Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62323a3a2f34382d3438203d3e20323035393431.roa
File:                     323630323a663962613a62323a3a2f34382d3438203d3e20323035393431.roa (raw, json)
Hash identifier:          4/cpiIy9hPKglKaVddZE28Ixwtd/uWb1Bq9drPQWBSc=
Subject key identifier:   D5:30:32:93:4E:2F:84:77:41:9B:40:13:EE:93:42:BC:A9:F8:FF:7B
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       18421E65CACBA2E747642E6B1931E60515CE5D88
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62323a3a2f34382d3438203d3e20323035393431.roa
Signing time:             Mon 04 Aug 2025 12:43:12 +0000
ROA not before:           Mon 04 Aug 2025 12:38:12 +0000
ROA not after:            Mon 03 Aug 2026 12:43:12 +0000
asID:                     205941
IP address blocks:        2602:f9ba:b2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:46:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:42:1e:65:ca:cb:a2:e7:47:64:2e:6b:19:31:e6:05:15:ce:5d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Aug  4 12:38:12 2025 GMT
            Not After : Aug  3 12:43:12 2026 GMT
        Subject: CN=D53032934E2F8477419B4013EE9342BCA9F8FF7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:8d:ef:7f:55:89:a8:b6:96:83:b1:73:fa:
                    ff:34:e3:c8:eb:74:92:d6:12:01:65:11:cf:1d:62:
                    23:64:3b:ac:71:6e:24:e7:53:37:3f:59:e1:57:c2:
                    7b:76:0b:fc:8f:6a:e2:63:30:d5:a6:18:b3:c9:f6:
                    97:04:65:91:86:21:30:32:98:31:a5:5a:01:e6:9a:
                    67:e5:63:7a:4f:5b:a0:7a:d0:2b:e1:78:96:d3:fe:
                    f6:cb:e7:48:13:7b:19:b9:2b:e6:83:fa:af:19:99:
                    aa:4e:a5:ff:39:e6:e3:43:d3:ce:71:71:44:f5:3c:
                    01:f6:12:df:ae:8f:53:ee:ba:17:56:bf:e5:79:31:
                    3f:38:59:c0:1c:75:38:33:49:aa:9a:4b:5a:1c:fa:
                    0d:07:26:83:29:1e:e9:74:50:78:1b:ce:48:63:38:
                    ca:58:0f:fa:58:ea:75:d1:fa:81:74:13:fb:85:2e:
                    2c:04:b4:03:2b:26:b3:cd:6f:30:f5:4a:63:cd:7e:
                    e4:92:b6:04:04:9e:3d:8a:7d:95:50:b8:5c:42:da:
                    42:ba:41:43:8f:bc:94:e7:cb:56:32:7d:88:ce:7f:
                    40:ca:80:01:a6:96:37:36:7c:1a:45:03:98:93:2e:
                    cc:a9:95:df:38:03:ea:ff:0f:a8:10:d6:46:71:32:
                    31:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:30:32:93:4E:2F:84:77:41:9B:40:13:EE:93:42:BC:A9:F8:FF:7B
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a62323a3a2f34382d3438203d3e20323035393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:b2::/48

    Signature Algorithm: sha256WithRSAEncryption
         d4:68:8a:59:c9:b1:72:21:bd:47:b2:a3:f9:4c:c2:1d:a2:1a:
         e2:d3:53:a4:42:e8:0a:a3:4b:57:2c:60:08:e3:24:b9:7f:97:
         11:ac:52:1f:9f:aa:35:df:15:5d:a4:b0:64:82:b1:d4:3c:70:
         d9:fe:16:47:62:68:a9:b7:48:4a:4e:05:a0:c6:64:5f:12:fb:
         a5:61:65:21:4a:db:c2:a5:ae:90:66:6e:14:78:cb:1b:be:2e:
         30:7a:ba:3f:08:d2:cb:d1:c6:d4:11:73:0b:64:ae:84:ba:98:
         08:c1:aa:62:80:ec:43:52:26:99:0c:cf:49:9f:75:64:02:34:
         d5:b9:94:f8:eb:7c:ab:ff:94:79:12:6f:5a:9b:c2:55:d8:1e:
         ef:09:39:d5:f1:1b:da:fd:27:cc:ee:e0:da:68:73:f4:d2:25:
         3e:1e:18:ee:f1:ff:56:06:3f:51:39:cc:9b:26:38:c9:a4:54:
         44:ba:22:1e:53:b8:41:ba:72:ef:98:d1:1d:50:20:48:db:b5:
         26:bd:98:ed:6a:e1:bb:3e:36:17:ab:ba:64:e8:f7:b9:37:3f:
         ca:bc:64:a7:6c:42:57:0d:9c:fe:31:75:8c:fd:a1:7f:84:45:
         d4:de:d5:75:8d:bc:48:ed:45:19:33:98:b7:ea:36:0c:29:ac:
         ac:84:f1:5c
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUGEIeZcrLoudHZC5rGTHmBRXOXYgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGQ4YTY3MmRkNzk2ZTVhZmQ5NTg3NmU5YjU2ODU2NWFl
ZjJiMGI3NmI4MzgyZWEyMmEwHhcNMjUwODA0MTIzODEyWhcNMjYwODAzMTI0MzEy
WjAzMTEwLwYDVQQDEyhENTMwMzI5MzRFMkY4NDc3NDE5QjQwMTNFRTkzNDJCQ0E5
RjhGRjdCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux6N739Viai2
loOxc/r/NOPI63SS1hIBZRHPHWIjZDuscW4k51M3P1nhV8J7dgv8j2riYzDVphiz
yfaXBGWRhiEwMpgxpVoB5ppn5WN6T1ugetAr4XiW0/72y+dIE3sZuSvmg/qvGZmq
TqX/OebjQ9POcXFE9TwB9hLfro9T7roXVr/leTE/OFnAHHU4M0mqmktaHPoNByaD
KR7pdFB4G85IYzjKWA/6WOp10fqBdBP7hS4sBLQDKyazzW8w9UpjzX7kkrYEBJ49
in2VULhcQtpCukFDj7yU58tWMn2Izn9AyoABppY3NnwaRQOYky7MqZXfOAPq/w+o
ENZGcTIxHwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFNUwMpNOL4R3QZtAE+6TQryp
+P97MB8GA1UdIwQYMBaAFHa/RHyTUISUnbBG/3c4seV8gk/5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzlhNjg5NjRmNWZmNjQwZWJhZDEwMGRlZWE3YzliYTQ2LzEv
NzZCRjQ0N0M5MzUwODQ5NDlEQjA0NkZGNzczOEIxRTU3QzgyNEZGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzhkMzdhMDcyLTE1YWUtNDkwNS04MTBlLTk5MWZjNjIwMWI0NS84ZDhh
NjcyZGQ3OTZlNWFmZDk1ODc2ZTliNTY4NTY1YWVmMmIwYjc2YjgzODJlYTIyYS5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS85YTY4OTY0ZjVmZjY0MGViYWQxMDBk
ZWVhN2M5YmE0Ni8xLzMyMzYzMDMyM2E2NjM5NjI2MTNhNjIzMjNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMyMzAzNTM5MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+boAsjANBgkq
hkiG9w0BAQsFAAOCAQEA1GiKWcmxciG9R7Kj+UzCHaIa4tNTpELoCqNLVyxgCOMk
uX+XEaxSH5+qNd8VXaSwZIKx1Dxw2f4WR2JoqbdISk4FoMZkXxL7pWFlIUrbwqWu
kGZuFHjLG74uMHq6PwjSy9HG1BFzC2SuhLqYCMGqYoDsQ1ImmQzPSZ91ZAI01bmU
+Ot8q/+UeRJvWpvCVdge7wk51fEb2v0nzO7g2mhz9NIlPh4Y7vH/VgY/UTnMmyY4
yaRURLoiHlO4Qbpy75jRHVAgSNu1Jr2Y7Wrhuz42F6u6ZOj3uTc/yrxkp2xCVw2c
/jF1jP2hf4RF1N7VdY28SO1FGTOYt+o2DCmsrITxXA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 23:56:18 2025 by rpki-client