Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3231313a3a2f34382d3438203d3e203630393030.roa
File:                     323630323a663530633a3231313a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          2QQK5pz9YpLxQi4uUh0VrSn5lRY6ESQ13JPXIWGIrL0=
Subject key identifier:   98:EE:C6:75:AE:4B:BD:89:3A:CA:0D:60:7F:EC:B6:8D:E3:EE:1F:41
Certificate issuer:       /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Certificate serial:       60077CFC26A8D1853D675F8376E37AB3882A70B9
Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3231313a3a2f34382d3438203d3e203630393030.roa
Signing time:             Sat 01 Nov 2025 20:02:44 +0000
ROA not before:           Sat 01 Nov 2025 19:57:44 +0000
ROA not after:            Sat 31 Oct 2026 20:02:44 +0000
asID:                     60900
IP address blocks:        2602:f50c:211::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:07:7c:fc:26:a8:d1:85:3d:67:5f:83:76:e3:7a:b3:88:2a:70:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
        Validity
            Not Before: Nov  1 19:57:44 2025 GMT
            Not After : Oct 31 20:02:44 2026 GMT
        Subject: CN=98EEC675AE4BBD893ACA0D607FECB68DE3EE1F41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:56:41:5d:8a:0d:b4:b2:a1:6e:db:99:5b:
                    10:7b:a0:ab:0c:de:3f:d2:91:11:47:5e:33:df:79:
                    da:d7:15:45:53:86:6b:eb:ca:ee:83:fe:c7:9a:cc:
                    c1:89:7a:4a:04:d3:11:b5:23:f7:95:50:f2:a9:c9:
                    99:f5:3f:d6:37:dd:af:be:7a:cf:7c:8a:e2:fe:f4:
                    66:ae:1a:f9:38:87:d2:e4:f4:c1:66:ad:b6:fc:98:
                    b3:ca:35:ad:2f:6f:ea:ae:da:57:e8:b9:2a:07:bd:
                    8b:98:a9:c9:4a:1b:88:55:22:15:e6:6b:ea:c6:26:
                    84:5f:97:c2:a3:eb:b9:f2:06:78:c2:f3:8a:bb:43:
                    67:52:c5:45:c7:9b:e1:85:16:96:67:d4:27:8f:97:
                    6f:4f:3c:18:19:a3:0e:de:dd:33:68:24:68:4a:2f:
                    80:8c:0d:a2:ee:c6:f9:43:ef:0b:51:52:14:94:c4:
                    7c:ed:9b:b1:35:3f:49:86:35:43:28:09:93:d3:a2:
                    32:56:a1:57:35:5e:b0:76:43:69:44:45:8f:a6:88:
                    f0:c9:3b:ff:5b:ad:33:cb:7d:35:05:d9:dc:c4:2c:
                    20:87:0f:6a:8e:37:6e:70:d9:1c:1a:d9:bb:b6:01:
                    91:41:e3:a2:45:bb:9a:c7:46:ae:3c:a6:4c:a7:9a:
                    de:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EE:C6:75:AE:4B:BD:89:3A:CA:0D:60:7F:EC:B6:8D:E3:EE:1F:41
            X509v3 Authority Key Identifier:
                keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3231313a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f50c:211::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:27:67:54:6a:39:5c:94:4d:aa:23:e4:51:fb:88:9a:3c:ca:
         b3:02:c7:5f:26:5b:88:f8:0e:4d:98:b5:87:52:c1:44:c2:76:
         9a:71:fb:89:e9:15:cc:7f:a9:46:3d:f7:3c:fd:b1:0b:03:77:
         b2:45:33:df:d4:97:b9:a1:c5:db:d6:99:d5:cc:a9:f6:82:f1:
         ce:7d:30:bb:02:bf:5c:bf:33:26:80:5d:e4:12:68:ab:3f:2a:
         50:6d:90:12:b3:63:2d:d0:5c:ee:0b:3e:67:f6:d0:ec:2f:f4:
         56:9d:b9:95:e7:80:12:a5:bb:2f:bf:63:b8:52:e1:82:9d:3d:
         be:9e:d6:8c:f8:eb:48:85:85:de:d5:36:d6:0f:07:77:82:12:
         8c:b3:2c:aa:84:98:bf:f7:25:fa:ed:26:f5:69:62:47:73:f7:
         03:f0:08:c8:ef:cf:5a:57:2e:ef:55:62:e2:ed:c9:b6:cd:44:
         b0:ef:2b:32:45:a5:7f:80:f4:be:b8:6c:e9:d5:c1:82:75:0e:
         1c:c9:15:cb:59:c8:3a:3b:ad:0c:82:0f:ff:4f:1c:76:c6:11:
         76:62:e1:cd:f1:7f:53:ce:b6:b5:7a:f4:df:93:19:68:06:56:
         3d:d8:94:cf:6c:d0:11:68:ed:ef:0d:5e:01:b2:03:f6:fe:73:
         46:f1:43:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:45:02 2025 by rpki-client