Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31313a3a2f34382d3438203d3e20313532333638.roa
File:                     323630323a666163323a31313a3a2f34382d3438203d3e20313532333638.roa (raw, json)
Hash identifier:          CnegBRErN2LPIF8AGQxmzNCZwg2VqE9aoNNHtcw+PPY=
Subject key identifier:   7A:12:E2:62:37:B5:76:93:0B:9A:57:87:EC:4D:C9:42:95:66:58:57
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       329D37B5A4DFBB03B086E1A954AF1517F835FEAD
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31313a3a2f34382d3438203d3e20313532333638.roa
Signing time:             Fri 28 Mar 2025 00:17:19 +0000
ROA not before:           Fri 28 Mar 2025 00:12:19 +0000
ROA not after:            Fri 27 Mar 2026 00:17:19 +0000
asID:                     152368
IP address blocks:        2602:fac2:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9d:37:b5:a4:df:bb:03:b0:86:e1:a9:54:af:15:17:f8:35:fe:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 28 00:12:19 2025 GMT
            Not After : Mar 27 00:17:19 2026 GMT
        Subject: CN=7A12E26237B576930B9A5787EC4DC94295665857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:91:46:ff:75:cf:d0:2a:fa:db:78:0b:60:57:
                    1f:c4:87:d9:dd:bd:2a:a3:05:9b:8f:cd:a3:87:0a:
                    42:cb:5c:34:f2:54:92:fa:db:35:ff:bf:ed:6a:40:
                    a1:cd:75:38:7d:e3:a2:66:bf:79:dc:38:a4:73:2a:
                    ce:aa:fb:34:d9:83:db:b9:8e:4a:05:ff:ab:98:2c:
                    32:9b:f4:f9:ba:9c:16:90:d4:f4:d8:91:1f:c8:ec:
                    bd:31:f5:8f:32:ca:4a:3b:7f:b8:bc:5c:e9:00:a2:
                    ea:1c:2d:c7:bb:d2:50:dc:4f:fc:5b:c0:72:19:df:
                    5a:a3:b6:1f:76:52:4c:13:49:03:0e:51:97:b3:aa:
                    4d:c4:38:2c:06:fd:c2:e7:4a:0b:30:21:79:8d:ee:
                    bf:a9:b4:b1:38:3e:cb:39:a7:52:13:a0:6a:8d:54:
                    1d:90:e8:12:c4:39:2e:0f:bb:5f:cd:13:eb:57:35:
                    5e:cc:a0:6d:52:84:cc:e7:72:96:b9:99:d8:bc:90:
                    16:21:02:5d:06:a9:6f:96:fb:2f:a8:79:aa:16:c3:
                    2d:fc:98:db:fb:c0:c5:1d:22:f2:24:20:85:80:29:
                    74:dd:50:24:a8:be:5a:53:e8:02:60:da:3f:eb:7d:
                    9f:10:c6:ba:18:8c:e8:ec:86:1e:55:81:3d:d4:91:
                    fb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:12:E2:62:37:B5:76:93:0B:9A:57:87:EC:4D:C9:42:95:66:58:57
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31313a3a2f34382d3438203d3e20313532333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:13:0a:41:46:dd:a0:42:65:8c:65:82:8f:06:4b:59:12:e4:
         1b:2f:b2:41:cf:4a:5a:29:63:a0:8d:ab:00:72:f4:9a:df:0d:
         b3:59:68:71:dc:3e:6c:0c:69:ff:7a:85:98:3f:8e:9e:08:8b:
         2f:16:66:02:7e:85:2f:27:3f:fe:4f:49:0d:49:24:b8:54:5c:
         5a:07:08:37:e4:c7:9c:84:cb:ca:4c:63:39:e8:16:8c:ba:a8:
         a0:7f:7e:d0:b1:c3:5e:8b:42:1b:9e:5d:4e:70:6b:40:34:73:
         49:c6:be:b0:5a:78:3b:bd:c1:a8:f8:3b:6e:92:61:69:18:07:
         f5:1d:f5:07:94:73:15:9a:50:59:32:65:b3:4e:03:03:5e:19:
         eb:5b:b6:79:80:29:28:e9:e2:bb:fe:6a:be:93:84:7c:11:dd:
         28:53:04:06:be:60:ba:f9:2a:99:98:c9:01:ed:0d:19:96:12:
         ed:e2:3f:39:d1:98:53:57:4b:4c:7e:e2:cb:05:09:4b:47:48:
         96:7a:46:36:80:3f:ca:43:2c:9a:0e:a4:70:ba:7e:fe:4c:57:
         f0:15:fb:41:cc:ba:b7:3e:15:38:17:ba:e2:dc:b6:ff:b8:6e:
         00:3a:07:64:92:0e:ab:5b:d5:df:c6:6f:54:e6:52:2c:28:ed:
         01:41:31:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:03:10 2025 by rpki-client