Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          MWUShGMT3gUBNEcK3lEzcn7iwsgQNhHlnsL0usgyjFs=
Subject key identifier:   99:AE:EA:C7:DD:3B:3E:06:B7:60:90:37:1C:A8:A3:45:37:C0:63:80
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       5CA85D8DF1781243BF9D8B81480009BDC12EF2FD
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 10 Jul 2025 14:10:55 +0000
ROA not before:           Thu 10 Jul 2025 14:05:55 +0000
ROA not after:            Thu 09 Jul 2026 14:10:55 +0000
asID:                     9009
IP address blocks:        2602:ff62::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 08:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a8:5d:8d:f1:78:12:43:bf:9d:8b:81:48:00:09:bd:c1:2e:f2:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul 10 14:05:55 2025 GMT
            Not After : Jul  9 14:10:55 2026 GMT
        Subject: CN=99AEEAC7DD3B3E06B76090371CA8A34537C06380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:61:84:e9:18:4a:d4:f6:8f:41:ff:f8:3d:21:
                    a6:b4:40:49:46:7a:fa:ed:17:24:0c:b2:8a:fd:bf:
                    cf:af:a0:55:8b:18:21:3a:62:81:92:ca:dd:b1:e0:
                    06:fd:6e:5c:66:36:03:da:af:49:5d:54:85:ea:54:
                    8d:e2:79:53:8e:8d:60:22:e0:dc:59:a1:8d:f5:f5:
                    a6:fe:1e:7e:e5:f5:20:51:61:37:90:c6:e1:6e:d3:
                    85:0f:d3:28:0a:0f:c2:6a:76:0d:76:c1:d3:2c:e4:
                    70:c9:97:03:db:3d:48:e6:ea:3a:e3:f1:dd:7a:05:
                    37:35:b4:b0:8b:34:4d:14:46:c2:62:c0:e0:98:6d:
                    b8:84:b0:23:a6:9f:6e:ec:14:72:d1:30:5a:61:fd:
                    85:a6:50:ed:b7:8e:5a:44:3c:d2:84:4d:cf:0a:e0:
                    b4:7b:5f:f6:9a:bf:bb:19:6d:12:4b:bf:28:d9:df:
                    f3:79:e5:30:76:88:bd:60:37:e8:f3:1c:7e:18:8c:
                    37:7c:4e:3d:99:c2:39:08:4c:77:b2:ae:61:d5:10:
                    78:32:0a:44:f6:ef:cb:fb:e1:0e:aa:78:a0:1b:ca:
                    02:8a:0c:cb:6d:70:90:23:6a:a0:d4:07:4a:7d:26:
                    6f:ea:fe:13:1c:0b:2a:5f:a0:31:d0:95:58:d2:a3:
                    ea:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AE:EA:C7:DD:3B:3E:06:B7:60:90:37:1C:A8:A3:45:37:C0:63:80
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:cf:c9:7a:28:0e:23:c4:7f:d9:de:fd:b4:2b:20:48:58:45:
         26:2d:91:66:87:93:bb:c6:7c:cc:56:93:66:e7:22:36:55:e1:
         72:d9:ec:ef:98:c4:a9:06:3f:dc:4e:81:b3:76:ee:d3:b1:cf:
         71:fa:2f:16:ee:f4:da:e3:67:c5:5d:f5:b7:36:52:ee:0e:c2:
         94:dc:11:c4:d3:9e:87:2e:64:2d:71:7d:0b:56:dd:db:ce:9d:
         de:4e:a2:cb:3b:03:f3:e4:ac:6f:43:ac:6d:29:17:1a:ef:ca:
         75:a8:a0:3c:98:48:48:c6:fd:19:84:d3:9f:55:2b:e6:64:88:
         81:22:d5:35:66:ef:08:4f:e0:9a:f6:4e:a5:d1:8f:ea:45:94:
         af:95:f1:17:c8:c9:23:b7:02:e5:72:18:e5:87:da:ec:3f:ff:
         96:07:d1:11:63:68:96:50:99:ed:4c:b6:7b:46:ee:a5:db:3f:
         5d:25:8c:72:79:57:cb:b9:3f:c3:70:58:c5:52:a5:c8:77:f7:
         37:32:df:aa:47:8b:47:15:94:97:7e:ee:84:65:3c:85:a6:75:
         cb:22:6b:89:db:20:9f:f4:5c:1b:16:16:63:6e:c7:c5:63:40:
         77:7a:9b:47:df:3e:05:f0:5d:bb:08:fa:59:db:a9:7d:83:87:
         2d:1d:c5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:19:00 2025 by rpki-client