Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365383a3a2f34382d3438203d3e20333936393933.roa
File:                     323630323a663734333a3365383a3a2f34382d3438203d3e20333936393933.roa (raw, json)
Hash identifier:          /SUiB+zdGr7vJr5I91syhd94fF4oTozUCnshZJr0dRQ=
Subject key identifier:   74:9B:1F:57:DB:04:6F:1E:3F:D3:16:90:57:0F:CA:5E:21:4E:01:E3
Certificate issuer:       /CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
Certificate serial:       155CEFCDCB30BE35A24BCCD01A7195963EAAC642
Authority key identifier: 30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365383a3a2f34382d3438203d3e20333936393933.roa
Signing time:             Wed 01 Apr 2026 17:39:55 +0000
ROA not before:           Wed 01 Apr 2026 17:34:55 +0000
ROA not after:            Wed 31 Mar 2027 17:39:55 +0000
asID:                     396993
IP address blocks:        2602:f743:3e8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl
                          rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5c:ef:cd:cb:30:be:35:a2:4b:cc:d0:1a:71:95:96:3e:aa:c6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
        Validity
            Not Before: Apr  1 17:34:55 2026 GMT
            Not After : Mar 31 17:39:55 2027 GMT
        Subject: CN=749B1F57DB046F1E3FD31690570FCA5E214E01E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:59:5c:f7:25:19:8e:95:b2:cb:03:ee:33:b4:
                    90:14:e3:cf:36:65:6a:c9:e7:fe:ca:56:61:9b:35:
                    c2:f6:9c:1a:89:da:f3:af:67:88:c4:2a:a0:58:71:
                    67:1d:c9:4f:68:94:d6:07:6c:95:86:f3:4f:cd:6e:
                    96:c2:ec:78:0b:57:0c:51:58:b6:01:20:ef:13:46:
                    fc:fe:62:64:78:cd:09:73:6a:9d:c8:b9:77:86:e3:
                    e4:20:a1:17:1a:dc:d0:7a:95:27:44:87:33:1d:5b:
                    bd:81:7c:94:c7:a5:e0:1e:f1:90:bf:07:72:02:64:
                    c9:a1:62:91:c6:6e:e1:36:68:c8:fb:6b:96:f4:35:
                    39:25:a3:7c:bc:87:fc:0a:20:6a:a0:b2:f9:77:94:
                    79:44:5c:e1:27:2b:6d:47:e5:d8:98:de:ff:a9:f9:
                    b8:65:ec:d9:38:57:37:da:0d:60:d8:ca:06:ed:f0:
                    ff:e3:c0:62:4f:36:92:9b:d8:23:29:08:86:a8:8e:
                    d5:27:2b:bb:b1:9d:45:3b:83:3e:51:d1:32:ec:24:
                    85:82:6f:3e:00:9c:b2:ae:f1:da:32:5c:8b:04:08:
                    87:ad:58:c8:5e:00:c2:c0:64:ec:c8:9f:7b:26:82:
                    12:5b:60:ac:57:c8:56:c9:10:c4:52:5b:d5:0e:c7:
                    1f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9B:1F:57:DB:04:6F:1E:3F:D3:16:90:57:0F:CA:5E:21:4E:01:E3
            X509v3 Authority Key Identifier:
                keyid:30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365383a3a2f34382d3438203d3e20333936393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f743:3e8::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:38:06:a4:37:4d:1d:de:96:76:4a:b2:9c:24:ff:7c:cd:9e:
         17:f0:05:3f:46:4c:8d:b4:8e:59:20:1e:77:a1:29:92:5a:f0:
         9e:45:0b:b0:52:26:10:b5:08:89:53:1e:b5:54:eb:47:e6:cf:
         47:c4:e8:cb:05:31:60:1f:be:d9:75:66:12:e9:83:1d:ba:b4:
         b1:a7:ef:16:0b:bd:07:26:7a:1c:ac:71:e6:ce:28:b0:12:32:
         7f:8a:4b:42:86:34:a9:99:e3:45:b3:f5:13:d1:56:65:23:ec:
         75:d6:75:5a:1c:10:84:d1:23:38:ed:65:b4:0f:67:01:75:79:
         5e:82:56:10:e0:b4:e0:51:82:e7:ef:40:12:37:9b:19:58:0c:
         cc:82:b5:cc:a1:19:71:18:1f:50:78:24:6a:3d:63:07:ab:91:
         b2:67:75:0a:a9:bf:d4:31:e4:a2:9e:3c:2a:19:11:30:c3:4c:
         5a:32:0c:68:62:13:4c:2e:fa:86:e3:cf:bf:12:9b:6d:23:7a:
         ff:fc:3b:91:1e:b8:cc:d1:d1:03:3b:c5:00:b7:69:86:3b:d0:
         0d:97:0b:92:e6:fe:ee:a4:90:f5:5a:18:49:71:8a:d9:fb:00:
         1c:54:f6:4f:27:da:c1:e2:46:8d:5a:d9:93:e2:a5:9f:8f:20:
         0d:25:b1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:31:44 2026 by rpki-client