Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a363a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a363a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          ll5eF0bNyQzGbT7qfr7aoLVYulRFPGlAKwNcIBqs7TY=
Subject key identifier:   D7:B7:A7:83:9B:79:E6:B7:6C:39:D7:39:6C:58:2D:78:5E:BB:2B:C9
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       72818B22B8BDB83B9086BFBFC4A4D0201EE96491
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a363a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 10 Jul 2025 14:12:26 +0000
ROA not before:           Thu 10 Jul 2025 14:07:26 +0000
ROA not after:            Thu 09 Jul 2026 14:12:26 +0000
asID:                     9009
IP address blocks:        2602:fad4:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Jul 2025 19:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:81:8b:22:b8:bd:b8:3b:90:86:bf:bf:c4:a4:d0:20:1e:e9:64:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Jul 10 14:07:26 2025 GMT
            Not After : Jul  9 14:12:26 2026 GMT
        Subject: CN=D7B7A7839B79E6B76C39D7396C582D785EBB2BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a9:6e:3e:c1:7a:93:03:7e:2f:e3:a2:04:37:
                    81:7a:d7:f1:6e:48:0b:a6:b7:73:bc:48:2b:55:a1:
                    0c:e5:c5:60:91:08:4a:1c:dc:47:f7:5d:ad:55:cd:
                    a0:20:a5:8a:99:29:e3:8d:c8:24:fb:4f:c0:e4:c7:
                    2b:9f:c3:ed:ee:90:b6:d9:49:a5:bd:8f:1d:4a:ba:
                    08:e9:f7:db:ff:3a:c7:0e:ed:ef:f9:09:1e:9c:93:
                    2b:94:2b:b3:5b:9b:33:7c:d9:bf:36:3d:ac:2b:a8:
                    f4:db:db:be:14:7b:9c:b1:12:4e:c1:f4:bb:10:cd:
                    9b:c8:b7:ac:f3:4f:40:c4:c7:9b:28:43:a5:e5:6f:
                    62:43:e0:f7:31:da:97:fa:f6:a8:2a:5a:9e:06:8b:
                    0c:1e:83:a1:b2:2a:dc:f1:03:55:70:c6:00:56:3a:
                    1d:40:a1:6f:f3:d4:18:cb:f6:e7:ed:ba:87:1a:54:
                    48:60:fc:86:46:fd:b4:40:3c:be:f8:fb:10:d8:8b:
                    88:f2:ee:d4:31:1d:4a:58:8e:aa:53:6b:a1:c8:9b:
                    7a:27:54:bc:32:b7:cf:86:5b:7e:7c:91:5d:f8:04:
                    16:0a:75:5a:e3:0f:94:8a:d2:27:2a:34:7a:bc:d0:
                    7d:30:df:30:6c:35:18:33:f8:7e:ab:f2:eb:95:13:
                    f6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B7:A7:83:9B:79:E6:B7:6C:39:D7:39:6C:58:2D:78:5E:BB:2B:C9
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a363a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:4d:c7:18:91:45:7b:4d:c3:ed:69:37:69:b5:39:e7:83:ac:
         7d:d9:a2:d7:0d:ba:29:21:42:3b:64:33:19:e5:6b:09:56:53:
         58:00:b9:23:7f:cf:78:cb:6a:e7:16:33:e5:98:b7:09:cf:de:
         a8:a4:3e:4a:c9:ce:f7:58:16:a5:d4:59:a6:a8:7e:59:f4:e1:
         64:15:57:cd:87:60:3a:28:51:12:8d:de:f9:a3:37:b8:b8:f8:
         c7:b4:5f:9c:8e:91:f2:42:45:57:18:41:f4:9d:49:66:92:be:
         e3:99:40:8a:5d:7f:5c:42:97:61:46:bb:23:78:14:a1:44:e6:
         8a:b5:d8:f4:4b:a5:8d:1d:5f:bc:cf:13:e6:f3:9d:5d:5e:af:
         8e:75:e3:1a:ba:3e:4c:ed:87:31:1b:07:45:31:d3:53:00:0d:
         72:14:47:cc:08:79:fa:9d:5b:0a:2e:7c:ee:e0:37:07:80:c9:
         d9:7e:b7:b1:b3:62:8d:92:dd:86:9e:d7:ae:c4:8f:85:74:39:
         21:e7:d3:4e:bb:b8:e4:ff:76:42:2b:b8:3d:dc:b4:6e:65:2d:
         45:5f:4f:e1:eb:5b:a2:1d:0f:74:2b:ea:00:46:4f:28:6e:44:
         6f:35:19:97:6b:94:dd:23:88:ae:e0:74:dc:2c:e3:ba:66:5a:
         90:62:07:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:14:35 2025 by rpki-client