Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a63303a3a2f34382d313238203d3e20333933353737.roa
File:                     323630323a663962613a63303a3a2f34382d313238203d3e20333933353737.roa (raw, json)
Hash identifier:          vMPB4SCExBlzwecWRBsO0ovNXIEjLpA31BbQ6NUEqj0=
Subject key identifier:   97:02:10:D9:14:E5:D4:6A:88:B1:C9:D9:E0:9A:29:C5:E1:8A:68:98
Certificate issuer:       /CN=8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43
Certificate serial:       5E579332D13AA45D818B25EC719B6C019D16A588
Authority key identifier: CD:BC:A8:B0:E7:B6:83:42:F6:E8:52:C6:E4:9C:97:62:19:46:8A:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a63303a3a2f34382d313238203d3e20333933353737.roa
Signing time:             Mon 16 Jun 2025 07:15:56 +0000
ROA not before:           Mon 16 Jun 2025 07:10:56 +0000
ROA not after:            Mon 15 Jun 2026 07:15:56 +0000
asID:                     393577
IP address blocks:        2602:f9ba:c0::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:57:93:32:d1:3a:a4:5d:81:8b:25:ec:71:9b:6c:01:9d:16:a5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43
        Validity
            Not Before: Jun 16 07:10:56 2025 GMT
            Not After : Jun 15 07:15:56 2026 GMT
        Subject: CN=970210D914E5D46A88B1C9D9E09A29C5E18A6898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6b:7b:24:29:2b:01:eb:97:60:31:48:6e:3e:
                    a5:81:37:2f:db:af:fd:03:73:27:3c:55:90:09:2c:
                    74:36:48:37:e3:ad:b0:24:18:3c:fb:76:86:2c:2d:
                    68:da:a2:d6:95:88:47:62:ea:50:ec:c7:ec:7f:d7:
                    f1:64:b6:f5:cb:f9:91:bc:9a:c3:50:99:22:51:93:
                    7e:53:b1:bc:c6:4c:58:09:32:a4:8a:24:ac:6a:e1:
                    52:98:0f:bb:e3:dd:e6:e5:f0:4f:8a:33:44:bb:82:
                    b6:9f:b0:ff:87:5d:cc:50:bf:a0:e5:cf:69:9c:2e:
                    7a:de:d1:16:61:b3:86:72:2e:cf:fb:77:44:f9:7e:
                    e3:fc:18:ca:e5:77:e2:cb:0b:6f:99:97:79:1e:1d:
                    f2:95:83:64:55:cb:8c:4e:70:64:6c:b6:b1:bf:6e:
                    15:54:f5:86:16:ce:50:24:5d:24:00:9b:74:16:28:
                    f0:8e:d6:6c:2a:14:a0:04:52:ac:27:58:cf:ff:4a:
                    b2:f4:f6:21:eb:3d:00:c0:d5:5d:8b:14:12:d6:11:
                    41:04:f5:a6:eb:64:57:dd:a3:4f:dc:83:91:1c:24:
                    3e:4d:07:3c:98:cd:38:30:58:bb:70:d2:05:f5:91:
                    fa:b2:40:c5:eb:b9:b7:89:3e:00:b5:95:8f:5c:7c:
                    ef:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:02:10:D9:14:E5:D4:6A:88:B1:C9:D9:E0:9A:29:C5:E1:8A:68:98
            X509v3 Authority Key Identifier:
                keyid:CD:BC:A8:B0:E7:B6:83:42:F6:E8:52:C6:E4:9C:97:62:19:46:8A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a63303a3a2f34382d313238203d3e20333933353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:17:34:ab:ec:ff:d9:7d:9f:83:ed:4e:f2:60:c8:b8:5a:b1:
