Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a3a2f33362d3438203d3e203237343938.roa
File:                     323630323a663836353a3a2f33362d3438203d3e203237343938.roa (raw, json)
Hash identifier:          21P74sBRzX7bFNL7ma1YUetCF/kHo/h88+me4QH8FXg=
Subject key identifier:   33:AB:0F:35:D6:31:DA:3D:63:6F:0F:66:4B:34:E5:D2:C0:A8:75:88
Certificate issuer:       /CN=e8238ea0d595c4c58cf97789c411a74fd9298a5c634d6c01d3
Certificate serial:       7B729F8CBFE7F69DC6FDFDB5C3D5C6E2012B5907
Authority key identifier: 38:98:74:29:1F:32:B7:53:C5:21:79:67:3A:DD:5A:D1:0F:CB:86:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d595c4c58cf97789c411a74fd9298a5c634d6c01d3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a3a2f33362d3438203d3e203237343938.roa
Signing time:             Tue 15 Jul 2025 12:57:50 +0000
ROA not before:           Tue 15 Jul 2025 12:52:50 +0000
ROA not after:            Tue 14 Jul 2026 12:57:50 +0000
asID:                     27498
IP address blocks:        2602:f865::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/389874291F32B753C52179673ADD5AD10FCB863D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/389874291F32B753C52179673ADD5AD10FCB863D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d595c4c58cf97789c411a74fd9298a5c634d6c01d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 05:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:72:9f:8c:bf:e7:f6:9d:c6:fd:fd:b5:c3:d5:c6:e2:01:2b:59:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8238ea0d595c4c58cf97789c411a74fd9298a5c634d6c01d3
        Validity
            Not Before: Jul 15 12:52:50 2025 GMT
            Not After : Jul 14 12:57:50 2026 GMT
        Subject: CN=33AB0F35D631DA3D636F0F664B34E5D2C0A87588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:75:e3:c5:a4:46:9d:27:ca:9b:c7:44:3f:
                    6d:9e:14:4d:42:df:50:08:9f:49:07:ae:f1:22:44:
                    1a:1c:57:3a:42:fb:fa:0a:bf:5a:3c:ed:cd:20:1a:
                    e6:93:2c:26:32:f5:f3:aa:fc:bd:f4:78:b9:44:aa:
                    42:45:aa:de:79:81:0e:56:e6:e2:8c:57:5d:c5:73:
                    2e:50:52:2d:1f:94:b1:b1:25:1a:e0:f1:87:6a:af:
                    e9:34:c1:f7:2c:d7:a7:bf:95:26:f2:95:0f:d0:b7:
                    00:b4:60:45:41:59:a7:17:ba:6a:fd:a9:a2:e6:b8:
                    2d:1a:8a:89:b2:8e:6e:4f:41:48:00:ae:01:31:b0:
                    7c:40:ce:d9:05:20:82:d2:24:5d:45:79:6d:15:dd:
                    62:16:18:05:84:96:18:3a:85:03:58:c2:c0:80:6d:
                    b3:b5:6b:bb:ec:9d:93:73:7e:fe:bd:23:2e:68:12:
                    82:8f:8a:17:f8:c9:f0:a6:6a:72:e6:90:34:13:6f:
                    5d:75:24:ce:55:26:21:e6:1b:f0:72:3a:4a:98:57:
                    6b:13:fd:68:8b:4e:96:2a:44:84:d0:bf:dd:32:88:
                    28:63:01:f5:b9:6a:8b:c7:23:76:54:64:64:3e:86:
                    1f:8a:82:21:83:13:05:fb:a7:ab:5c:d9:13:fe:fb:
                    96:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AB:0F:35:D6:31:DA:3D:63:6F:0F:66:4B:34:E5:D2:C0:A8:75:88
            X509v3 Authority Key Identifier:
                keyid:38:98:74:29:1F:32:B7:53:C5:21:79:67:3A:DD:5A:D1:0F:CB:86:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/389874291F32B753C52179673ADD5AD10FCB863D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d595c4c58cf97789c411a74fd9298a5c634d6c01d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a3a2f33362d3438203d3e203237343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f865::/36

    Signature Algorithm: sha256WithRSAEncryption
         6b:63:c3:c2:94:ad:3b:93:1e:a3:ab:47:10:64:01:e6:37:73:
         e7:87:79:fa:e4:f7:6b:8b:0f:a0:31:31:d8:29:00:d2:87:50:
         d4:77:89:59:b8:52:01:98:af:dc:19:e0:83:d1:09:0a:3d:08:
         21:b8:80:e4:78:e0:6d:34:9e:0e:c5:a5:19:28:15:3b:1c:f0:
         78:a1:32:a4:11:8c:52:dc:37:d8:39:ae:9a:c5:69:68:a5:9a:
         fd:92:48:3c:62:e8:12:cb:37:b5:7a:4c:c9:52:71:91:ac:f7:
         53:86:e6:be:1b:f4:2d:f1:ae:76:3f:e6:9f:1a:72:c8:20:b0:
         95:f4:62:84:22:91:10:a7:04:7b:a6:09:96:17:c3:92:14:71:
         42:86:6d:f0:b9:61:17:e6:98:8a:b2:36:86:48:ab:46:aa:17:
         ff:dd:08:8e:25:14:0a:48:a7:6e:b6:2b:2d:1d:d6:39:c0:b7:
         7b:ff:ef:af:d7:b1:0e:6c:99:65:a8:2a:a1:35:31:10:64:48:
         c6:54:4e:40:a1:c4:f1:92:be:e4:58:27:f1:d3:0b:e3:03:bb:
         c7:b3:51:15:2e:7a:eb:0a:ce:c4:5a:0c:a5:bc:8b:0a:24:b9:
         64:2c:5f:c2:ee:a3:db:35:eb:4a:ad:04:7d:9a:d6:15:d5:fc:
         a4:b8:c8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:16:00 2025 by rpki-client