Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a6131303a3a2f34382d3438203d3e20323135383535.roa
File:                     323630323a663962613a6131303a3a2f34382d3438203d3e20323135383535.roa (raw, json)
Hash identifier:          rbl24VlStlbfImatiVjEYwq8T9FpcACM+Aq3kidHIEg=
Subject key identifier:   0E:D7:4C:03:B6:56:3A:D8:7B:90:BB:2A:67:B5:EC:D2:A5:3C:89:CA
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       4CE2EC621DF2E0779FA23AC5EB83FBAFACAFF3EB
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a6131303a3a2f34382d3438203d3e20323135383535.roa
Signing time:             Wed 16 Jul 2025 09:13:34 +0000
ROA not before:           Wed 16 Jul 2025 09:08:34 +0000
ROA not after:            Wed 15 Jul 2026 09:13:34 +0000
asID:                     215855
IP address blocks:        2602:f9ba:a10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e2:ec:62:1d:f2:e0:77:9f:a2:3a:c5:eb:83:fb:af:ac:af:f3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jul 16 09:08:34 2025 GMT
            Not After : Jul 15 09:13:34 2026 GMT
        Subject: CN=0ED74C03B6563AD87B90BB2A67B5ECD2A53C89CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:c5:55:f9:be:1d:f8:7a:9d:94:3c:fc:35:
                    a8:99:51:f1:95:30:0e:ff:6d:e8:03:84:f6:36:e5:
                    19:c7:67:b6:bc:0c:f9:58:7a:49:22:86:b2:f6:de:
                    be:cf:9b:f3:5e:ac:db:f8:29:7f:f8:f3:27:44:2c:
                    ca:33:54:60:ad:2f:28:3c:fc:74:b8:a1:bf:90:42:
                    31:b1:0f:83:9c:2f:74:94:5b:37:68:c5:ae:58:1b:
                    69:68:95:98:d5:95:08:c3:08:fc:5c:59:50:5c:0d:
                    61:eb:6a:25:1c:6a:d0:d7:a7:ac:11:c7:c6:3a:6f:
                    26:90:3a:dd:89:28:24:db:b9:61:4b:83:11:79:29:
                    d3:f2:50:93:56:72:6e:db:fa:a9:eb:a3:33:ba:c6:
                    96:73:53:30:ec:a1:26:b2:15:48:8b:19:0d:97:b4:
                    a9:34:10:0e:63:55:ec:93:9d:e1:a6:b0:d5:fa:fb:
                    ed:a7:f3:54:b7:2e:70:e3:3a:fb:3f:48:2f:16:80:
                    8b:9a:a4:63:c0:3b:83:cf:4e:7d:5a:3d:5c:73:b6:
                    fe:01:2f:d7:77:1b:18:bf:4c:ed:42:fd:f3:7c:20:
                    61:ce:04:3d:00:32:99:ab:cd:87:3c:cb:be:32:e3:
                    c9:b3:10:ae:56:ef:13:42:0f:33:2b:33:6e:1a:6a:
                    d2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D7:4C:03:B6:56:3A:D8:7B:90:BB:2A:67:B5:EC:D2:A5:3C:89:CA
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a6131303a3a2f34382d3438203d3e20323135383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:a10::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:95:5b:2f:11:54:3d:d8:17:04:d1:17:ea:24:3d:33:59:fe:
         cd:54:05:68:04:f1:22:2c:5e:5d:c8:52:0a:3d:e4:9a:80:ed:
