Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/355a72b9f47845dda9e51f8ce66d24d6/0/323630323a663265393a3a2f34382d3438203d3e203331383036.roa
File:                     323630323a663265393a3a2f34382d3438203d3e203331383036.roa (raw, json)
Hash identifier:          AE2rdnndIVTm3UPbupRz6UyE8np21yPpSLZjMDRVrDs=
Subject key identifier:   E2:FF:83:01:39:F0:21:D8:5E:46:9F:AB:30:4B:CF:77:C9:19:1E:44
Certificate issuer:       /CN=a4224334a67661b560b1bf887aa52992d88047722b60a37258
Certificate serial:       1D831FD95B6D4C1593FB82D350E23C7EB0960680
Authority key identifier: CD:9F:B9:FA:70:5E:29:28:B7:35:AE:A7:04:A2:C5:CD:11:09:BC:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f298a26-8e24-4e83-ad8e-abcaa660d2ae/a4224334a67661b560b1bf887aa52992d88047722b60a37258.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/355a72b9f47845dda9e51f8ce66d24d6/0/323630323a663265393a3a2f34382d3438203d3e203331383036.roa
Signing time:             Fri 02 Oct 2026 23:15:01 +0000
ROA not before:           Fri 02 Oct 2026 23:10:01 +0000
ROA not after:            Fri 01 Oct 2027 23:15:01 +0000
asID:                     31806
IP address blocks:        2602:f2e9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/355a72b9f47845dda9e51f8ce66d24d6/0/CD9FB9FA705E2928B735AEA704A2C5CD1109BC8F.crl
                          rsync://rpki-rps.arin.net/repository/355a72b9f47845dda9e51f8ce66d24d6/0/CD9FB9FA705E2928B735AEA704A2C5CD1109BC8F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f298a26-8e24-4e83-ad8e-abcaa660d2ae/a4224334a67661b560b1bf887aa52992d88047722b60a37258.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f298a26-8e24-4e83-ad8e-abcaa660d2ae/0f298a26-8e24-4e83-ad8e-abcaa660d2ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f298a26-8e24-4e83-ad8e-abcaa660d2ae/0f298a26-8e24-4e83-ad8e-abcaa660d2ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f298a26-8e24-4e83-ad8e-abcaa660d2ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 00:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:83:1f:d9:5b:6d:4c:15:93:fb:82:d3:50:e2:3c:7e:b0:96:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4224334a67661b560b1bf887aa52992d88047722b60a37258
        Validity
            Not Before: Oct  2 23:10:01 2026 GMT
            Not After : Oct  1 23:15:01 2027 GMT
        Subject: CN=E2FF830139F021D85E469FAB304BCF77C9191E44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3b:d9:66:f6:13:8a:7d:66:6c:ff:04:6c:b7:
                    8b:11:41:f6:4f:9d:2e:5a:be:84:a2:b4:85:9a:23:
                    77:6a:9e:b0:fd:d0:fe:7c:3d:2a:c2:13:5d:51:ec:
                    19:3f:0b:58:a7:18:be:d7:87:eb:23:d7:0c:c2:9e:
                    3f:87:a0:a1:0a:d8:84:a1:f6:ec:50:14:15:c9:0e:
                    df:a2:1b:6b:12:14:ee:1a:65:d1:f1:32:f3:cb:47:
                    5f:76:35:02:b7:5c:b1:cb:a1:12:cf:d7:ec:c0:1c:
                    e5:89:3e:67:c0:9c:4c:4a:83:f6:ae:d2:44:e1:53:
                    b0:8d:fa:58:0b:12:03:13:30:33:26:87:df:a1:51:
                    ef:af:fb:e5:2a:84:3c:32:c0:5a:91:31:00:f1:2d:
                    8e:f7:e3:a8:99:e8:77:db:43:f8:be:5f:1c:fc:4d:
                    12:19:71:2d:67:52:56:8f:2c:bd:dd:b9:a1:74:61:
                    10:6e:d8:1b:86:24:b4:47:61:e1:73:5b:5c:ab:f2:
                    3a:f7:3a:cf:33:15:39:7f:8a:9f:a5:1a:62:1a:95:
                    95:c1:11:be:5e:2d:cd:d5:f3:33:87:80:e8:eb:a0:
                    71:e3:46:cc:39:70:15:22:e2:34:7e:18:53:f3:07:
                    11:b5:29:66:c5:1a:0c:85:81:da:e5:8d:cb:ae:88:
                    d3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FF:83:01:39:F0:21:D8:5E:46:9F:AB:30:4B:CF:77:C9:19:1E:44
            X509v3 Authority Key Identifier:
                keyid:CD:9F:B9:FA:70:5E:29:28:B7:35:AE:A7:04:A2:C5:CD:11:09:BC:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/355a72b9f47845dda9e51f8ce66d24d6/0/CD9FB9FA705E2928B735AEA704A2C5CD1109BC8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f298a26-8e24-4e83-ad8e-abcaa660d2ae/a4224334a67661b560b1bf887aa52992d88047722b60a37258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/355a72b9f47845dda9e51f8ce66d24d6/0/323630323a663265393a3a2f34382d3438203d3e203331383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f2e9::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:2b:2e:c2:1d:44:d2:df:9b:46:a0:70:2c:12:44:ab:39:18:
         f8:b9:84:02:90:ab:b5:86:5c:57:75:0a:45:2c:e3:3a:59:0a:
         a1:64:cf:79:cc:9e:55:d0:d2:ff:8e:2e:98:99:4b:5b:c5:87:
         a8:23:82:bc:5b:07:72:d0:3d:32:b5:9d:17:2c:cd:2f:02:9a:
         07:99:b9:ba:53:c6:32:80:db:29:70:9d:65:14:cc:f4:3a:79:
         b8:f1:88:a8:a6:e7:c2:9b:35:06:71:92:d7:b8:8e:8a:cf:7e:
         04:b6:98:92:e6:4a:be:06:a9:2b:9c:88:b1:31:8e:fc:aa:40:
         7e:68:f7:d3:c7:d0:0d:21:b3:af:91:ef:91:47:2c:68:ea:d4:
         c3:d8:53:59:a6:06:24:33:22:6c:ff:f5:63:48:21:1c:fb:8d:
         8b:3c:46:5e:0e:a2:98:53:9b:f3:21:ca:3a:c6:36:78:a9:0a:
         4b:fa:9e:f7:34:37:f3:03:d5:3a:fe:c7:8d:a3:79:72:c0:71:
         dc:cd:fd:fc:74:95:f2:2f:8c:08:0f:79:3e:87:e0:21:7d:05:
         41:21:ef:18:ca:a9:36:05:25:e8:33:14:f9:60:26:17:56:76:
         a7:04:93:4b:4e:f2:fe:21:d9:dc:3f:62:a9:7c:1e:8d:c0:a7:
         7b:cd:d6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:34 2026 by rpki-client