Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3231333a3a2f34382d3438203d3e203630393030.roa
File:                     323630323a663530633a3231333a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          8uZRdqlYH4xLJmi0qvPTcIe0Ie7cq9PHo4GlGqDcuiY=
Subject key identifier:   99:09:E8:BD:48:D0:8C:43:E2:00:87:7A:A1:F1:12:31:68:2E:1D:10
Certificate issuer:       /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Certificate serial:       1B3D6735E74DA657211633ADE6686893CE7030C5
Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3231333a3a2f34382d3438203d3e203630393030.roa
Signing time:             Wed 14 Oct 2026 01:17:22 +0000
ROA not before:           Wed 14 Oct 2026 01:12:22 +0000
ROA not after:            Wed 13 Oct 2027 01:17:22 +0000
asID:                     60900
IP address blocks:        2602:f50c:213::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 18:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3d:67:35:e7:4d:a6:57:21:16:33:ad:e6:68:68:93:ce:70:30:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
        Validity
            Not Before: Oct 14 01:12:22 2026 GMT
            Not After : Oct 13 01:17:22 2027 GMT
        Subject: CN=9909E8BD48D08C43E200877AA1F11231682E1D10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:6e:61:44:f7:49:f8:79:1b:c0:ef:16:e6:
                    34:02:8a:fb:fd:7e:3d:c9:6b:9d:01:95:b3:0d:60:
                    2e:bf:73:78:a8:eb:a4:a2:fc:81:52:6e:02:2f:e5:
                    3b:9b:30:39:c1:0e:02:82:d3:b6:6a:5c:97:cc:c2:
                    dc:ef:52:2c:ac:51:d7:54:37:a7:f5:4b:41:1e:b4:
                    2d:a6:c9:e1:a1:2a:52:a0:48:ac:08:2c:5d:6d:69:
                    0d:38:4f:15:d5:f0:87:ec:3c:d9:44:68:5c:cb:4b:
                    d0:e7:7f:46:f5:fd:32:23:77:63:bb:13:b1:7f:2a:
                    36:de:10:8c:13:83:1b:7b:7b:fb:f3:b4:a9:ed:4e:
                    66:7b:39:3d:30:ac:1b:2f:3f:08:66:30:b1:8f:7d:
                    d6:02:aa:c3:78:09:2a:08:b2:68:33:a9:38:56:62:
                    ee:c1:d6:e1:53:c3:9b:93:07:06:fe:0d:9c:a5:05:
                    8a:d6:d8:b4:bf:6a:06:b1:6b:08:e9:b2:aa:c8:48:
                    7e:12:71:23:91:4e:ff:d8:00:77:d1:d6:1b:95:a4:
                    d6:9c:f1:9e:53:ec:a7:1b:41:7d:e2:54:ae:0f:cf:
                    25:3d:f3:a3:f0:59:9d:54:9a:32:e8:2f:91:a1:81:
                    c1:91:17:c2:43:75:04:24:cf:a6:c0:ee:58:d8:51:
                    9e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:09:E8:BD:48:D0:8C:43:E2:00:87:7A:A1:F1:12:31:68:2E:1D:10
            X509v3 Authority Key Identifier:
                keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3231333a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f50c:213::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:2d:de:c4:ca:2a:6a:16:d8:d3:2b:7b:24:84:d5:88:a0:bd:
         64:4d:ea:cd:33:41:e2:1b:6c:c0:10:fb:65:14:a5:a1:7b:17:
         61:8d:be:1f:cf:89:3f:51:4c:61:72:78:05:be:23:a9:b0:48:
         9f:20:86:54:d1:b4:e7:35:dc:85:fa:3c:34:27:79:99:76:4b:
         54:f2:73:26:59:42:62:98:38:dd:f2:6a:67:4f:44:8b:df:f8:
         fc:4e:45:01:0a:50:5a:75:57:94:24:ce:95:e8:39:49:a9:06:
         8b:9d:ea:bf:44:94:46:ae:e9:bb:6a:c8:ca:67:8f:84:c0:12:
         0a:74:bc:54:60:db:b2:2a:b7:d7:97:58:41:46:bb:a8:4e:ea:
         09:18:53:6a:af:66:04:c1:f7:a4:50:18:6a:b6:da:1d:35:dd:
         e2:c6:6d:72:58:fd:73:48:0c:d3:2a:a8:25:5f:e8:73:22:88:
         a6:b8:15:80:f1:25:05:e2:98:11:f9:fe:49:23:bd:c2:01:c9:
         99:d9:3b:3a:5f:c6:06:e7:8a:07:b3:21:e6:d4:1d:19:d6:b8:
         fa:b0:9a:f7:1d:c9:05:00:95:cc:a7:18:a7:37:4b:ad:df:a5:
         18:48:6c:f8:8d:52:b9:53:71:3d:2f:67:23:cb:d7:8e:b4:eb:
         b1:09:78:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:26:04 2026 by rpki-client