Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62313a3a2f34382d3438203d3e20323134393239.roa
File:                     323630323a663962613a62313a3a2f34382d3438203d3e20323134393239.roa (raw, json)
Hash identifier:          9tu1vg/Tro9jsn5hI04BGc06mLmBmGXpHSxNikyeDuA=
Subject key identifier:   C9:86:D8:A0:99:E3:ED:82:94:BA:3C:59:60:94:DE:71:90:71:78:7F
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       01FCB082F69DACE0AA28CEBF4F07474044033520
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62313a3a2f34382d3438203d3e20323134393239.roa
Signing time:             Mon 04 Aug 2025 10:47:43 +0000
ROA not before:           Mon 04 Aug 2025 10:42:43 +0000
ROA not after:            Mon 03 Aug 2026 10:47:43 +0000
asID:                     214929
IP address blocks:        2602:f9ba:b1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 08:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fc:b0:82:f6:9d:ac:e0:aa:28:ce:bf:4f:07:47:40:44:03:35:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Aug  4 10:42:43 2025 GMT
            Not After : Aug  3 10:47:43 2026 GMT
        Subject: CN=C986D8A099E3ED8294BA3C596094DE719071787F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9d:db:cd:91:5b:b2:e4:bb:ff:66:91:4f:55:
                    a3:3e:56:10:e0:b5:c6:06:2f:8c:0a:8e:f9:3e:a8:
                    4e:60:f7:d0:d3:1e:e2:e5:1b:29:cb:24:07:a1:a3:
                    bf:bf:93:38:bd:14:b4:61:0e:e1:54:26:ad:1e:c6:
                    5c:a4:ac:09:26:a3:1f:90:74:ed:62:92:87:ca:bc:
                    43:42:99:5e:55:85:e2:f9:d3:98:dc:01:97:fb:bb:
                    45:69:36:2e:79:3a:a1:24:1d:2c:48:39:a0:7e:a0:
                    d0:11:8b:47:5c:1d:3f:92:e9:bb:d9:cb:4b:28:79:
                    d2:fe:ad:3f:35:77:77:6c:15:12:0f:c7:4a:3e:3a:
                    65:89:e6:18:5f:3e:7c:46:31:c5:b3:18:94:67:e5:
                    06:f7:0f:9c:86:79:54:2c:ab:bd:9d:df:e8:71:63:
                    db:0b:3d:78:d7:7f:f0:fc:53:aa:c1:bc:d2:69:15:
                    d8:58:05:25:ae:b3:81:19:09:04:d3:a6:d3:26:9a:
                    a1:22:b2:20:01:a4:57:0c:ca:41:dc:dd:b2:be:28:
                    44:51:d4:cf:5d:00:53:d7:ca:ed:c0:15:2d:b9:12:
                    84:f7:c2:99:08:d3:50:6b:e1:c8:d0:b8:f8:8f:f7:
                    33:6e:61:9e:c2:89:52:4b:33:ca:59:f9:3c:08:db:
                    d2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:86:D8:A0:99:E3:ED:82:94:BA:3C:59:60:94:DE:71:90:71:78:7F
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62313a3a2f34382d3438203d3e20323134393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:b1::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:0d:39:f4:cb:46:91:df:fc:df:9c:c2:13:c7:18:ce:41:85:
         50:4c:a4:8d:3f:3a:c8:66:08:63:28:79:07:b1:ad:f6:60:5f:
         0a:16:6e:bc:91:45:00:54:d8:d6:b2:a3:74:e4:9b:04:1f:68:
         0a:b4:4e:5f:15:07:84:de:55:1e:01:07:98:55:92:7b:3e:9f:
         9b:dd:63:9e:0e:d3:2e:53:99:4f:74:57:3e:f2:d3:6b:af:5a:
         05:24:e0:3c:09:35:bb:1c:1a:6d:c2:1e:03:64:9e:2b:65:86:
         79:d9:eb:92:a4:ca:0b:8b:89:22:07:57:3e:ab:8d:72:46:7c:
         58:63:7e:9e:7f:a9:65:14:cf:05:54:41:17:db:91:04:60:18:
         5a:ee:3a:79:55:5f:2b:3a:ea:0d:81:3d:08:07:e5:6f:63:b2:
         60:67:99:ee:13:5a:e0:82:ea:94:60:83:de:d4:ea:58:4c:d1:
         50:4f:16:f3:e1:8b:c6:36:43:20:3a:01:43:e5:3b:d6:ac:25:
         e5:36:e0:a4:d2:61:ed:35:fe:8d:fe:6d:fb:f0:b1:4c:38:93:
         56:e0:dd:fa:da:f4:87:40:51:9a:79:19:bb:54:7c:26:47:0b:
         bf:b0:d1:9f:c8:76:15:fd:7c:84:8e:77:58:f0:68:a9:78:27:
         fa:23:c8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:21:06 2025 by rpki-client