Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a373a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a373a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          WGCra1joumpsaK8zYBzfn0DbwsbNF5i4eGKKTHr6VsM=
Subject key identifier:   60:79:CD:DF:71:8D:5B:0E:02:30:97:9F:69:99:37:CC:21:D9:B5:78
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       29761EA2F6292EBDAFF65AC6FF869A1D3C139577
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a373a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 10 Jul 2025 14:12:28 +0000
ROA not before:           Thu 10 Jul 2025 14:07:28 +0000
ROA not after:            Thu 09 Jul 2026 14:12:28 +0000
asID:                     9009
IP address blocks:        2602:fad4:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Jul 2025 19:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:76:1e:a2:f6:29:2e:bd:af:f6:5a:c6:ff:86:9a:1d:3c:13:95:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Jul 10 14:07:28 2025 GMT
            Not After : Jul  9 14:12:28 2026 GMT
        Subject: CN=6079CDDF718D5B0E0230979F699937CC21D9B578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:13:e0:e3:23:6c:fa:ff:29:ee:33:b7:b3:66:
                    15:b3:37:90:a1:4c:c7:06:d6:90:cc:ad:fd:78:15:
                    cf:60:4e:7d:71:44:e5:a1:a0:0a:ba:f3:27:03:42:
                    b8:3a:f0:7f:db:09:ec:a9:66:3f:47:97:12:df:e1:
                    b1:08:e2:c4:57:da:33:96:11:bd:d5:79:f8:61:7f:
                    65:b6:8c:55:e4:bc:a6:87:02:25:b0:a0:81:6e:29:
                    57:a7:fb:dd:cf:06:2f:5e:d0:ab:77:53:51:4c:ff:
                    80:e0:6c:3b:99:18:42:8c:e0:66:91:01:42:89:f7:
                    39:d6:e5:dd:16:04:55:56:aa:f6:c5:db:6e:7b:00:
                    b6:5c:48:d4:53:20:95:98:00:c0:0a:73:1d:f1:54:
                    ab:23:11:70:f3:47:ba:20:dc:4d:e8:87:16:2c:d2:
                    a8:84:9f:a3:bc:19:52:84:ce:c4:80:31:91:f9:b7:
                    02:f9:ad:89:97:44:44:5f:4a:e9:4e:e2:46:47:06:
                    f9:62:20:ce:75:7f:9c:1a:2f:90:27:ff:8b:89:b8:
                    b6:d1:5f:be:01:0e:d2:51:f9:02:cd:47:a9:e4:dd:
                    55:f9:33:f7:ca:45:d4:31:7b:27:5a:49:f1:a0:7f:
                    4d:30:03:67:c9:01:19:ae:e6:d0:ff:3d:f6:4b:05:
                    ef:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:79:CD:DF:71:8D:5B:0E:02:30:97:9F:69:99:37:CC:21:D9:B5:78
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a373a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:ff:21:c2:37:fe:a6:7f:db:cd:0a:f7:de:85:e1:f9:86:27:
         b9:d9:9d:56:1d:e2:04:05:48:d4:dd:7c:ac:33:67:ce:f2:3a:
         59:c3:6f:93:00:b4:3b:25:ed:dd:d1:a3:ef:a4:20:c3:15:fe:
         ce:6d:70:dc:77:d4:dc:7c:29:63:48:4e:e4:15:7c:88:0a:b1:
         62:31:6e:2c:b2:a1:5d:0a:f0:54:4f:0a:54:5d:37:b8:e8:54:
         04:69:84:be:23:49:18:f5:40:1c:b7:45:a5:1e:67:84:0a:d2:
         0c:c7:f1:6c:3f:c7:42:e9:44:d1:f1:54:fa:62:f6:48:7d:f6:
         a5:fa:24:bd:9c:e3:d6:14:fb:d0:e0:92:27:52:9f:5e:ee:51:
         5e:53:1e:0a:99:56:4d:72:68:77:61:75:37:5f:9f:f3:de:d7:
         a6:6b:97:7e:0d:91:d7:5c:95:8c:59:b3:c3:55:3a:02:61:de:
         d8:6f:14:76:fb:14:97:c2:dc:20:21:55:ee:34:d7:ec:90:01:
         86:6f:c8:cb:5f:72:cf:db:ad:af:25:64:af:d1:ae:7c:27:76:
         f2:61:9c:b9:b9:56:86:5b:5d:4b:e1:14:f9:e9:c7:35:4f:72:
         55:64:0f:20:70:79:a7:b0:bd:89:1f:d5:56:e7:33:9b:eb:6a:
         3a:eb:34:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:44:24 2025 by rpki-client