Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/323630323a663465333a65653a3a2f34382d3438203d3e203332303432.roa
File:                     323630323a663465333a65653a3a2f34382d3438203d3e203332303432.roa (raw, json)
Hash identifier:          8O8bE7t/lFlQ832L3tKyyT7kuQgTggS9cb3bZZMGW1k=
Subject key identifier:   12:53:C3:82:6B:6C:2E:D6:38:9B:D0:47:35:AD:B6:62:FA:32:C6:04
Certificate issuer:       /CN=3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288
Certificate serial:       546C8245418AB921EC628F1FBEB4F1490F20743E
Authority key identifier: A8:8F:B4:DD:1C:10:02:2B:6E:FD:B3:A5:27:36:61:A4:1E:27:52:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/323630323a663465333a65653a3a2f34382d3438203d3e203332303432.roa
Signing time:             Mon 20 Jul 2026 20:32:22 +0000
ROA not before:           Mon 20 Jul 2026 20:27:22 +0000
ROA not after:            Mon 19 Jul 2027 20:32:22 +0000
asID:                     32042
IP address blocks:        2602:f4e3:ee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/A88FB4DD1C10022B6EFDB3A5273661A41E275233.crl
                          rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/A88FB4DD1C10022B6EFDB3A5273661A41E275233.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 05:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6c:82:45:41:8a:b9:21:ec:62:8f:1f:be:b4:f1:49:0f:20:74:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288
        Validity
            Not Before: Jul 20 20:27:22 2026 GMT
            Not After : Jul 19 20:32:22 2027 GMT
        Subject: CN=1253C3826B6C2ED6389BD04735ADB662FA32C604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c2:76:31:62:25:d7:0b:03:96:dd:b9:cf:fc:
                    5c:5d:06:c9:82:98:3d:3b:14:52:b7:01:ae:b5:45:
                    78:21:37:ee:8f:59:01:6a:3e:63:7d:16:f6:45:0f:
                    56:17:1f:4e:4e:59:0f:ee:fd:27:52:b2:c0:31:59:
                    db:9d:2a:c1:97:c2:e4:c6:a1:09:ae:db:d0:73:6c:
                    d2:cb:62:41:ca:83:11:79:1a:97:cb:26:aa:1e:12:
                    e1:bb:e8:33:17:e1:cb:a8:4b:86:60:4c:67:04:f8:
                    d3:31:08:e1:d5:54:63:f5:09:00:6f:b7:2c:8e:56:
                    56:2b:7f:4a:14:e8:b1:06:e6:92:5a:7f:08:5c:11:
                    b7:3b:e7:42:e0:40:46:2f:4b:ef:f9:07:07:33:9e:
                    cd:9b:c2:2a:10:86:05:51:e4:e7:9b:69:cb:4b:05:
                    ee:87:f8:54:be:04:25:71:f5:8c:e4:88:46:68:f8:
                    15:0e:5e:11:79:1c:c7:bd:3c:c5:3e:38:9c:26:f4:
                    07:da:f5:c2:ae:8b:6f:9d:b0:a9:fb:f1:d8:a2:c2:
                    d6:bc:0e:8a:c7:40:bc:8b:9f:27:ce:b0:9a:52:82:
                    7b:6a:77:66:5b:6e:a4:84:6d:3b:95:87:4b:e3:ff:
                    65:4e:ac:ac:c3:82:ed:90:fe:d6:bd:29:af:76:83:
                    7a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:53:C3:82:6B:6C:2E:D6:38:9B:D0:47:35:AD:B6:62:FA:32:C6:04
            X509v3 Authority Key Identifier:
                keyid:A8:8F:B4:DD:1C:10:02:2B:6E:FD:B3:A5:27:36:61:A4:1E:27:52:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/A88FB4DD1C10022B6EFDB3A5273661A41E275233.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/323630323a663465333a65653a3a2f34382d3438203d3e203332303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4e3:ee::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:9c:8e:b2:f6:04:57:c2:12:e1:f2:f0:d0:5d:2e:f5:eb:3a:
         55:87:50:90:3d:91:c8:ee:46:0a:b8:d1:33:4b:e2:ca:a9:4e:
         c6:80:6c:6e:ff:0d:4e:61:a3:82:99:a0:77:ee:76:5d:0f:af:
         b7:b2:d4:f9:a3:6f:9f:88:96:75:c8:67:7d:3e:df:f5:aa:1e:
         6c:0f:b2:fe:7b:5f:14:f6:7a:3c:a1:d7:32:32:ad:19:4a:1d:
         54:d9:9b:46:7f:ce:15:7e:42:fa:8a:2e:ea:25:58:c8:6c:81:
         a4:eb:b2:ac:7e:d9:15:97:2e:98:23:24:76:a7:6f:70:3a:c4:
         33:c2:2a:13:99:01:96:a1:e9:78:4f:72:e7:81:f6:fb:f4:78:
         b3:a3:a3:7a:0a:47:d2:8c:12:ef:3c:5f:b1:33:b0:1f:ff:d0:
         25:4e:16:f6:46:91:01:c0:dc:43:3b:8a:92:84:b6:b7:92:7c:
         e9:ca:b5:b0:37:a0:f4:71:36:50:99:9b:f5:c4:92:21:09:de:
         8e:df:35:48:fd:55:38:ca:c5:df:e5:da:24:72:ec:bc:e1:5f:
         a9:86:6d:06:d5:95:17:8e:fd:59:71:71:1b:3e:bd:7b:29:c2:
         e9:00:76:e0:7a:ed:ea:52:ff:c3:b3:66:76:2d:26:1e:b0:a9:
         fd:e2:19:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:10:26 2026 by rpki-client