Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/323630323a666266313a3a2f33322d3438203d3e203338313336.roa
File:                     323630323a666266313a3a2f33322d3438203d3e203338313336.roa (raw, json)
Hash identifier:          G5Ypz8uYTRZdSEKLj3DtBINMYtJhvEfNaQpZwVcUFAg=
Subject key identifier:   88:22:F7:B2:79:9D:D9:7F:CA:44:55:3E:04:5A:34:32:BD:70:35:91
Certificate issuer:       /CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
Certificate serial:       09FD39C070C43CA026DB8B7A3F112DEDF7E12521
Authority key identifier: FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/323630323a666266313a3a2f33322d3438203d3e203338313336.roa
Signing time:             Fri 18 Jul 2025 07:36:59 +0000
ROA not before:           Fri 18 Jul 2025 07:31:59 +0000
ROA not after:            Fri 17 Jul 2026 07:36:59 +0000
asID:                     38136
IP address blocks:        2602:fbf1::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fd:39:c0:70:c4:3c:a0:26:db:8b:7a:3f:11:2d:ed:f7:e1:25:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
        Validity
            Not Before: Jul 18 07:31:59 2025 GMT
            Not After : Jul 17 07:36:59 2026 GMT
        Subject: CN=8822F7B2799DD97FCA44553E045A3432BD703591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:85:d0:be:94:94:9e:bb:25:1c:6b:43:55:
                    96:49:75:05:64:02:46:88:f4:d0:dc:05:dd:7a:36:
                    eb:39:cf:3d:11:43:0f:1d:50:19:e1:92:8b:f1:98:
                    93:ff:d9:e7:22:08:65:46:4e:61:53:53:32:13:58:
                    cb:02:5b:92:f3:3f:32:b4:e8:65:da:6f:70:3c:61:
                    eb:0c:e6:1a:e8:7d:c3:83:5b:b0:a0:d6:17:6d:3f:
                    3b:cd:df:1d:23:b1:38:d2:ee:cb:3f:e2:bc:78:63:
                    1a:30:f2:99:d0:1c:2f:37:da:39:28:04:6c:02:e1:
                    4c:10:e8:42:fc:e1:34:09:b8:13:7f:ad:c6:ff:b3:
                    9a:36:df:0f:8d:b3:17:b4:75:eb:ee:69:19:45:e5:
                    36:99:3b:96:68:66:36:56:53:41:37:71:d5:6c:36:
                    4a:dc:54:ac:77:d2:46:76:87:e7:9f:c7:20:42:ed:
                    0e:45:bc:1c:89:95:d8:78:a3:5f:45:da:a6:8b:ec:
                    d2:96:c1:02:c6:94:4e:97:f1:f9:e1:9b:36:f6:3b:
                    27:90:06:aa:1e:53:f6:b7:f2:f9:e1:d2:ea:e1:4e:
                    87:f6:11:0f:c9:be:91:cc:12:69:b0:b3:5d:5f:db:
                    cd:7b:12:f3:e9:f4:8b:f3:a8:11:aa:1f:f0:12:6a:
                    c6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:22:F7:B2:79:9D:D9:7F:CA:44:55:3E:04:5A:34:32:BD:70:35:91
            X509v3 Authority Key Identifier:
                keyid:FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/323630323a666266313a3a2f33322d3438203d3e203338313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf1::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:c9:bf:88:d5:22:ee:d7:c2:37:4b:61:5a:78:d9:1d:ac:59:
         a2:5a:91:01:9d:ce:96:ac:a3:9e:c4:64:e1:33:49:d9:09:37:
         e1:5f:a5:63:1e:7d:48:28:f9:d7:38:f8:7c:cb:39:b5:d0:5e:
         e8:ee:45:11:50:3b:ac:ad:4e:d5:cf:dd:f5:ef:60:d2:cc:c3:
         c8:8e:1b:15:5a:c1:de:fc:dc:bc:0e:b7:3a:0f:0e:b3:92:3d:
         ee:43:1d:7a:a2:e7:cc:12:68:48:07:c2:8b:b3:9c:d5:89:da:
         aa:96:f1:8b:67:fa:e0:60:a4:d8:07:5c:76:07:b7:d7:79:20:
         6f:08:9d:aa:2f:24:82:a4:95:35:20:d4:86:44:46:2b:e7:e5:
         2c:62:15:ab:cf:14:39:8b:8a:cc:b2:c3:2e:66:a3:c4:30:e7:
         a3:b3:64:80:c4:b8:8c:df:2c:5c:68:04:e3:48:77:d3:de:5d:
         f3:2e:7b:28:e8:06:f9:b6:b2:ee:80:a3:31:d9:cf:34:7f:2e:
         28:9f:c5:cc:4a:6d:7e:d3:a7:f4:00:a2:19:40:52:70:e0:41:
         7d:e6:a0:a2:81:1e:99:b0:ed:3f:c6:dc:5d:a9:60:dc:cc:4e:
         4f:15:e9:b5:22:c3:65:e1:15:ed:5b:67:0d:f0:78:30:68:4d:
         24:80:80:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:06:00 2025 by rpki-client