Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          im3xc/qFXSij9sFDVO/gQ2tSJabJqbqfghXtvyd4DcM=
Subject key identifier:   C0:15:E1:A4:E5:53:4B:27:49:89:52:F5:1B:78:37:CE:30:35:FA:94
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       59F459F902CE3FBFB9F4BFE733F7B28C82EE7F53
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 11 Jun 2026 14:36:06 +0000
ROA not before:           Thu 11 Jun 2026 14:31:06 +0000
ROA not after:            Thu 10 Jun 2027 14:36:06 +0000
asID:                     9009
IP address blocks:        2602:fad4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f4:59:f9:02:ce:3f:bf:b9:f4:bf:e7:33:f7:b2:8c:82:ee:7f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Jun 11 14:31:06 2026 GMT
            Not After : Jun 10 14:36:06 2027 GMT
        Subject: CN=C015E1A4E5534B27498952F51B7837CE3035FA94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c5:bd:d8:a5:02:91:0e:d4:28:c7:49:4d:65:
                    f9:fd:b3:8b:d0:3b:ef:d2:89:7a:75:fd:26:0f:90:
                    fc:88:6e:f0:3e:de:1e:79:2c:9d:90:fa:19:f6:8e:
                    dd:8f:68:08:30:38:52:cf:ab:a1:f0:6d:6e:13:f4:
                    e2:0d:a9:cd:90:cb:49:c5:d7:9f:b4:4f:04:5a:95:
                    1f:f5:22:99:31:03:a8:ed:66:4d:df:de:bf:cc:00:
                    cf:ab:20:69:e6:15:9c:30:d6:f0:62:eb:d8:3b:18:
                    47:9e:5b:f1:3c:fe:96:21:27:b0:89:f5:fe:84:54:
                    3f:2b:83:95:6d:de:b9:80:97:cf:5b:ca:d3:20:48:
                    c4:32:d9:3d:45:7c:9f:f4:7c:ed:55:ea:32:2e:ab:
                    32:e7:26:99:71:bf:11:94:ce:ac:c2:b2:42:71:49:
                    17:99:d2:78:b4:dc:ea:29:9f:64:81:64:42:46:0b:
                    a4:47:58:14:c6:65:ed:49:91:7d:8d:1c:f6:51:e6:
                    4c:c0:ba:b4:06:fe:07:06:e9:57:cb:9c:4a:2f:d9:
                    7f:95:58:7a:2d:25:a0:31:63:62:7b:5c:d2:bf:95:
                    29:aa:91:cd:5c:df:e1:89:27:d7:8e:be:d6:29:8a:
                    c7:f5:cb:d0:36:28:36:eb:cc:ed:f3:65:bd:bb:31:
                    2a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:15:E1:A4:E5:53:4B:27:49:89:52:F5:1B:78:37:CE:30:35:FA:94
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:dd:62:2a:7e:15:3a:83:f9:6e:47:5f:45:d5:e3:6d:df:a8:
         64:07:74:ec:14:b9:21:b5:4e:18:40:94:13:ca:80:8a:83:14:
         e2:be:2e:fa:8f:07:b3:24:eb:5c:68:43:d3:84:df:8d:a7:4a:
         5c:0f:7a:d0:83:6b:74:d9:41:cd:ba:8e:2f:69:78:f3:b0:58:
         3b:e7:ad:83:e1:54:95:12:27:fb:4b:b1:89:bd:2b:16:4c:47:
         34:2f:84:27:e5:1a:02:ae:19:68:a9:f4:98:cd:3e:e9:0d:1e:
         aa:e4:36:32:63:32:fb:57:e1:b3:65:ce:e9:48:6a:28:46:9e:
         4d:af:2a:2d:db:78:1a:0a:fa:7e:fd:74:c3:25:5c:0d:99:88:
         fd:75:d3:4e:b3:b1:c1:32:0e:b6:68:bc:4c:f9:0e:f8:14:a3:
         46:6e:18:cb:12:c7:ad:2c:13:7d:77:3e:54:20:36:d4:75:4f:
         de:26:97:ce:47:51:e4:44:a9:0f:70:88:80:ef:17:69:a8:7b:
         8c:d1:d4:aa:46:79:32:fd:fb:c7:a3:97:49:70:b1:b3:56:80:
         58:c3:d8:e4:f4:d5:45:45:16:bb:87:f7:29:3d:74:74:5c:77:
         86:cf:2b:67:81:1a:26:0d:a0:43:0d:d2:7e:c0:2f:43:1a:47:
         02:f0:8c:c4
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUWfRZ+QLOP7+59L/nM/eyjILuf1MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTNlMTM1MjE2YTM3NTU0MGJlNWVmMzQ1MmU2YWEzMmEw
YTAzZWFjNjY3Y2I5ZmU2NGUwHhcNMjYwNjExMTQzMTA2WhcNMjcwNjEwMTQzNjA2
WjAzMTEwLwYDVQQDEyhDMDE1RTFBNEU1NTM0QjI3NDk4OTUyRjUxQjc4MzdDRTMw
MzVGQTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cW92KUCkQ7U
KMdJTWX5/bOL0Dvv0ol6df0mD5D8iG7wPt4eeSydkPoZ9o7dj2gIMDhSz6uh8G1u
E/TiDanNkMtJxdeftE8EWpUf9SKZMQOo7WZN396/zADPqyBp5hWcMNbwYuvYOxhH
nlvxPP6WISewifX+hFQ/K4OVbd65gJfPW8rTIEjEMtk9RXyf9HztVeoyLqsy5yaZ
cb8RlM6swrJCcUkXmdJ4tNzqKZ9kgWRCRgukR1gUxmXtSZF9jRz2UeZMwLq0Bv4H
BulXy5xKL9l/lVh6LSWgMWNie1zSv5UpqpHNXN/hiSfXjr7WKYrH9cvQNig268zt
82W9uzEqFwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFMAV4aTlU0snSYlS9Rt4N84w
NfqUMB8GA1UdIwQYMBaAFJB1EYPkO6TqsWr2BLUEHo/+8x3yMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODg5YzNlYWUwMTg4YWZmNjY3MzQwOTRkLzAv
OTA3NTExODNFNDNCQTRFQUIxNkFGNjA0QjUwNDFFOEZGRUYzMURGMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjLzA3NDNlYWNmLWJjNGYtNGM4YS05MTQwLTEzNDdiNmZhNmVlNS9hM2Ux
MzUyMTZhMzc1NTQwYmU1ZWYzNDUyZTZhYTMyYTBhMDNlYWM2NjdjYjlmZTY0ZS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODg5YzNlYWUwMTg4YWZm
NjY3MzQwOTRkLzAvMzIzNjMwMzIzYTY2NjE2NDM0M2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzkzMDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvrUAAAwDQYJKoZIhvcNAQELBQAD
ggEBAKPdYip+FTqD+W5HX0XV423fqGQHdOwUuSG1ThhAlBPKgIqDFOK+LvqPB7Mk
61xoQ9OE342nSlwPetCDa3TZQc26ji9pePOwWDvnrYPhVJUSJ/tLsYm9KxZMRzQv
hCflGgKuGWip9JjNPukNHqrkNjJjMvtX4bNlzulIaihGnk2vKi3beBoK+n79dMMl
XA2ZiP11006zscEyDrZovEz5DvgUo0ZuGMsSx60sE313PlQgNtR1T94ml85HUeRE
qQ9wiIDvF2moe4zR1KpGeTL9+8ejl0lwsbNWgFjD2OT01UVFFruH9yk9dHRcd4bP
K2eBGiYNoEMN0n7AL0MaRwLwjMQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:14:19 2026 by rpki-client