Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a31303a3a2f34382d3438203d3e203136393039.roa
File:                     323630323a663738613a31303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          DMxF3EagxfGErBbnGCT3DWwV/JQO/TAKrcda2cwcmP8=
Subject key identifier:   FF:4D:47:C4:54:EB:CF:7D:9A:A2:0F:DD:9F:95:15:8B:98:8E:72:AD
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       0FFE71874C00E036431FA85D6E7BE5CC0CEC2EBC
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a31303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 16 May 2026 21:06:14 +0000
ROA not before:           Sat 16 May 2026 21:01:14 +0000
ROA not after:            Sat 15 May 2027 21:06:14 +0000
asID:                     16909
IP address blocks:        2602:f78a:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 16:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fe:71:87:4c:00:e0:36:43:1f:a8:5d:6e:7b:e5:cc:0c:ec:2e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: May 16 21:01:14 2026 GMT
            Not After : May 15 21:06:14 2027 GMT
        Subject: CN=FF4D47C454EBCF7D9AA20FDD9F95158B988E72AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cd:d0:9b:ea:cf:fd:4a:0f:8a:ad:4a:50:f0:
                    73:b4:78:0d:5e:e9:4a:77:4d:dc:de:b5:fe:0c:a2:
                    ac:ba:49:7e:a5:00:23:92:b8:56:61:8f:be:81:f5:
                    d7:4e:63:1b:82:09:bd:0f:67:dd:33:82:6f:02:7d:
                    f9:bb:af:14:a1:d0:e9:33:c6:c1:7f:6f:b4:99:ea:
                    fa:21:b6:f7:05:9b:20:8a:37:74:72:c2:6e:7e:1e:
                    3a:dd:b8:a6:b2:f7:e7:95:34:f6:60:ff:33:f2:74:
                    48:b2:6b:e6:46:de:a4:fc:d5:9a:82:77:41:55:51:
                    92:f6:fa:43:f8:af:9c:c3:40:95:15:63:c0:12:ad:
                    a4:72:fb:53:77:d5:98:5a:86:ad:21:8d:fa:40:35:
                    45:dd:2f:7c:5a:b3:4e:3b:62:d3:41:6a:db:54:d6:
                    42:91:b3:88:aa:6b:06:76:b2:26:7c:eb:88:fa:07:
                    ed:47:1a:a0:19:91:8b:76:8e:9f:de:83:e7:52:e7:
                    57:b7:47:fe:7a:14:b1:10:0a:67:e5:45:e4:13:1b:
                    a0:93:87:ec:11:92:e0:4e:03:41:e2:6c:dd:ef:6d:
                    d2:1e:74:4d:f7:7b:df:4d:06:76:5f:27:70:22:15:
                    d1:d8:a8:f6:70:2e:3a:9f:b2:fb:ad:50:e8:35:84:
                    dd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4D:47:C4:54:EB:CF:7D:9A:A2:0F:DD:9F:95:15:8B:98:8E:72:AD
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a31303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:5a:2e:a0:ca:69:f3:5c:60:a8:ac:9b:49:5d:32:72:76:db:
         29:64:7c:d3:13:d1:87:3a:17:12:00:38:7a:80:ee:bf:bd:3b:
         88:ec:9a:7c:ea:8e:95:98:4a:e0:ed:6a:f1:e7:ee:06:88:df:
         05:7a:23:d8:d2:4c:03:d4:36:ca:83:01:5f:bb:fe:69:44:bf:
         fe:29:75:a7:60:55:cc:34:13:6e:36:b7:cb:41:e8:49:e4:72:
         5b:23:b2:2a:c4:b0:f7:0a:47:42:1e:8a:48:0b:73:2a:57:00:
         83:b7:f5:96:c1:c2:07:b5:75:df:c9:b1:f9:51:b8:96:6b:61:
         5e:78:04:be:d1:3c:38:31:d8:e9:e7:b9:57:cb:a9:34:a9:f9:
         e3:75:29:00:9e:10:82:32:04:68:50:ba:4d:e6:10:33:bf:4f:
         08:73:1e:66:0b:97:8a:22:27:f3:41:ab:0a:15:d9:2f:bf:06:
         6b:34:3e:e5:0e:60:e1:a3:c4:31:1c:a6:6c:d7:11:c4:6c:ac:
         ba:e8:ec:9e:19:e8:fd:0a:15:a1:c6:15:a2:e8:3f:31:58:95:
         60:fa:42:62:50:08:c8:2e:73:4a:77:2e:0a:b6:15:e6:06:95:
         f3:22:ee:da:f3:f6:ad:02:1f:4a:92:54:57:65:05:af:b8:6e:
         50:73:d4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:50:55 2026 by rpki-client