Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3231303a3a2f34382d3438203d3e203630393030.roa
File:                     323630323a663530633a3231303a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          LVJUIsOCM+LBPHTDrUMU/qnBZFVnfmgPx3mGzoE/pKQ=
Subject key identifier:   F6:C7:BD:09:C6:6E:4B:24:FB:F7:72:C2:F0:AB:1F:D8:37:17:25:2E
Certificate issuer:       /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Certificate serial:       3EA2BD87D5F3901E1A8B68A72FAEAEC458A62CBE
Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3231303a3a2f34382d3438203d3e203630393030.roa
Signing time:             Sat 01 Nov 2025 20:02:25 +0000
ROA not before:           Sat 01 Nov 2025 19:57:25 +0000
ROA not after:            Sat 31 Oct 2026 20:02:25 +0000
asID:                     60900
IP address blocks:        2602:f50c:210::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a2:bd:87:d5:f3:90:1e:1a:8b:68:a7:2f:ae:ae:c4:58:a6:2c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
        Validity
            Not Before: Nov  1 19:57:25 2025 GMT
            Not After : Oct 31 20:02:25 2026 GMT
        Subject: CN=F6C7BD09C66E4B24FBF772C2F0AB1FD83717252E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:90:e1:ea:6f:47:be:2a:14:bc:64:31:2b:a9:
                    3c:cf:3a:13:34:8f:16:88:2b:6b:3e:b3:93:53:1c:
                    99:68:74:cd:59:9b:64:38:d1:6a:ca:85:1d:a9:44:
                    74:c2:be:35:41:26:eb:48:75:22:58:5f:bc:e8:e8:
                    cf:c4:54:f5:67:f6:02:08:6b:d5:13:95:97:d8:64:
                    87:43:a9:02:f4:fd:fb:52:a6:32:43:19:4a:c2:99:
                    2e:97:c3:10:14:7b:53:0e:19:a2:0b:b0:11:cc:c7:
                    df:76:2f:cd:88:9b:4f:7a:d0:75:66:b7:e8:bf:14:
                    b8:d2:d9:ee:df:46:1b:ef:ed:d0:55:dd:40:6a:cb:
                    a5:43:4a:dc:f7:8e:c0:c8:53:46:9d:77:2f:f8:8d:
                    da:19:f6:81:b2:2e:34:0a:90:1a:82:0b:65:bf:db:
                    b7:de:4d:8f:14:ae:4a:16:cc:9d:1b:83:22:ad:4e:
                    ae:53:d4:15:05:99:f1:6e:44:32:7a:d0:22:4d:ab:
                    02:b1:35:45:23:15:f3:0b:82:e1:9f:a0:c7:31:b9:
                    0a:8e:47:f2:98:57:18:7e:f8:cf:3f:0c:ec:7a:e2:
                    0a:eb:b8:12:29:08:be:20:b6:d5:45:77:dd:f6:6b:
                    4a:d9:a0:25:90:62:91:3f:3b:56:14:33:10:b8:d8:
                    70:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C7:BD:09:C6:6E:4B:24:FB:F7:72:C2:F0:AB:1F:D8:37:17:25:2E
            X509v3 Authority Key Identifier:
                keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3231303a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f50c:210::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:e6:d6:20:3f:84:cf:87:ae:14:f6:8e:ae:ba:39:a2:90:83:
