:dc:
         9f:ae:29:d1:2e:50:cb:59:c5:42:a7:9e:14:2a:e5:41:ba:f7:
         cf:5b:69:dd:08:c0:09:e2:ff:c7:d3:ba:dd:65:ab:da:87:cc:
         5e:f7:4c:de:e3:f6:52:f8:9d:45:27:4b:04:ca:a8:4b:c6:96:
         7e:3e:e0:2a:9e:50:4e:4c:6d:29:53:16:13:dc:c7:1f:db:77:
         a5:a1:8a:87:28:7a:ab:7b:fa:9d:f6:4c:d7:b2:1f:95:24:19:
         f6:36:c0:40:c0:d3:de:10:fc:62:d1:62:25:53:79:dd:68:b4:
         89:87:b0:d1:d1:b5:bf:50:31:81:90:2d:08:d8:e0:34:a3:0a:
         2a:91:44:d4:31:40:82:85:58:31:28:15:10:ea:b2:f7:90:f4:
         3a:35:ec:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:31 2026 by rpki-client