Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365383a3a2f34382d3438203d3e20333936393933.roa
File:                     323630323a663734333a3365383a3a2f34382d3438203d3e20333936393933.roa (raw, json)
Hash identifier:          rGcuw2H8vxsnBq9WlqLUHmQIsD9uj8Az0PzOuN45i40=
Subject key identifier:   0F:A5:CB:13:A0:FD:73:4D:97:88:38:9E:D4:F0:BC:28:A3:40:3F:BB
Certificate issuer:       /CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
Certificate serial:       0B3EA6903955C6B3A71169D3F6045826B52D0E33
Authority key identifier: 30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365383a3a2f34382d3438203d3e20333936393933.roa
Signing time:             Wed 30 Apr 2025 17:38:07 +0000
ROA not before:           Wed 30 Apr 2025 17:33:07 +0000
ROA not after:            Wed 29 Apr 2026 17:38:07 +0000
asID:                     396993
IP address blocks:        2602:f743:3e8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl
                          rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 May 2025 20:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3e:a6:90:39:55:c6:b3:a7:11:69:d3:f6:04:58:26:b5:2d:0e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
        Validity
            Not Before: Apr 30 17:33:07 2025 GMT
            Not After : Apr 29 17:38:07 2026 GMT
        Subject: CN=0FA5CB13A0FD734D9788389ED4F0BC28A3403FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d1:f7:3d:70:21:d1:31:84:78:73:60:c7:34:
                    ad:97:2f:4a:a3:28:ea:5f:8c:42:6b:d5:df:01:04:
                    eb:b1:fb:55:37:21:03:1d:e1:1f:12:76:5e:0e:f2:
                    48:ff:f6:4e:6d:04:2e:04:3c:31:0e:7e:28:2c:35:
                    2d:b8:ef:2d:11:b0:e0:c0:e4:63:8a:ea:80:cd:02:
                    e4:40:2e:15:ab:a3:52:57:e4:2c:12:df:be:d5:c8:
                    e0:90:39:c8:53:59:7e:dc:81:6c:91:e9:3a:89:c1:
                    cb:74:5d:5a:b0:ab:90:80:e2:cd:d6:28:59:a6:fb:
                    9e:76:4f:fb:ca:06:ac:d8:db:db:90:e8:4f:35:a1:
                    c9:e2:fa:f3:e0:1f:c6:cb:cf:13:c1:5b:b9:01:6a:
                    7b:d4:81:9e:db:61:3c:94:f9:38:db:24:1a:60:5e:
                    00:5b:e0:da:06:8f:7b:42:49:d0:a6:7a:a6:26:11:
                    84:eb:55:2d:62:2a:92:2b:56:d4:8d:76:3c:de:d3:
                    53:04:0a:8f:26:af:2c:08:86:ab:ed:9e:33:e3:8c:
                    5a:45:ed:9f:80:7f:91:0e:2d:c2:a8:ff:1b:b6:72:
                    66:58:a1:b0:10:7b:bc:bd:3b:35:ed:8b:9c:2c:92:
                    f8:52:df:8f:d2:83:d9:63:a7:42:b1:29:5a:84:64:
                    10:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A5:CB:13:A0:FD:73:4D:97:88:38:9E:D4:F0:BC:28:A3:40:3F:BB
            X509v3 Authority Key Identifier:
                keyid:30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365383a3a2f34382d3438203d3e20333936393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f743:3e8::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:21:85:8a:a5:c0:71:cf:93:93:ee:e9:5d:4a:cf:68:ee:0f:
         2e:36:8b:29:5d:f1:bf:80:8c:ec:a0:4d:91:6b:d5:b6:d7:ee:
         c2:be:de:15:92:29:9b:3a:7a:4a:85:f7:f4:b3:0a:e2:64:75:
         cd:24:19:ff:49:58:44:b0:8a:27:8f:bd:13:8b:dc:d7:2d:5f:
         65:f1:90:2d:49:3a:64:8a:3f:db:58:c2:68:69:0f:b8:7d:07:
         9b:9a:ef:52:29:60:e6:1d:84:7f:4a:df:d6:a8:f0:b7:1c:56:
         a2:45:a4:2c:e0:22:5f:b8:67:1b:be:65:70:d0:85:47:e0:f8:
         38:c6:bd:0b:5b:3b:ca:1d:f6:ee:99:5d:e8:ba:12:5a:3c:5b:
         06:a2:31:a2:dc:ae:ea:72:8b:62:a8:08:41:40:a4:9a:92:e9:
         1c:f7:7d:94:b1:64:a8:a3:eb:f2:fb:e0:8b:55:84:1b:1e:d4:
         1c:cd:23:d7:4d:0e:90:11:76:a3:be:70:32:9e:70:8d:41:08:
         8c:1a:f5:c0:9a:fd:d3:42:ac:ec:42:09:6e:b1:00:c8:7f:c4:
         2a:9d:ac:64:41:b8:53:78:b8:7b:d8:bd:29:75:79:17:0a:a2:
         9e:23:40:32:37:95:3c:df:37:46:4c:97:b0:91:bc:05:c4:c8:
         c1:48:23:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 08:26:50 2025 by rpki-client