Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61393a3a2f34382d3438203d3e203439383637.roa
File:                     323630323a663962613a61393a3a2f34382d3438203d3e203439383637.roa (raw, json)
Hash identifier:          Q6dCiYjKtTtT5d9pmjJQRSvh5I4x0FmRLuNG7uKkK/w=
Subject key identifier:   71:71:A8:32:78:F9:EE:9D:21:06:55:34:86:56:F2:69:A4:B8:E4:C8
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       4EADC7E7CE3F26530B7C5F1EFF29FA8C29810598
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61393a3a2f34382d3438203d3e203439383637.roa
Signing time:             Wed 16 Jul 2025 09:13:34 +0000
ROA not before:           Wed 16 Jul 2025 09:08:34 +0000
ROA not after:            Wed 15 Jul 2026 09:13:34 +0000
asID:                     49867
IP address blocks:        2602:f9ba:a9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ad:c7:e7:ce:3f:26:53:0b:7c:5f:1e:ff:29:fa:8c:29:81:05:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jul 16 09:08:34 2025 GMT
            Not After : Jul 15 09:13:34 2026 GMT
        Subject: CN=7171A83278F9EE9D210655348656F269A4B8E4C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:17:65:08:85:65:81:47:54:95:2e:2e:52:b1:
                    6d:d4:92:97:75:97:b6:60:67:5d:b9:15:d1:79:a8:
                    76:8c:68:80:d5:6e:11:4f:20:17:7c:09:ab:5c:ee:
                    e8:a8:c9:24:22:94:dd:6d:d6:6a:b3:77:7c:27:45:
                    d4:8f:d7:73:cc:45:ca:fa:d5:c6:78:06:53:da:5b:
                    5f:f8:b5:66:1a:c9:c8:39:16:1b:e7:73:be:c2:f4:
                    d7:6d:14:49:7c:4e:f5:8c:80:5c:69:88:5a:44:e3:
                    f6:6a:8e:04:c7:46:c8:83:2e:35:af:52:73:68:d8:
                    34:80:3b:b9:b8:1a:cf:b5:9c:3d:c9:26:0d:0a:f1:
                    a5:d9:d5:98:b5:3c:a8:13:8b:40:6a:eb:84:a9:d0:
                    81:38:cb:12:f1:f8:7d:a6:71:93:72:90:51:1f:7d:
                    cd:0e:71:11:9d:c6:26:41:b2:49:9d:aa:50:d6:d7:
                    cb:0b:bd:44:d5:34:23:08:d5:ef:29:c9:ba:e3:fc:
                    af:07:ea:3d:3e:de:ae:23:62:9c:d5:e7:00:2f:6e:
                    8a:fa:bd:f6:15:c7:87:6d:0c:c4:83:00:62:d7:4f:
                    94:4f:6b:c4:a3:f5:7c:8a:e1:f8:dc:f3:18:bc:5f:
                    7a:3b:f4:8b:88:fc:64:1e:18:12:0f:e3:7f:cd:c4:
                    6e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:71:A8:32:78:F9:EE:9D:21:06:55:34:86:56:F2:69:A4:B8:E4:C8
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61393a3a2f34382d3438203d3e203439383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:a9::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:32:8d:e9:a8:7a:fd:51:8a:4f:7a:8c:9e:3e:a7:5c:00:db:
         86:13:77:d4:39:5a:da:1e:52:c6:09:b4:4c:52:ce:33:54:fc:
         f7:40:2f:1f:5a:3f:5c:7e:67:d2:73:28:47:15:4c:04:a6:75:
         9d:83:f9:44:42:9d:a2:e2:2c:dc:89:f0:0a:02:ec:56:ce:68:
         95:7e:a8:de:8d:df:22:38:95:2c:f7:a7:0f:08:e1:20:23:be:
         c3:73:9a:b7:5a:6b:38:1c:6d:c0:29:03:77:25:e3:17:79:7e:
         39:33:60:a5:3e:4c:7e:0d:9e:12:71:98:48:15:b6:8a:19:ed:
         1a:8b:bc:58:32:af:55:a0:f4:5f:a5:d3:f6:e7:7e:5a:14:82:
         8b:35:da:53:5c:38:06:fe:fe:46:aa:32:40:7b:58:15:f8:0b:
         68:67:43:72:77:88:72:70:53:a2:cd:69:94:e5:c0:b9:e3:c4:
         9e:44:2f:cc:6c:fd:3b:c5:08:89:ad:05:1c:a6:31:0e:7c:f5:
         c2:c1:8a:57:7f:d3:07:14:00:bd:3b:7e:3b:62:a4:21:02:6e:
         a8:d8:3d:d8:c4:be:f7:27:d1:eb:e9:01:60:0f:8a:96:1b:a6:
         4f:1f:52:5d:ee:50:b5:d8:c1:64:26:df:74:11:1a:5b:51:71:
         25:dc:0b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:18:14 2025 by rpki-client