Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3130303a3a2f34342d3434203d3e203130313033.roa
File:                     323630373a373463303a3130303a3a2f34342d3434203d3e203130313033.roa (raw, json)
Hash identifier:          0KzK25vVHcShnhiQuJFGC8x5+oJW32/XtYKFNw6gOWU=
Subject key identifier:   F8:48:0B:DB:BC:C4:B0:9A:55:A7:72:13:F3:A7:CE:0C:14:7E:77:61
Certificate issuer:       /CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
Certificate serial:       5178E87866F0139411145E8BCEB363534163423A
Authority key identifier: CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3130303a3a2f34342d3434203d3e203130313033.roa
Signing time:             Thu 05 Feb 2026 18:19:49 +0000
ROA not before:           Thu 05 Feb 2026 18:14:49 +0000
ROA not after:            Thu 04 Feb 2027 18:19:49 +0000
asID:                     10103
IP address blocks:        2607:74c0:100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl
                          rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:78:e8:78:66:f0:13:94:11:14:5e:8b:ce:b3:63:53:41:63:42:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
        Validity
            Not Before: Feb  5 18:14:49 2026 GMT
            Not After : Feb  4 18:19:49 2027 GMT
        Subject: CN=F8480BDBBCC4B09A55A77213F3A7CE0C147E7761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:53:6e:1d:8a:67:26:ec:6b:f7:3d:5d:51:bb:
                    25:0d:c3:89:8a:1d:33:2e:7a:3f:19:07:d1:0b:61:
                    ee:ee:8f:8c:58:f6:da:0e:d4:f1:31:52:c0:0f:07:
                    d2:56:45:af:bc:93:93:a1:5c:85:b6:5b:13:b8:01:
                    59:e4:d5:95:05:e7:d4:be:7e:c4:78:8b:bc:1b:d8:
                    69:31:33:e2:22:ab:08:5a:ed:17:e8:35:74:1a:56:
                    c6:d0:18:c6:fe:f6:db:33:de:bb:4b:1e:24:b5:67:
                    ef:00:fd:c3:ac:10:35:dd:a5:c5:20:9e:72:46:27:
                    44:9b:85:88:8d:d9:5b:d1:d4:6f:5e:af:e5:85:99:
                    bf:9d:b6:a5:b4:93:5f:ab:d5:30:29:34:dc:99:e7:
                    44:02:be:6d:c7:3d:38:fd:fb:2c:0d:26:e8:8c:d7:
                    56:b8:8a:5d:f1:4f:0e:fa:23:15:e3:ee:ae:e6:ba:
                    6a:e9:65:fe:ce:6a:c9:a8:9d:71:e6:d4:2c:29:83:
                    90:61:1c:b7:9c:03:a0:cb:a3:9d:54:4e:91:84:e6:
                    e6:65:fb:1c:58:cc:55:8f:9a:95:84:47:d5:b6:84:
                    82:02:17:8d:30:65:da:c4:16:84:19:4a:20:3f:42:
                    ea:f4:25:b1:b7:a4:b9:5d:0e:bb:3d:c5:eb:96:4e:
                    a6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:48:0B:DB:BC:C4:B0:9A:55:A7:72:13:F3:A7:CE:0C:14:7E:77:61
            X509v3 Authority Key Identifier:
                keyid:CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3130303a3a2f34342d3434203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         4f:d3:d5:02:90:d7:0f:06:7d:6a:02:44:d5:0d:a6:07:bd:61:
         5f:6d:f2:77:2b:97:51:b9:5e:90:f3:85:60:77:5e:1a:ac:d9:
         4b:d2:36:fc:ec:5a:51:54:c0:d5:1f:0e:3f:91:d9:09:28:fc:
         ec:ca:82:a4:99:e7:e1:58:78:56:2f:14:4b:da:9c:18:0f:47:
         61:03:b7:9b:f5:c9:89:e5:72:4e:2f:2a:e3:e7:20:e2:cf:3e:
         fc:a6:38:92:7e:94:7a:d7:6c:f2:fb:e7:31:a3:be:e7:3e:7b:
         54:a4:4f:a8:47:24:a3:5f:89:92:07:62:ef:b9:36:c4:85:40:
         91:e7:1e:8d:99:91:80:29:d2:e2:e9:66:d1:ac:98:4c:c0:54:
         b9:b7:6c:f4:93:b4:b7:e8:16:ec:eb:4c:b1:d7:dd:94:6c:d8:
         fd:04:7f:5f:6b:ba:b1:1a:b0:c1:8d:89:41:f2:61:3a:21:93:
         8c:c1:0e:a4:6f:38:c7:3c:22:9a:82:13:18:72:4e:6f:57:be:
         5e:d8:4a:52:00:7d:3b:8f:02:59:ab:af:43:b7:e5:23:e8:3f:
         46:c6:0e:40:36:11:07:86:39:00:f2:fe:c4:7e:12:39:87:47:
         0c:5f:9f:63:b9:b1:e1:0d:71:e1:7d:e6:1d:3f:c4:86:0b:8d:
         94:ed:af:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:44 2026 by rpki-client