Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a323a3a2f34382d3438203d3e203131333538.roa
File:                     323630323a663937653a323a3a2f34382d3438203d3e203131333538.roa (raw, json)
Hash identifier:          hcFkxMOszuVllAjOn7und9q8jGlyvWMGLqYfS62JyPo=
Subject key identifier:   78:CC:B8:FE:3D:D1:84:30:93:A3:CB:6C:86:BD:2B:E8:B3:AB:43:2F
Certificate issuer:       /CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Certificate serial:       6CD2863F9E74C0F6FA6E107CA8EEF2468B4D1FCE
Authority key identifier: D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a323a3a2f34382d3438203d3e203131333538.roa
Signing time:             Mon 02 Feb 2026 04:41:18 +0000
ROA not before:           Mon 02 Feb 2026 04:36:18 +0000
ROA not after:            Mon 01 Feb 2027 04:41:18 +0000
asID:                     11358
IP address blocks:        2602:f97e:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 10:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d2:86:3f:9e:74:c0:f6:fa:6e:10:7c:a8:ee:f2:46:8b:4d:1f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
        Validity
            Not Before: Feb  2 04:36:18 2026 GMT
            Not After : Feb  1 04:41:18 2027 GMT
        Subject: CN=78CCB8FE3DD1843093A3CB6C86BD2BE8B3AB432F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:62:a6:03:87:87:2f:27:2c:8b:49:51:52:1b:
                    cc:b2:72:9b:29:ef:71:51:37:8d:a1:aa:11:8f:f7:
                    6f:2a:67:e1:df:ba:8c:1a:15:43:4c:63:59:06:87:
                    68:84:d9:11:da:94:59:c9:89:39:12:71:1a:f0:62:
                    5b:b5:93:14:81:66:5d:93:50:7a:f4:50:ba:c8:9e:
                    73:1e:a7:ad:38:d5:3e:6e:1e:69:01:e7:bc:e6:68:
                    c3:88:82:c0:16:d8:c4:ae:83:02:df:59:de:27:9a:
                    1b:6d:03:d3:6c:f9:9e:0a:ed:3f:93:f6:e4:26:4b:
                    0e:4a:95:bc:a4:d4:73:e8:29:07:e9:74:30:cb:b4:
                    e6:43:86:cd:f1:b1:c9:f6:d1:8e:1b:fd:34:fd:d2:
                    16:b6:c7:9a:10:35:74:88:d0:21:c1:db:dd:70:2c:
                    d5:0b:6e:21:02:66:6f:d7:ea:c4:50:80:ab:9d:bf:
                    8c:2f:57:09:28:bd:fe:1b:7c:b2:ac:d9:a7:13:9e:
                    73:28:93:16:e2:3a:ca:e8:ad:ab:c1:db:1a:9c:93:
                    59:d4:d0:8c:92:6e:03:d3:11:b6:6d:d0:5e:20:43:
                    7c:de:05:9f:0c:b6:cc:72:a8:71:5e:8c:53:40:92:
                    37:ad:11:69:e7:a7:75:db:63:94:5f:93:66:cc:7c:
                    d5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CC:B8:FE:3D:D1:84:30:93:A3:CB:6C:86:BD:2B:E8:B3:AB:43:2F
            X509v3 Authority Key Identifier:
                keyid:D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a323a3a2f34382d3438203d3e203131333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f97e:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:bd:20:23:bf:8a:02:36:f0:94:d4:3b:79:7d:60:ce:71:2a:
         bd:c9:dc:1b:e1:d5:05:31:1f:3c:b3:95:d4:28:ec:a2:39:9a:
         bd:a1:20:f9:e0:bb:b7:fa:11:ee:0b:7e:30:3c:bf:c9:1b:bf:
         96:f3:32:6a:3f:6e:0a:94:0c:31:3c:b1:67:71:4c:1f:5c:81:
         c7:67:cc:79:7b:2a:6d:3c:98:ba:9b:19:d6:e0:bd:56:2a:bc:
         b1:21:76:89:c4:17:09:fb:5f:e2:b4:65:58:ab:f4:e8:56:a5:
         2f:44:0a:09:db:18:ab:af:ec:b8:ed:ae:7b:04:74:4c:d7:17:
         24:ee:f6:fc:ff:28:ea:e4:1a:68:2b:58:2c:3a:f8:47:86:5e:
         c7:c3:4b:f7:15:59:be:4e:ea:0b:df:4e:41:c2:7f:02:a1:22:
         83:f2:de:ef:b1:06:05:a0:b3:7c:62:8a:3e:0a:38:d3:0c:ae:
         fd:a7:1b:99:39:43:5c:3c:93:17:60:2c:1c:b1:79:ee:ce:a8:
         63:82:c5:ac:9b:27:3b:4d:1d:77:74:6e:9f:4e:d9:37:83:ee:
         e5:25:4d:1c:75:53:de:8e:8a:50:d3:45:17:39:d1:07:e0:c3:
         8b:b8:5b:cb:a4:44:97:c7:22:ca:39:69:a6:5b:f7:26:ea:c9:
         4c:72:fc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:22:49 2026 by rpki-client