         85:10:d5:ba:07:7e:08:80:0e:4d:b7:57:67:d9:63:3e:ff:58:
         73:91:c8:4b:30:90:51:14:da:8b:b0:5b:29:2d:cd:1b:f9:6f:
         ce:41:47:77:6b:31:1a:0e:a0:95:43:36:de:67:5e:88:93:31:
         34:72:6e:c2:c7:39:1a:b5:8e:b1:46:f4:e9:df:a4:a5:4a:b0:
         ee:1d:77:bb:6b:f3:cf:b3:2f:ed:c2:9a:a0:73:c0:1a:22:2a:
         42:d9:07:b5:da:ba:ab:22:23:26:5e:9d:05:66:e1:2e:52:85:
         94:3f:78:8f:6c:d3:be:4a:9d:39:78:05:02:7c:29:ac:cb:a0:
         d7:d0:21:d6:1b:17:67:79:8b:36:a5:14:57:3a:e7:0d:96:c9:
         41:c2:7c:cb:af:22:a1:b3:4b:9d:fb:54:f1:9f:4b:65:11:9e:
         94:18:5e:40:0e:2b:56:ae:60:d6:d3:4b:5e:84:31:6a:7f:b8:
         60:52:a7:90:0a:86:fb:5d:54:95:fd:19:b5:67:0b:1a:4c:a1:
         da:9d:04:e5:0a:44:dd:20:27:49:35:7f:00:7a:04:df:2d:f2:
         2f:57:65:b6
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUTOLsYh3y4HefojrF64P7r6yv8+swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGQ4YTY3MmRkNzk2ZTVhZmQ5NTg3NmU5YjU2ODU2NWFl
ZjJiMGI3NmI4MzgyZWEyMmEwHhcNMjUwNzE2MDkwODM0WhcNMjYwNzE1MDkxMzM0
WjAzMTEwLwYDVQQDEygwRUQ3NEMwM0I2NTYzQUQ4N0I5MEJCMkE2N0I1RUNEMkE1
M0M4OUNBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXzFVfm+Hfh6
nZQ8/DWomVHxlTAO/23oA4T2NuUZx2e2vAz5WHpJIoay9t6+z5vzXqzb+Cl/+PMn
RCzKM1RgrS8oPPx0uKG/kEIxsQ+DnC90lFs3aMWuWBtpaJWY1ZUIwwj8XFlQXA1h
62olHGrQ16esEcfGOm8mkDrdiSgk27lhS4MReSnT8lCTVnJu2/qp66MzusaWc1Mw
7KEmshVIixkNl7SpNBAOY1Xsk53hprDV+vvtp/NUty5w4zr7P0gvFoCLmqRjwDuD
z059Wj1cc7b+AS/XdxsYv0ztQv3zfCBhzgQ9ADKZq82HPMu+MuPJsxCuVu8TQg8z
KzNuGmrS6QIDAQABo4ICvTCCArkwHQYDVR0OBBYEFA7XTAO2VjrYe5C7Kme17NKl
PInKMB8GA1UdIwQYMBaAFHa/RHyTUISUnbBG/3c4seV8gk/5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzlhNjg5NjRmNWZmNjQwZWJhZDEwMGRlZWE3YzliYTQ2LzEv
NzZCRjQ0N0M5MzUwODQ5NDlEQjA0NkZGNzczOEIxRTU3QzgyNEZGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzhkMzdhMDcyLTE1YWUtNDkwNS04MTBlLTk5MWZjNjIwMWI0NS84ZDhh
NjcyZGQ3OTZlNWFmZDk1ODc2ZTliNTY4NTY1YWVmMmIwYjc2YjgzODJlYTIyYS5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS85YTY4OTY0ZjVmZjY0MGViYWQxMDBk
ZWVhN2M5YmE0Ni8xLzMyMzYzMDMyM2E2NjM5NjI2MTNhNjEzMTMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzMTM1MzgzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5ugoQMA0G
CSqGSIb3DQEBCwUAA4IBAQAElVsvEVQ92BcE0RfqJD0zWf7NVAVoBPEiLF5dyFIK
PeSagO2FENW6B34IgA5Nt1dn2WM+/1hzkchLMJBRFNqLsFspLc0b+W/OQUd3azEa
DqCVQzbeZ16IkzE0cm7CxzkatY6xRvTp36SlSrDuHXe7a/PPsy/twpqgc8AaIipC
2Qe12rqrIiMmXp0FZuEuUoWUP3iPbNO+Sp05eAUCfCmsy6DX0CHWGxdneYs2pRRX
OucNlslBwnzLryKhs0ud+1Txn0tlEZ6UGF5ADitWrmDW00tehDFqf7hgUqeQCob7
XVSV/Rm1ZwsaTKHanQTlCkTdICdJNX8AegTfLfIvV2W2
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:35 2025 by rpki-client