Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a6630303a3a2f34382d3438203d3e203131393637.roa
File:                     323630323a663732653a6630303a3a2f34382d3438203d3e203131393637.roa (raw, json)
Hash identifier:          vQn2IrmGqolDoylK0l54+FGI5xa0Ab2yUAHMfZPhju8=
Subject key identifier:   D0:91:58:B3:B7:E5:B6:DF:DC:5C:F9:67:CC:AD:EC:CC:60:34:30:71
Certificate issuer:       /CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
Certificate serial:       0CC20A5B3552F40A6346001E77EDD8D2F27CB450
Authority key identifier: 3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a6630303a3a2f34382d3438203d3e203131393637.roa
Signing time:             Wed 21 Oct 2026 09:35:52 +0000
ROA not before:           Wed 21 Oct 2026 09:30:52 +0000
ROA not after:            Wed 20 Oct 2027 09:35:52 +0000
asID:                     11967
IP address blocks:        2602:f72e:f00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 02:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c2:0a:5b:35:52:f4:0a:63:46:00:1e:77:ed:d8:d2:f2:7c:b4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
        Validity
            Not Before: Oct 21 09:30:52 2026 GMT
            Not After : Oct 20 09:35:52 2027 GMT
        Subject: CN=D09158B3B7E5B6DFDC5CF967CCADECCC60343071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8c:72:9e:92:bb:99:98:65:1d:92:a4:71:c7:
                    8a:e4:da:00:8d:9a:da:67:93:65:dd:1f:31:be:c8:
                    63:2c:fa:3d:59:23:c0:60:7e:fa:31:97:a0:1a:29:
                    cd:1a:79:fa:8b:4c:dd:33:4e:bd:11:d4:8a:97:80:
                    61:c9:9c:ac:6b:70:14:c5:7b:66:3f:ac:b7:78:5c:
                    08:02:6a:70:f2:8d:e6:5f:9f:db:dc:0b:c4:1b:a2:
                    b0:34:a1:13:f5:2a:0b:b7:3b:b3:3e:40:05:36:2e:
                    b6:12:b6:fb:dc:a6:10:d4:5e:68:e5:f1:5f:d9:70:
                    22:08:6e:7b:b5:a3:b3:e3:6e:59:d6:9b:ea:68:89:
                    13:8a:f1:25:09:a1:64:06:5d:11:fa:ff:3c:62:86:
                    b6:fd:fd:1e:4e:f6:f0:1c:dd:29:08:ff:88:06:2c:
                    e0:04:8b:63:a7:73:dc:b1:9d:e6:93:ef:fd:a6:77:
                    90:75:c6:68:43:5d:c4:ae:ec:ec:3b:75:7b:70:5a:
                    05:d3:00:c3:bb:93:26:a5:df:fd:3b:20:61:16:fc:
                    6c:07:0c:51:70:0b:cf:38:73:3a:7f:8a:a4:cb:47:
                    ed:61:b6:5e:68:e9:de:31:c5:75:17:27:dc:6c:56:
                    67:15:c4:9a:81:f8:aa:60:d0:a0:54:31:e5:4e:06:
                    d3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:91:58:B3:B7:E5:B6:DF:DC:5C:F9:67:CC:AD:EC:CC:60:34:30:71
            X509v3 Authority Key Identifier:
                keyid:3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a6630303a3a2f34382d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:0d:91:21:34:dc:6e:7a:63:55:ad:7f:c4:28:f5:3b:1a:b1:
         3f:80:e0:be:79:5e:3d:b2:96:32:c2:ae:48:f5:84:b5:b0:90:
         98:8c:33:d8:80:5f:33:b3:01:80:f4:07:aa:a6:5f:c2:5e:4c:
         47:84:ce:e9:f0:cf:79:15:91:d5:24:d4:a1:74:4d:3c:0c:25:
         98:32:fd:74:5a:88:f0:1e:d9:69:88:b0:0a:a4:bd:21:a0:77:
         4b:de:87:48:ff:7b:25:86:35:ac:34:d9:c2:c6:50:90:a1:6f:
         a9:ee:d8:4b:03:ad:ec:bb:c8:bd:b5:1c:5d:42:09:d0:01:23:
         b1:ef:54:59:0d:e3:ff:7b:7f:aa:c9:03:02:4f:10:13:b4:be:
         00:1b:dd:b6:18:9b:fe:a1:82:f0:e7:55:d2:40:4f:65:28:e4:
         be:35:61:05:3c:64:47:2c:01:58:d0:9f:ca:1b:b6:00:05:3e:
         69:dc:c1:91:36:79:5b:11:5a:a9:73:c9:33:6a:14:3f:b7:e9:
         ce:58:89:b4:f2:78:d5:b0:cb:fb:0f:b2:28:6a:cc:ba:1b:5b:
         9b:84:b2:c9:62:f1:d3:17:f8:9f:aa:7d:87:29:11:21:2c:ea:
         21:ed:39:e5:d9:4d:18:d0:f5:16:e0:72:e0:ae:dc:a0:25:34:
         b4:88:94:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 16:41:42 2026 by rpki-client