Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/323630323a663262363a3a2f33362d3336203d3e2030.roa
File:                     323630323a663262363a3a2f33362d3336203d3e2030.roa (raw, json)
Hash identifier:          2m9CMenteZJjQv7TGExeHwh+B4F1/LOkTvLmH4HRHVU=
Subject key identifier:   DA:C6:72:50:03:3F:D5:57:A2:07:20:3C:BB:5D:28:93:51:66:6C:26
Certificate issuer:       /CN=b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8
Certificate serial:       1E400D35A882537681BEAD522FEA5BAF940A6ECB
Authority key identifier: D2:17:BE:28:41:39:82:93:4A:3C:40:2B:0E:67:10:B9:85:A9:93:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/323630323a663262363a3a2f33362d3336203d3e2030.roa
Signing time:             Sun 18 Oct 2026 15:36:44 +0000
ROA not before:           Sun 18 Oct 2026 15:31:44 +0000
ROA not after:            Sun 17 Oct 2027 15:36:44 +0000
asID:                     0
IP address blocks:        2602:f2b6::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/D217BE28413982934A3C402B0E6710B985A99356.crl
                          rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/D217BE28413982934A3C402B0E6710B985A99356.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 17:35:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:40:0d:35:a8:82:53:76:81:be:ad:52:2f:ea:5b:af:94:0a:6e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8
        Validity
            Not Before: Oct 18 15:31:44 2026 GMT
            Not After : Oct 17 15:36:44 2027 GMT
        Subject: CN=DAC67250033FD557A207203CBB5D289351666C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f8:d8:43:38:1a:1d:7a:6f:f4:e1:cc:a6:a1:
                    08:2d:09:22:bd:48:a9:48:af:e8:37:bd:d5:c0:3c:
                    e8:3a:cd:85:84:fa:0d:77:b2:6d:85:36:c5:08:34:
                    bf:5c:fe:50:86:aa:c7:33:6b:eb:f3:90:dc:a6:dc:
                    46:13:fa:2e:f4:74:db:c4:6f:21:d2:10:f1:39:89:
                    e1:22:48:2a:eb:9d:2a:f3:c2:4b:20:f1:e7:8c:fd:
                    e1:0a:ed:b5:a8:b4:2f:f5:5d:3d:22:fb:67:19:e3:
                    e6:86:9a:17:38:a4:0c:c9:c8:b2:c9:c4:c7:cc:78:
                    65:8e:df:b8:6a:5c:2c:84:3d:86:b0:53:cf:9a:1b:
                    9f:0f:9a:12:b6:51:92:6b:76:eb:5e:5c:78:31:87:
                    d8:2c:77:82:9b:7b:64:fe:fe:87:74:5b:9b:f5:02:
                    4d:8a:8a:3c:21:e0:c3:de:14:51:10:24:c5:f7:7a:
                    40:27:ec:fc:ee:93:50:f9:e6:cd:20:bb:98:3d:11:
                    c8:9e:2a:5e:1d:ea:45:2c:95:af:b9:b1:84:d6:73:
                    83:b8:86:64:e5:32:68:23:69:c1:4a:1c:3d:8c:d3:
                    57:b3:68:f2:38:68:cc:34:b6:01:f8:e2:2c:cd:7e:
                    2e:75:5f:31:03:e6:51:cc:0d:c2:04:26:8d:f4:1b:
                    9b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C6:72:50:03:3F:D5:57:A2:07:20:3C:BB:5D:28:93:51:66:6C:26
            X509v3 Authority Key Identifier:
                keyid:D2:17:BE:28:41:39:82:93:4A:3C:40:2B:0E:67:10:B9:85:A9:93:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/D217BE28413982934A3C402B0E6710B985A99356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/323630323a663262363a3a2f33362d3336203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f2b6::/36

    Signature Algorithm: sha256WithRSAEncryption
         11:c8:15:91:31:30:d4:f3:7a:02:71:5f:84:83:7b:0f:68:ac:
         a9:00:bb:73:d3:38:e7:2d:43:c7:27:24:56:4f:38:b6:91:65:
         c6:5e:07:fd:b0:3b:0b:6f:a7:e6:3f:fe:cd:97:7d:25:85:e5:
         c8:d9:bc:3e:04:7e:97:76:f5:17:30:d3:dc:4b:ef:87:30:51:
         0a:6f:41:de:3e:d1:2e:e2:24:ac:70:22:ab:d9:1a:e9:ec:29:
         45:eb:30:9f:f5:01:9a:7c:89:0e:09:e1:08:2a:6b:60:c1:d5:
         64:1f:1f:6d:7b:4a:ab:3e:31:12:cd:05:c3:fc:26:21:86:89:
         9f:13:a8:e5:61:79:1d:79:70:45:fc:0d:b7:da:ca:53:81:42:
         af:0f:85:48:de:11:ae:eb:bc:07:c3:de:34:c3:15:22:b1:5d:
         98:3a:db:f8:44:34:69:62:06:12:95:be:e2:31:2d:23:f6:d1:
         81:00:1f:89:de:f4:2f:0d:c9:02:4e:ed:b2:bc:fc:b8:ec:3f:
         cb:0a:5b:24:de:cf:0f:bd:00:67:3e:4e:85:57:60:d6:0e:9f:
         5d:4c:31:cf:29:28:8d:95:0e:02:d5:59:29:00:0c:96:89:98:
         ff:3b:e5:07:45:13:44:39:4c:68:d7:b1:51:48:30:0f:bf:3c:
         e7:a8:26:ec
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIUHkANNaiCU3aBvq1SL+pbr5QKbsswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjVjYTllZmExM2U5MzNiYWQ5ZDFkYmVhMDYxYmJkNDVl
Zjg0NGJkZmQ2MWFiYTgwYzgwHhcNMjYxMDE4MTUzMTQ0WhcNMjcxMDE3MTUzNjQ0
WjAzMTEwLwYDVQQDEyhEQUM2NzI1MDAzM0ZENTU3QTIwNzIwM0NCQjVEMjg5MzUx
NjY2QzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPjYQzgaHXpv
9OHMpqEILQkivUipSK/oN73VwDzoOs2FhPoNd7JthTbFCDS/XP5QhqrHM2vr85Dc
ptxGE/ou9HTbxG8h0hDxOYnhIkgq650q88JLIPHnjP3hCu21qLQv9V09IvtnGePm
hpoXOKQMyciyycTHzHhljt+4alwshD2GsFPPmhufD5oStlGSa3brXlx4MYfYLHeC
m3tk/v6HdFub9QJNioo8IeDD3hRRECTF93pAJ+z87pNQ+ebNILuYPRHInipeHepF
LJWvubGE1nODuIZk5TJoI2nBShw9jNNXs2jyOGjMNLYB+OIszX4udV8xA+ZRzA3C
BCaN9BubnQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFNrGclADP9VXogcgPLtdKJNR
ZmwmMB8GA1UdIwQYMBaAFNIXvihBOYKTSjxAKw5nELmFqZNWMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkYjk1YzAwYzhlMjQ3NjFhZWNlNzkxODM1Y2UzMTZjLzAv
RDIxN0JFMjg0MTM5ODI5MzRBM0M0MDJCMEU2NzEwQjk4NUE5OTM1Ni5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzI5NDVkZmI3LWJkMDctNDk5NS04OWVlLWYxZmYxNjlkNGJkNC9iNWNh
OWVmYTEzZTkzM2JhZDlkMWRiZWEwNjFiYmQ0NWVmODQ0YmRmZDYxYWJhODBjOC5j
ZXIwgZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzRkYjk1YzAwYzhlMjQ3NjFhZWNlNzkx
ODM1Y2UzMTZjLzAvMzIzNjMwMzIzYTY2MzI2MjM2M2EzYTJmMzMzNjJkMzMzNjIw
M2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgQmAvK2ADANBgkqhkiG9w0BAQsFAAOCAQEAEcgV
kTEw1PN6AnFfhIN7D2isqQC7c9M45y1DxyckVk84tpFlxl4H/bA7C2+n5j/+zZd9
JYXlyNm8PgR+l3b1FzDT3EvvhzBRCm9B3j7RLuIkrHAiq9ka6ewpReswn/UBmnyJ
DgnhCCprYMHVZB8fbXtKqz4xEs0Fw/wmIYaJnxOo5WF5HXlwRfwNt9rKU4FCrw+F
SN4Rruu8B8PeNMMVIrFdmDrb+EQ0aWIGEpW+4jEtI/bRgQAfid70Lw3JAk7tsrz8
uOw/ywpbJN7PD70AZz5OhVdg1g6fXUwxzykojZUOAtVZKQAMlomY/zvlB0UTRDlM
aNexUUgwD78856gm7A==
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:30:49 2026 by rpki-client