Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/323630323a3239313a61613a3a2f34382d3438203d3e203139333330.roa
File:                     323630323a3239313a61613a3a2f34382d3438203d3e203139333330.roa (raw, json)
Hash identifier:          0l1EkuXZs8r8q/WrJU29kopwP1fAjhHSOD620BXelkg=
Subject key identifier:   62:8C:86:F9:86:15:E3:A7:1B:4A:CB:64:42:E4:D1:B4:6A:9D:FC:DD
Certificate issuer:       /CN=0735111c25496db3ae70272cbbfc4973e5fb6ae2bc8628e470
Certificate serial:       77B274BCA9B9E84D28913602F9B084845F09DA4B
Authority key identifier: 00:1F:62:BF:34:17:95:C8:2E:A8:06:7E:1C:2E:28:C9:07:FB:E2:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25496db3ae70272cbbfc4973e5fb6ae2bc8628e470.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/323630323a3239313a61613a3a2f34382d3438203d3e203139333330.roa
Signing time:             Wed 11 Jun 2025 22:33:20 +0000
ROA not before:           Wed 11 Jun 2025 22:28:20 +0000
ROA not after:            Wed 10 Jun 2026 22:33:20 +0000
asID:                     19330
IP address blocks:        2602:291:aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/001F62BF341795C82EA8067E1C2E28C907FBE2EB.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/001F62BF341795C82EA8067E1C2E28C907FBE2EB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25496db3ae70272cbbfc4973e5fb6ae2bc8628e470.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 09:47:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b2:74:bc:a9:b9:e8:4d:28:91:36:02:f9:b0:84:84:5f:09:da:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735111c25496db3ae70272cbbfc4973e5fb6ae2bc8628e470
        Validity
            Not Before: Jun 11 22:28:20 2025 GMT
            Not After : Jun 10 22:33:20 2026 GMT
        Subject: CN=628C86F98615E3A71B4ACB6442E4D1B46A9DFCDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:16:90:0d:f3:8e:67:8a:ce:f0:0c:7a:7a:48:
                    7f:ef:82:fb:4b:27:0a:35:7b:1b:d7:7b:c0:85:75:
                    06:de:2c:8a:34:c9:79:4f:78:4b:25:a1:b6:e4:b0:
                    7b:1a:e8:5d:62:7c:0c:c5:eb:d1:f0:f2:90:ce:af:
                    8e:30:12:ad:7d:d4:76:1f:c2:ca:ba:d5:e3:55:8b:
                    64:2d:91:ca:bf:bd:ed:ca:fb:5c:06:14:9b:a6:95:
                    bd:55:72:05:cc:98:fe:63:08:6a:d2:e8:72:7b:03:
                    5a:c4:e2:1a:1a:0f:cf:e6:8f:2d:c4:1e:cd:46:fd:
                    2f:96:7f:fa:bd:df:03:55:54:8b:82:f6:9c:b9:94:
                    66:35:cb:58:79:06:06:54:15:b8:81:f7:73:4b:1e:
                    ae:c0:17:94:2a:9b:3e:68:47:e0:fe:7e:43:af:54:
                    f0:4c:bb:77:4b:48:7f:c4:ba:9d:db:1d:97:ee:55:
                    a4:c9:d4:f1:d5:9d:69:51:09:16:64:c6:e5:4b:c9:
                    3b:76:70:22:b0:91:f3:ac:c5:be:48:63:01:a6:53:
                    b3:a5:5e:fc:1a:a5:0f:dc:42:8e:bb:f2:1b:a5:bc:
                    f8:0f:88:56:fc:cb:d1:8b:6f:7a:cd:84:60:51:82:
                    39:2b:28:55:6f:9e:c1:98:48:b6:b4:a6:99:e8:98:
                    89:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8C:86:F9:86:15:E3:A7:1B:4A:CB:64:42:E4:D1:B4:6A:9D:FC:DD
            X509v3 Authority Key Identifier:
