Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a3a2f34342d3438203d3e203131393637.roa
File:                     323630323a663732653a3a2f34342d3438203d3e203131393637.roa (raw, json)
Hash identifier:          n+c86q/BQiRXltGNOgdYXPg3y6NpRuz+6XN+TxiXij0=
Subject key identifier:   26:6F:49:4C:07:BE:81:4B:A6:18:72:68:59:F2:97:D8:A3:F8:4E:61
Certificate issuer:       /CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
Certificate serial:       44D7FCE110634726B0A297543392CF4E8EE05044
Authority key identifier: 41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a3a2f34342d3438203d3e203131393637.roa
Signing time:             Wed 14 May 2025 08:16:43 +0000
ROA not before:           Wed 14 May 2025 08:11:43 +0000
ROA not after:            Wed 13 May 2026 08:16:43 +0000
asID:                     11967
IP address blocks:        2602:f72e::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d7:fc:e1:10:63:47:26:b0:a2:97:54:33:92:cf:4e:8e:e0:50:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Validity
            Not Before: May 14 08:11:43 2025 GMT
            Not After : May 13 08:16:43 2026 GMT
        Subject: CN=266F494C07BE814BA618726859F297D8A3F84E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:45:1e:b9:2f:ea:fb:43:bb:09:7f:a6:aa:75:
                    84:b0:9d:8c:c8:a5:53:b5:85:31:3d:00:0e:c0:a9:
                    87:f6:ac:4b:15:93:7e:b4:48:99:19:d7:9f:b2:23:
                    ae:5d:b7:63:9c:19:92:3a:b2:d2:ac:2d:db:28:90:
                    80:ad:83:ea:e2:31:d7:e3:52:92:05:06:7c:7b:f8:
                    5b:fc:93:96:6f:cd:63:f4:34:44:70:6b:d4:57:38:
                    5b:64:d8:55:fc:b8:5c:1e:73:32:6b:9e:6d:c2:f4:
                    80:ce:b6:19:1a:08:1e:d2:01:56:72:0b:b9:d2:93:
                    26:1c:e4:1a:3a:82:3b:07:b5:95:02:1c:f0:66:1a:
                    b5:d4:db:d9:a2:79:4c:79:29:5e:cd:90:e3:3d:ec:
                    33:15:cd:70:ce:f3:39:45:fa:d8:52:55:61:64:0d:
                    39:1f:bf:fb:8e:3e:e5:d0:52:e9:02:15:fc:26:d6:
                    6f:fc:d7:3d:4a:06:73:88:3d:af:c5:e4:09:96:99:
                    50:a0:e9:ff:14:57:b6:9f:f8:58:ac:e0:1a:d9:1d:
                    9b:54:25:c0:39:75:e2:78:b5:c6:06:72:9d:74:d2:
                    12:f9:42:06:e4:cb:d6:b8:29:d2:de:08:3e:d2:0d:
                    a3:2d:d3:ea:33:18:1f:cf:4d:fa:92:71:44:15:c1:
                    c5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6F:49:4C:07:BE:81:4B:A6:18:72:68:59:F2:97:D8:A3:F8:4E:61
            X509v3 Authority Key Identifier:
                keyid:41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a3a2f34342d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e::/44

    Signature Algorithm: sha256WithRSAEncryption