         62:e0:85:72:c0:24:93:ef:1d:85:18:31:09:0f:18:02:6f:be:
         2c:95:61:30:f6:cc:c8:bb:d0:a6:e3:ea:80:d8:0a:7c:ba:65:
         32:48:43:45:78:63:c8:f3:29:b2:81:5d:22:3f:0e:4f:b9:fd:
         6a:17:1c:56:a4:af:81:ee:80:2e:d3:bf:e0:5a:cd:2b:bc:f9:
         b5:80:a5:f7:30:90:b8:78:85:c0:85:de:43:77:fe:5a:41:27:
         2b:aa:a9:9e:28:a7:f1:e2:c9:79:c1:4e:22:2b:b9:dc:7d:36:
         4c:1f:54:ef:46:e8:9d:40:50:00:bf:c6:f2:13:b3:cd:85:b3:
         4f:9f:62:64:a5:ca:49:5b:b6:80:4b:d2:67:11:16:73:f8:b5:
         81:72:73:ac:9b:27:17:ad:1c:ff:fd:a0:43:40:bb:6e:74:7e:
         5b:0f:f8:0a:55:dd:53:78:ba:5b:f3:d9:51:59:3f:68:db:dd:
         4a:c0:30:09:21:23:17:80:c7:f8:dd:0f:ea:27:ba:c3:bf:c0:
         c0:d5:36:a8:c3:f1:9d:2b:49:8c:63:e3:06:92:6e:d4:db:f6:
         8c:dd:cb:78:b0:4b:ce:d5:ce:05:6b:f4:82:34:92:17:ee:5c:
         cb:30:59:e4
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUPqK9h9XzkB4ai2inL66uxFimLL4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmVjZmRmZGJkYjU2ZDNmYmZhMjYxYmIyODdiZjBjNDE4
NTU3MmQwYzIxYjY0ZTFmNzQwHhcNMjUxMTAxMTk1NzI1WhcNMjYxMDMxMjAwMjI1
WjAzMTEwLwYDVQQDEyhGNkM3QkQwOUM2NkU0QjI0RkJGNzcyQzJGMEFCMUZEODM3
MTcyNTJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJDh6m9HvioU
vGQxK6k8zzoTNI8WiCtrPrOTUxyZaHTNWZtkONFqyoUdqUR0wr41QSbrSHUiWF+8
6OjPxFT1Z/YCCGvVE5WX2GSHQ6kC9P37UqYyQxlKwpkul8MQFHtTDhmiC7ARzMff
di/NiJtPetB1ZrfovxS40tnu30Yb7+3QVd1AasulQ0rc947AyFNGnXcv+I3aGfaB
si40CpAaggtlv9u33k2PFK5KFsydG4MirU6uU9QVBZnxbkQyetAiTasCsTVFIxXz
C4Lhn6DHMbkKjkfymFcYfvjPPwzseuIK67gSKQi+ILbVRXfd9mtK2aAlkGKRPztW
FDMQuNhwAwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFPbHvQnGbksk+/dywvCrH9g3
FyUuMB8GA1UdIwQYMBaAFHW/F2dWTXxExb05X2pqIZDS3dcIMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2NhMmIxMmFmYzQyODQzZGJhZTRiMDVjZjM2MGQ5NTJkLzAv
NzVCRjE3Njc1NjREN0M0NEM1QkQzOTVGNkE2QTIxOTBEMkRERDcwOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDll
ZjFiNGUyL2M0MTU2NDRhLWE1YTQtNDg0OS1hYmE5LTE5ODA4NmZkMTU0ZC9mZWNm
ZGZkYmRiNTZkM2ZiZmEyNjFiYjI4N2JmMGM0MTg1NTcyZDBjMjFiNjRlMWY3NC5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jYTJiMTJhZmM0Mjg0M2RiYWU0YjA1
Y2YzNjBkOTUyZC8wLzMyMzYzMDMyM2E2NjM1MzA2MzNhMzIzMTMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzYzMDM5MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC9QwCEDANBgkq
hkiG9w0BAQsFAAOCAQEAmubWID+Ez4euFPaOrro5opCDYuCFcsAkk+8dhRgxCQ8Y
Am++LJVhMPbMyLvQpuPqgNgKfLplMkhDRXhjyPMpsoFdIj8OT7n9ahccVqSvge6A
LtO/4FrNK7z5tYCl9zCQuHiFwIXeQ3f+WkEnK6qpniin8eLJecFOIiu53H02TB9U
70bonUBQAL/G8hOzzYWzT59iZKXKSVu2gEvSZxEWc/i1gXJzrJsnF60c//2gQ0C7
bnR+Ww/4ClXdU3i6W/PZUVk/aNvdSsAwCSEjF4DH+N0P6ie6w7/AwNU2qMPxnStJ
jGPjBpJu1Nv2jN3LeLBLztXOBWv0gjSSF+5cyzBZ5A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:44:53 2025 by rpki-client