Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3a2f33322d3332203d3e203137313339.roa
File:                     323630373a666361383a3a2f33322d3332203d3e203137313339.roa (raw, json)
Hash identifier:          8b128OQStVDEhcnYeFqH5iji7O7NbY1fWfsEmhfgfKw=
Subject key identifier:   9D:2C:E5:99:A0:3D:01:6A:D5:57:AA:34:2E:49:45:1F:4A:23:B5:35
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       15BAC8142E1400C6E6CC0E183B24F5C8799C74F0
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3a2f33322d3332203d3e203137313339.roa
Signing time:             Sat 12 Jul 2025 06:34:14 +0000
ROA not before:           Sat 12 Jul 2025 06:29:14 +0000
ROA not after:            Sat 11 Jul 2026 06:34:14 +0000
asID:                     17139
IP address blocks:        2607:fca8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ba:c8:14:2e:14:00:c6:e6:cc:0e:18:3b:24:f5:c8:79:9c:74:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul 12 06:29:14 2025 GMT
            Not After : Jul 11 06:34:14 2026 GMT
        Subject: CN=9D2CE599A03D016AD557AA342E49451F4A23B535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:5f:c6:a5:7e:7b:4f:05:bb:80:40:ea:5b:
                    13:34:a6:d8:85:b9:6c:14:01:d8:99:01:ad:fa:50:
                    18:57:f0:da:79:18:c4:db:6e:d7:25:2c:1c:d5:24:
                    41:ae:fd:1b:66:a4:3b:e2:cb:fe:5c:cc:1a:75:73:
                    b6:00:9d:4b:7b:59:e7:d9:3c:00:19:6f:1f:ac:be:
                    31:e6:b9:fd:14:86:30:5c:f4:22:47:36:b3:4f:22:
                    df:e6:d4:84:93:dc:66:ec:fe:50:65:19:d2:a1:00:
                    7c:6e:6d:25:ab:05:3b:6d:3b:f7:12:d0:15:70:f9:
                    f4:e6:61:54:19:0c:e6:83:a8:ed:c2:e1:29:ed:e2:
                    d5:ad:df:6c:1b:58:64:e0:9d:1a:b2:57:c3:96:c9:
                    70:d4:0e:2d:9f:fb:8e:4a:b1:c1:f5:5e:de:6c:58:
                    97:71:93:75:70:85:50:ac:d7:7e:f1:ac:3e:d6:05:
                    18:db:20:c3:1a:93:ba:c1:bd:eb:c3:4b:0f:98:62:
                    3e:3e:97:b8:f0:bf:8a:de:13:b3:5c:d3:24:7a:a4:
                    ba:c6:50:40:89:49:b6:03:6b:7f:25:4a:c4:38:e6:
                    d8:b8:46:41:f2:0d:2f:9b:54:2b:2a:c7:a8:4d:17:
                    80:3a:ae:7c:7c:c3:8b:64:d4:90:8b:c1:2e:99:01:
                    27:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2C:E5:99:A0:3D:01:6A:D5:57:AA:34:2E:49:45:1F:4A:23:B5:35
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3a2f33322d3332203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fca8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:17:88:c3:e3:bf:b4:af:e5:12:e9:66:5d:5d:bd:85:64:e7:
         4f:6b:1c:f3:fb:a6:46:17:e8:e5:a4:7a:09:f4:08:9b:dc:25:
         48:de:20:30:2b:c3:3c:f9:3f:e0:88:9c:c3:cb:c3:b3:dd:4a:
         84:d3:aa:61:1f:3b:f9:78:5b:38:8e:72:8f:55:5a:50:8e:04:
         0f:30:7a:68:0a:7f:1a:09:4a:1c:03:88:a8:d1:56:db:c3:68:
         e6:e6:12:78:df:76:47:67:75:a8:66:a9:58:06:7b:b3:1f:3d:
         71:b5:54:41:f2:ae:60:25:af:32:4f:fd:30:2c:13:aa:ed:b0:
         84:b1:6c:1b:f6:12:cb:4f:62:50:9f:36:a0:44:98:24:07:bf:
         c4:8d:8a:61:f7:52:d9:c3:26:b7:ed:e0:c6:0f:49:13:91:01:
         47:62:2d:67:08:0a:e4:81:3f:ab:9c:67:20:b5:4a:ba:dd:9f:
         56:27:e7:59:ab:68:62:8b:1a:d5:44:a8:56:c2:0c:b9:e7:fe:
         f8:14:95:9d:6d:52:65:9e:ee:63:a8:0d:39:b4:a3:87:70:b5:
         a4:1d:25:ac:d9:3d:5f:a7:24:30:7e:8f:56:6f:66:db:1d:a7:
         51:b2:60:52:c9:36:19:2a:07:ae:ab:8d:fe:bf:2a:ed:55:ce:
         3c:64:6d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:02:31 2025 by rpki-client