         71:3d:b6:bd:d8:5a:41:83:e4:b7:5f:93:c9:e4:46:49:49:f5:
         3d:34:ee:ca:a7:9d:d3:0a:a2:ea:7d:82:34:11:9c:50:19:ef:
         9d:d1:d6:90:f2:f0:55:42:4b:ea:79:c8:a9:43:a0:8b:b2:7c:
         10:5b:19:a4:55:3b:df:15:84:3d:48:15:6f:cc:5c:ca:56:92:
         d0:36:66:ca:c9:ee:a7:37:07:95:2e:77:c8:73:e8:8c:17:ff:
         5c:7b:f2:b8:ef:62:db:91:ec:56:83:39:5a:53:ed:b3:9e:80:
         60:25:8e:5b:ae:4d:49:21:6e:b1:3b:7d:52:28:e3:e1:f1:a6:
         b6:7a:52:5d:1e:88:e8:c7:4a:37:0a:10:26:f7:33:3e:47:c3:
         4b:b6:d3:9f:fc:a7:db:92:58:9d:9c:74:e4:30:55:2d:bf:48:
         9d:5c:3f:23:6d:07:4e:67:3b:49:5f:95:e5:67:de:6b:d1:9a:
         7f:7f:ea:aa:cb:b9:51:6c:73:db:ad:4e:09:91:03:0b:79:9b:
         dd:cc:33:fc:ea:2b:4d:35:f9:e8:cd:b8:7e:3a:73:61:63:8e:
         b1:65:68:2e:cf:94:35:9c:58:a7:c7:55:82:a1:1f:52:52:97:
         4d:6e:b9:7a:e8:80:eb:21:37:49:b1:30:e3:77:45:8d:23:37:
         cc:af:ad:b2
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIURNf84RBjRyawopdUM5LPTo7gUEQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzY5ZGJjMmVjMTc1NGRhMWRiYWFiYWIxOGE0YzU1OTBk
OWZiZjk0N2Y1MDNiNWZkNjAwHhcNMjUwNTE0MDgxMTQzWhcNMjYwNTEzMDgxNjQz
WjAzMTEwLwYDVQQDEygyNjZGNDk0QzA3QkU4MTRCQTYxODcyNjg1OUYyOTdEOEEz
Rjg0RTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUUeuS/q+0O7
CX+mqnWEsJ2MyKVTtYUxPQAOwKmH9qxLFZN+tEiZGdefsiOuXbdjnBmSOrLSrC3b
KJCArYPq4jHX41KSBQZ8e/hb/JOWb81j9DREcGvUVzhbZNhV/LhcHnMya55twvSA
zrYZGgge0gFWcgu50pMmHOQaOoI7B7WVAhzwZhq11NvZonlMeSlezZDjPewzFc1w
zvM5RfrYUlVhZA05H7/7jj7l0FLpAhX8JtZv/Nc9SgZziD2vxeQJlplQoOn/FFe2
n/hYrOAa2R2bVCXAOXXieLXGBnKddNIS+UIG5MvWuCnS3gg+0g2jLdPqMxgfz036
knFEFcHFIQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFCZvSUwHvoFLphhyaFnyl9ij
+E5hMB8GA1UdIwQYMBaAFEEXFvf96y9xcrzj5h2GyDuCQRH8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUzZjgyMGY1LzAv
NDExNzE2RjdGREVCMkY3MTcyQkNFM0U2MUQ4NkM4M0I4MjQxMTFGQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzY2MzNmLTM0M2QtNGFjMy1hOTM2LTk4OTU4ZTU2MzBlNi8zNjlk
YmMyZWMxNzU0ZGExZGJhYWJhYjE4YTRjNTU5MGQ5ZmJmOTQ3ZjUwM2I1ZmQ2MC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVk
MzA1M2Y4MjBmNS8wLzMyMzYzMDMyM2E2NjM3MzI2NTNhM2EyZjM0MzQyZDM0Mzgy
MDNkM2UyMDMxMzEzOTM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQmAvcuAAAwDQYJKoZIhvcNAQEL
BQADggEBAHE9tr3YWkGD5Ldfk8nkRklJ9T007sqnndMKoup9gjQRnFAZ753R1pDy
8FVCS+p5yKlDoIuyfBBbGaRVO98VhD1IFW/MXMpWktA2ZsrJ7qc3B5Uud8hz6IwX
/1x78rjvYtuR7FaDOVpT7bOegGAljluuTUkhbrE7fVIo4+HxprZ6Ul0eiOjHSjcK
ECb3Mz5Hw0u205/8p9uSWJ2cdOQwVS2/SJ1cPyNtB05nO0lfleVn3mvRmn9/6qrL
uVFsc9utTgmRAwt5m93MM/zqK001+ejNuH46c2FjjrFlaC7PlDWcWKfHVYKhH1JS
l01uuXrogOshN0mxMON3RY0jN8yvrbI=
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:33:18 2025 by rpki-client