                keyid:00:1F:62:BF:34:17:95:C8:2E:A8:06:7E:1C:2E:28:C9:07:FB:E2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/001F62BF341795C82EA8067E1C2E28C907FBE2EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25496db3ae70272cbbfc4973e5fb6ae2bc8628e470.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/323630323a3239313a61613a3a2f34382d3438203d3e203139333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:291:aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:c8:81:c8:62:b3:3f:70:a7:20:0f:61:f1:1c:cc:c2:2f:b1:
         e0:b3:57:77:e8:ff:a4:13:de:67:42:7c:f2:ff:2a:03:37:c4:
         1f:58:71:47:dd:7d:f0:3d:da:b4:6a:a7:89:d4:53:59:97:19:
         32:2e:52:e2:a1:ac:63:be:e8:28:4c:5c:63:c5:00:e1:d0:8c:
         d5:5e:d3:a5:d2:a5:46:40:90:be:f8:53:46:c3:5d:ca:08:a4:
         1c:25:d4:f3:bb:d1:40:f7:94:3e:2a:a1:b3:77:1f:29:c6:68:
         04:59:be:e7:64:0e:35:24:3c:32:29:11:13:a0:08:e7:36:67:
         99:52:b7:1c:2c:82:a4:93:3b:2c:25:77:94:06:56:f0:01:19:
         d2:50:02:ca:3f:33:26:dc:84:26:3a:a0:bd:f7:29:68:90:3a:
         ac:d0:43:e4:a0:20:07:e7:dc:c5:58:b6:9b:ef:c9:1f:bf:f0:
         4a:7b:e0:89:de:b4:e3:98:47:b9:f4:ec:3c:2f:d4:2b:d4:ec:
         0a:59:a0:3b:04:62:0c:36:06:fd:9b:f6:af:a2:64:50:de:4b:
         85:25:f9:a3:19:9b:23:e2:e1:55:83:7c:36:6a:a1:23:88:af:
         15:5b:2e:15:b6:d7:39:eb:77:cd:f8:91:ed:28:98:1c:c8:48:
         2a:78:45:78
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUd7J0vKm56E0okTYC+bCEhF8J2kswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDczNTExMWMyNTQ5NmRiM2FlNzAyNzJjYmJmYzQ5NzNl
NWZiNmFlMmJjODYyOGU0NzAwHhcNMjUwNjExMjIyODIwWhcNMjYwNjEwMjIzMzIw
WjAzMTEwLwYDVQQDEyg2MjhDODZGOTg2MTVFM0E3MUI0QUNCNjQ0MkU0RDFCNDZB
OURGQ0REMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxaQDfOOZ4rO
8Ax6ekh/74L7SycKNXsb13vAhXUG3iyKNMl5T3hLJaG25LB7GuhdYnwMxevR8PKQ
zq+OMBKtfdR2H8LKutXjVYtkLZHKv73tyvtcBhSbppW9VXIFzJj+Ywhq0uhyewNa
xOIaGg/P5o8txB7NRv0vln/6vd8DVVSLgvacuZRmNctYeQYGVBW4gfdzSx6uwBeU
Kps+aEfg/n5Dr1TwTLt3S0h/xLqd2x2X7lWkydTx1Z1pUQkWZMblS8k7dnAisJHz
rMW+SGMBplOzpV78GqUP3EKOu/Ibpbz4D4hW/MvRi296zYRgUYI5KyhVb57BmEi2
tKaZ6JiJpwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFGKMhvmGFeOnG0rLZELk0bRq
nfzdMB8GA1UdIwQYMBaAFAAfYr80F5XILqgGfhwuKMkH++LrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzlhNjg5NjRmNWZmNjQwZWJhZDEwMGRlZWE3YzliYTQ2LzAv
MDAxRjYyQkYzNDE3OTVDODJFQTgwNjdFMUMyRTI4QzkwN0ZCRTJFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzc4N2ViYmY5LTFhMGUtNDQxMC04MWEwLWE0YTAyYTI3ZmEyYi8wNzM1
MTExYzI1NDk2ZGIzYWU3MDI3MmNiYmZjNDk3M2U1ZmI2YWUyYmM4NjI4ZTQ3MC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS85YTY4OTY0ZjVmZjY0MGViYWQxMDBk
ZWVhN2M5YmE0Ni8wLzMyMzYzMDMyM2EzMjM5MzEzYTYxNjEzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMTM5MzMzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICkQCqMA0GCSqGSIb3
DQEBCwUAA4IBAQBUyIHIYrM/cKcgD2HxHMzCL7Hgs1d36P+kE95nQnzy/yoDN8Qf
WHFH3X3wPdq0aqeJ1FNZlxkyLlLioaxjvugoTFxjxQDh0IzVXtOl0qVGQJC++FNG
w13KCKQcJdTzu9FA95Q+KqGzdx8pxmgEWb7nZA41JDwyKREToAjnNmeZUrccLIKk
kzssJXeUBlbwARnSUALKPzMm3IQmOqC99ylokDqs0EPkoCAH59zFWLab78kfv/BK
e+CJ3rTjmEe59Ow8L9Qr1OwKWaA7BGIMNgb9m/avomRQ3kuFJfmjGZsj4uFVg3w2
aqEjiK8VWy4Vttc563fN+JHtKJgcyEgqeEV4
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:20:23 2025 by rpki-client