Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a32353a3a2f34382d3438203d3e203131393637.roa
File:                     323630323a663732653a32353a3a2f34382d3438203d3e203131393637.roa (raw, json)
Hash identifier:          HpXJyBsLWwAsV52dQo9TAKlKKhYfdQA3dQCXSuOvf/8=
Subject key identifier:   B4:F7:99:66:5E:CA:3B:CF:50:71:F9:C1:99:6E:45:07:C5:F1:BE:24
Certificate issuer:       /CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
Certificate serial:       7220BB5322D769CCE2BF5C1A2CB1826BC4AA0924
Authority key identifier: 0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a32353a3a2f34382d3438203d3e203131393637.roa
Signing time:             Wed 15 Oct 2025 20:24:35 +0000
ROA not before:           Wed 15 Oct 2025 20:19:35 +0000
ROA not after:            Wed 14 Oct 2026 20:24:35 +0000
asID:                     11967
IP address blocks:        2602:f72e:25::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:20:bb:53:22:d7:69:cc:e2:bf:5c:1a:2c:b1:82:6b:c4:aa:09:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
        Validity
            Not Before: Oct 15 20:19:35 2025 GMT
            Not After : Oct 14 20:24:35 2026 GMT
        Subject: CN=B4F799665ECA3BCF5071F9C1996E4507C5F1BE24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fb:60:99:6f:05:a7:05:41:e4:8f:12:ca:bf:
                    23:b4:ca:68:32:d4:d4:fb:51:30:9b:1a:75:f9:e4:
                    87:6a:13:25:63:bf:ec:cb:61:38:4b:59:64:f1:62:
                    b6:c9:e4:14:82:4e:45:98:98:5a:bb:49:5d:37:85:
                    76:2c:bf:54:71:7b:50:47:35:b5:82:24:ea:f0:7e:
                    ed:d1:5a:30:2a:9d:d2:41:22:f7:01:b0:fa:a0:d4:
                    d0:f4:52:54:3e:72:cc:c1:46:34:14:7b:2f:47:8a:
                    24:cd:50:9e:1c:e8:38:3a:22:0c:64:ad:cb:50:63:
                    61:89:9a:10:c0:a3:66:73:65:7f:64:06:6d:f6:b3:
                    cd:f9:2d:db:16:88:90:01:45:65:80:0b:0b:2a:3a:
                    3c:6c:a7:d6:37:f0:8d:8b:0e:70:f7:d7:4e:60:e7:
                    60:3c:52:18:da:7e:97:d3:16:c8:60:b8:37:9b:52:
                    a6:6c:7d:3b:0f:f5:ba:a9:16:95:e5:cd:2e:dc:57:
                    07:86:14:61:88:4c:70:e8:e1:e5:78:cb:cc:1c:51:
                    b6:af:d2:03:19:80:12:89:77:8c:1a:e1:72:f8:fb:
                    94:2a:37:92:ea:20:f5:c2:8f:34:37:77:cc:ac:d2:
                    32:62:1a:2f:ae:dd:07:e7:8f:b3:ee:c7:99:20:59:
                    58:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F7:99:66:5E:CA:3B:CF:50:71:F9:C1:99:6E:45:07:C5:F1:BE:24
            X509v3 Authority Key Identifier:
                keyid:0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a32353a3a2f34382d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:25::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:8b:f8:3b:14:bc:b9:50:9d:35:f6:77:bb:73:55:3f:73:73:
         40:4d:d5:8b:cc:09:26:0a:b8:7a:32:c5:6e:7d:a8:df:19:5c:
         51:83:72:b8:31:6e:35:38:79:ff:7d:c9:02:9e:90:25:e7:ec:
         f2:bf:38:ed:9a:ba:60:e3:a2:28:90:0a:9f:ca:e0:0c:c1:64:
         2b:76:ad:e8:54:b3:83:e1:48:f2:50:bd:d3:5d:2c:50:81:d0:
         f5:b0:3a:2e:d4:43:ef:d5:a0:1a:20:2a:79:77:53:a2:9a:26:
         c5:3a:79:de:3b:5d:d6:fd:e0:10:b8:6f:87:c5:3e:7f:41:b3:
         f6:dc:14:b2:ce:4b:51:f8:0b:1c:ae:52:f7:c9:82:9c:f7:db:
         e2:11:09:70:b4:f6:76:bf:9c:82:93:ec:bb:0a:4a:53:ba:70:
         b9:54:65:a4:1e:9e:4d:b0:13:f2:6e:8b:fe:fb:90:63:cc:48:
         8d:96:6d:6f:01:22:ea:33:78:c9:3d:fe:2b:3d:9a:55:51:b0:
         16:5e:13:9f:87:99:1c:e2:ee:20:18:09:12:59:56:cf:53:4a:
         8d:0d:e5:6d:11:24:d3:d4:a6:ac:a9:73:77:08:eb:9d:75:f9:
         e8:10:01:e0:58:3d:22:0c:c1:a5:ca:a1:59:18:d6:36:f8:32:
         72:7b:00:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 13:50:23 2025 by rpki-client