         78:3b:fb:19:16:15:da:62:a0:26:c3:a8:35:90:54:b2:15:e7:
         cc:24:40:84:1b:17:f6:8d:53:b0:7c:0d:c9:04:d7:ad:4e:08:
         78:65:ea:af:8e:e7:5a:ff:37:3a:cb:20:95:66:fd:53:e1:74:
         73:55:3d:5f:f0:66:a4:c2:c2:e2:2e:bc:0d:78:2e:05:6d:3e:
         0a:9f:f8:90:c7:c4:15:62:37:52:1c:be:80:3c:5f:92:3d:b7:
         46:40:73:51:42:81:63:45:3c:6b:ba:5f:32:60:75:03:ea:4c:
         24:1b:dc:ee:b9:b7:bc:b1:21:b1:06:b3:83:b7:50:91:75:88:
         ce:dc:b0:a8:ab:1f:a6:e8:e7:22:33:28:28:33:d3:60:e2:99:
         1d:bc:d1:a3:66:13:da:d0:d6:f3:73:53:bc:64:bf:05:2e:3d:
         cd:bb:fa:39:d0:51:15:80:fe:5e:46:35:53:91:71:0b:cd:c5:
         fc:0e:7a:65:51:8e:b0:6e:7e:42:7d:50:a2:65:c5:ad:05:7b:
         29:68:38:95:c8:8b:ae:c5:d4:de:9b:81:58:e9:6f:2a:4f:b1:
         bd:28:86:97:8c:9a:00:dd:5b:15:ae:5c:a5:48:b9:b5:da:8e:
         c8:e5:c1:66
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUXleTMtE6pF2BiyXscZtsAZ0WpYgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGQ4YTY3MmRkN2JmZTI2MzcyMzhiZDk4YWViOGU0MDJh
NzcwMGM5MjRiNmVlN2FjNDMwHhcNMjUwNjE2MDcxMDU2WhcNMjYwNjE1MDcxNTU2
WjAzMTEwLwYDVQQDEyg5NzAyMTBEOTE0RTVENDZBODhCMUM5RDlFMDlBMjlDNUUx
OEE2ODk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWt7JCkrAeuX
YDFIbj6lgTcv26/9A3MnPFWQCSx0Nkg3462wJBg8+3aGLC1o2qLWlYhHYupQ7Mfs
f9fxZLb1y/mRvJrDUJkiUZN+U7G8xkxYCTKkiiSsauFSmA+7493m5fBPijNEu4K2
n7D/h13MUL+g5c9pnC563tEWYbOGci7P+3dE+X7j/BjK5XfiywtvmZd5Hh3ylYNk
VcuMTnBkbLaxv24VVPWGFs5QJF0kAJt0FijwjtZsKhSgBFKsJ1jP/0qy9PYh6z0A
wNVdixQS1hFBBPWm62RX3aNP3IORHCQ+TQc8mM04MFi7cNIF9ZH6skDF67m3iT4A
tZWPXHzvmQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFJcCENkU5dRqiLHJ2eCaKcXh
imiYMB8GA1UdIwQYMBaAFM28qLDntoNC9uhSxuScl2IZRor2MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzlhNjg5NjRmNWZmNjQwZWJhZDEwMGRlZWE3YzliYTQ2LzEv
Q0RCQ0E4QjBFN0I2ODM0MkY2RTg1MkM2RTQ5Qzk3NjIxOTQ2OEFGNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzhkMzdhMDcyLTE1YWUtNDkwNS04MTBlLTk5MWZjNjIwMWI0NS84ZDhh
NjcyZGQ3YmZlMjYzNzIzOGJkOThhZWI4ZTQwMmE3NzAwYzkyNGI2ZWU3YWM0My5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS85YTY4OTY0ZjVmZjY0MGViYWQxMDBk
ZWVhN2M5YmE0Ni8xLzMyMzYzMDMyM2E2NjM5NjI2MTNhNjMzMDNhM2EyZjM0Mzgy
ZDMxMzIzODIwM2QzZTIwMzMzOTMzMzUzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5ugDAMA0G
CSqGSIb3DQEBCwUAA4IBAQCOFzSr7P/ZfZ+D7U7yYMi4WrF4O/sZFhXaYqAmw6g1
kFSyFefMJECEGxf2jVOwfA3JBNetTgh4Zeqvjuda/zc6yyCVZv1T4XRzVT1f8Gak
wsLiLrwNeC4FbT4Kn/iQx8QVYjdSHL6APF+SPbdGQHNRQoFjRTxrul8yYHUD6kwk
G9zuube8sSGxBrODt1CRdYjO3LCoqx+m6OciMygoM9Ng4pkdvNGjZhPa0Nbzc1O8
ZL8FLj3Nu/o50FEVgP5eRjVTkXELzcX8DnplUY6wbn5CfVCiZcWtBXspaDiVyIuu
xdTem4FY6W8qT7G9KIaXjJoA3VsVrlylSLm12o7I5cFm
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:43:14 2025 by rpki-client