Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a63333a3a2f34382d3438203d3e20323135363035.roa
File:                     323630323a663962613a63333a3a2f34382d3438203d3e20323135363035.roa (raw, json)
Hash identifier:          EyUZHphi3tsuGR3ca6s7Q0FXf0YHyBPqGlN0RcCUcWI=
Subject key identifier:   17:74:46:7D:A7:1F:AF:F4:9B:57:9F:F9:5C:28:31:33:61:2B:0B:E1
Certificate issuer:       /CN=8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43
Certificate serial:       0C3C5F5841896BD47F73DB8E36FEB979B629B177
Authority key identifier: CD:BC:A8:B0:E7:B6:83:42:F6:E8:52:C6:E4:9C:97:62:19:46:8A:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a63333a3a2f34382d3438203d3e20323135363035.roa
Signing time:             Thu 12 Jun 2025 07:09:33 +0000
ROA not before:           Thu 12 Jun 2025 07:04:33 +0000
ROA not after:            Thu 11 Jun 2026 07:09:33 +0000
asID:                     215605
IP address blocks:        2602:f9ba:c3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3c:5f:58:41:89:6b:d4:7f:73:db:8e:36:fe:b9:79:b6:29:b1:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43
        Validity
            Not Before: Jun 12 07:04:33 2025 GMT
            Not After : Jun 11 07:09:33 2026 GMT
        Subject: CN=1774467DA71FAFF49B579FF95C283133612B0BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:95:4b:7b:e0:00:47:1d:d6:ba:ee:29:05:04:
                    e0:5a:b5:7a:8d:29:1c:47:7a:f7:56:27:bf:6c:f1:
                    bb:9c:04:7a:8f:29:3f:99:b3:f4:b7:80:75:e8:31:
                    7d:76:3c:e2:d7:a1:6a:3f:99:e9:4b:d8:67:3c:b8:
                    4e:6a:98:da:e8:f1:de:b1:4e:9b:8b:47:66:2c:0a:
                    40:d0:c5:6d:cb:fc:3d:df:da:30:4f:39:02:3c:8f:
                    9d:79:e2:64:86:b7:f8:fb:03:18:9a:14:65:d7:a9:
                    65:5e:67:6a:a5:d9:ae:d3:b8:4a:54:3b:9b:32:a0:
                    72:55:05:f4:11:c3:95:75:54:3a:aa:4d:a8:86:e2:
                    c8:ff:21:4e:01:d9:55:44:ae:e9:76:b8:ad:a6:d2:
                    5e:63:8a:cc:44:7a:fb:b7:2d:86:fb:30:e6:3b:1c:
                    af:81:7a:2f:1f:fc:77:a3:1a:f9:3b:a8:5c:77:78:
                    09:46:0b:1f:b0:bd:91:e3:35:05:0a:fb:3d:07:92:
                    0b:94:86:ca:a9:e8:c4:47:f9:8c:be:06:84:48:02:
                    54:ef:b2:c9:2f:29:14:db:af:4c:18:50:05:37:69:
                    d3:79:28:c8:5d:50:1e:ee:79:2b:81:66:37:07:02:
                    a5:56:20:40:cb:1a:cb:9a:da:5a:c1:f1:c2:c3:2d:
                    c0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:74:46:7D:A7:1F:AF:F4:9B:57:9F:F9:5C:28:31:33:61:2B:0B:E1
            X509v3 Authority Key Identifier:
                keyid:CD:BC:A8:B0:E7:B6:83:42:F6:E8:52:C6:E4:9C:97:62:19:46:8A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/CDBCA8B0E7B68342F6E852C6E49C976219468AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7bfe2637238bd98aeb8e402a7700c924b6ee7ac43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a63333a3a2f34382d3438203d3e20323135363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:c3::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:a2:50:2a:7b:40:4f:e1:91:60:41:54:6a:c8:8f:46:39:65:
         f4:57:b0:89:35:02:dc:6e:d0:c9:ab:9f:2c:4c:08:23:cd:ce:
         f6:0e:76:a7:d3:ca:a9:10:16:da:7b:fb:dd:d8:43:77:f3:dc:
         92:0c:94:47:25:80:f5:93:e4:7a:5e:d0:92:71:9c:1f:82:9a:
         d9:9e:5f:0e:98:4c:85:57:7a:d3:f0:7d:92:df:77:31:fc:f1:
         e9:fa:7a:92:dc:42:20:68:b3:5a:7c:d9:8c:dd:ce:19:75:59:
         82:62:08:d8:37:14:87:00:6d:f0:9b:d3:04:47:93:ad:6e:ff:
         c5:dc:db:97:05:f6:42:b8:bc:4a:69:9d:94:e5:9d:e2:8e:46:
         58:63:41:67:e9:c9:a8:6f:5e:fe:a1:b1:94:0a:9c:67:47:87:
         2e:17:ae:8e:58:a8:cc:51:62:20:a8:c0:a6:34:a3:2f:d0:a7:
         cb:c3:fd:7c:c5:d5:3e:41:84:50:a9:cf:8a:96:a1:ac:44:4f:
         6d:f4:61:35:c6:0c:de:a6:92:fc:c0:c2:da:54:fb:c7:fa:40:
         12:c8:de:29:92:3d:7a:1a:35:f5:c5:8a:74:66:7d:a2:b6:51:
         cb:5e:bd:f2:c1:42:fe:2c:fc:b6:b5:b3:e0:5d:11:15:e0:59:
         76:53:0a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:28:41 2025 by rpki-client