Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3130303a3a2f34302d3430203d3e20333936393933.roa
File:                     323630323a663734333a3130303a3a2f34302d3430203d3e20333936393933.roa (raw, json)
Hash identifier:          mJbW/KwMJUmiqoGZl8SAYEjWQ1OYcFf1EY+FozNx2F4=
Subject key identifier:   C3:1E:25:50:BD:B3:A1:A9:25:B8:B8:07:C1:4E:BD:41:CF:4A:44:3F
Certificate issuer:       /CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
Certificate serial:       2CE339646FE166B7C7C42F11E54910DCDE44C100
Authority key identifier: 30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3130303a3a2f34302d3430203d3e20333936393933.roa
Signing time:             Sun 29 Mar 2026 03:39:55 +0000
ROA not before:           Sun 29 Mar 2026 03:34:55 +0000
ROA not after:            Sun 28 Mar 2027 03:39:55 +0000
asID:                     396993
IP address blocks:        2602:f743:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl
                          rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e3:39:64:6f:e1:66:b7:c7:c4:2f:11:e5:49:10:dc:de:44:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
        Validity
            Not Before: Mar 29 03:34:55 2026 GMT
            Not After : Mar 28 03:39:55 2027 GMT
        Subject: CN=C31E2550BDB3A1A925B8B807C14EBD41CF4A443F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4f:7c:66:ae:bf:3e:f2:72:11:95:14:7d:d7:
                    88:c9:65:0d:04:2c:45:53:38:98:f6:0c:96:d9:d5:
                    ee:f3:0c:fa:ee:22:b5:93:a8:e7:8d:1c:d3:67:c9:
                    66:65:74:f5:2d:96:40:af:27:dc:d5:04:0b:58:4f:
                    33:ab:6c:0c:f0:04:5a:28:56:e8:af:c1:d0:1b:f4:
                    66:c7:40:98:a1:db:bd:42:53:aa:1f:2c:c5:9c:25:
                    f4:07:55:8c:f0:5a:bb:35:fb:58:99:23:04:47:3f:
                    cf:6f:d2:8c:5c:8f:ce:0b:2a:af:2f:1d:57:01:ac:
                    b5:da:44:0c:5a:63:16:43:5e:49:25:21:6c:f2:6d:
                    ac:35:b1:25:24:d9:f9:fc:f9:23:b2:b3:68:1f:bc:
                    49:6a:62:5c:18:41:c6:bc:97:e8:78:26:93:12:d0:
                    81:ef:94:6b:3d:c0:e7:66:68:84:7f:49:f7:df:a5:
                    03:ce:d9:9b:79:ac:52:24:1d:fc:c9:78:96:65:d9:
                    62:04:2b:4d:d0:4c:99:c0:e6:1a:a3:97:54:73:5c:
                    55:01:88:9c:4d:b9:43:95:30:34:ab:47:43:67:d4:
                    58:28:5f:ff:4c:37:d1:0b:8a:34:47:d9:3e:9d:dc:
                    72:89:10:3c:2c:a3:0b:1f:59:57:75:69:95:96:19:
                    b6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1E:25:50:BD:B3:A1:A9:25:B8:B8:07:C1:4E:BD:41:CF:4A:44:3F
            X509v3 Authority Key Identifier:
                keyid:30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3130303a3a2f34302d3430203d3e20333936393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f743:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:14:52:9c:cf:0d:eb:b2:d2:eb:18:de:41:6a:b0:6f:a6:a9:
         29:6f:70:fb:c8:e4:1c:50:91:ce:2d:10:33:59:88:9d:1e:46:
         62:45:ed:c0:61:79:fb:9d:fa:fb:e8:ad:43:de:a2:ba:f3:bd:
         8f:7b:31:65:3a:b2:4a:21:a3:47:e7:19:bf:66:a0:f9:d6:bc:
         28:c7:34:8c:9b:ee:6f:a0:6b:2a:59:14:56:91:d2:53:23:b2:
         dc:ab:17:3a:1f:76:eb:f9:af:4b:7d:81:f7:77:86:7b:95:45:
         5a:49:74:6c:47:66:a9:c3:97:3f:19:c5:68:ca:69:a5:f9:c1:
         c9:aa:80:4a:4a:fc:41:11:de:fc:75:6c:91:c4:3d:3c:18:61:
         41:65:2f:db:c0:78:5b:6e:bc:92:98:15:cf:fd:eb:fd:b8:b8:
         57:99:e8:e9:73:64:c1:ba:37:67:ea:34:57:b1:4c:7a:16:3c:
         3a:12:72:85:95:b0:a9:42:5a:3e:76:06:19:b9:76:be:d4:7b:
         5d:ee:c3:d9:4a:a3:e7:b5:ce:1c:e8:7e:28:49:81:0b:a7:82:
         ac:de:b3:36:3e:e3:5f:49:85:51:7d:8a:cf:c8:75:a5:75:14:
         15:97:06:f0:62:81:ec:0e:4a:74:3f:3c:43:33:6f:6c:b1:d6:
         32:d7:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:31:48 2026 by rpki-client