Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a38303a3a2f34312d3431203d3e203131393637.roa
File:                     323630323a663732653a38303a3a2f34312d3431203d3e203131393637.roa (raw, json)
Hash identifier:          YM42zBzCFjV9lhO+k8Mmtg5ldgryjRdDSJzONEgXy7I=
Subject key identifier:   64:C7:E1:E6:4D:32:D0:3C:8D:BB:02:2C:A4:96:4C:3C:67:D1:F7:67
Certificate issuer:       /CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
Certificate serial:       2F05D7561D3DD1B4E4D1706CA7B0DD457677089A
Authority key identifier: 0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a38303a3a2f34312d3431203d3e203131393637.roa
Signing time:             Wed 15 Oct 2025 20:24:36 +0000
ROA not before:           Wed 15 Oct 2025 20:19:36 +0000
ROA not after:            Wed 14 Oct 2026 20:24:36 +0000
asID:                     11967
IP address blocks:        2602:f72e:80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:05:d7:56:1d:3d:d1:b4:e4:d1:70:6c:a7:b0:dd:45:76:77:08:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
        Validity
            Not Before: Oct 15 20:19:36 2025 GMT
            Not After : Oct 14 20:24:36 2026 GMT
        Subject: CN=64C7E1E64D32D03C8DBB022CA4964C3C67D1F767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ce:19:f0:7b:09:5a:7d:75:6c:12:10:4b:65:
                    b5:79:7b:02:28:b6:16:ba:12:0c:f8:d2:bb:b3:c7:
                    27:f2:c1:93:45:2e:14:6e:3b:19:5c:f9:bb:47:90:
                    5d:d2:ad:28:c2:2c:50:d3:7a:6d:2a:2c:b1:17:dd:
                    d8:bc:b7:6e:d4:c2:84:76:c8:5e:63:8e:98:d6:0a:
                    df:41:68:f3:d6:fa:81:f3:c1:a3:16:ef:f4:16:d0:
                    d1:07:d6:49:a3:f3:59:d8:81:16:1c:0f:fa:05:76:
                    3a:fe:37:6e:97:f3:ff:39:fe:83:40:88:4e:20:a7:
                    94:d8:26:8a:ef:bc:dc:1f:0c:29:49:99:4a:8b:44:
                    12:fe:30:63:5d:04:77:3e:47:5d:5b:65:ac:fd:5a:
                    02:95:33:96:b7:5b:ca:c6:b5:bd:41:9e:79:0c:37:
                    aa:9a:c1:a0:83:2f:53:54:04:da:21:33:d8:a1:11:
                    8d:3c:13:6c:a0:98:88:c4:a0:44:10:2b:4c:3d:2c:
                    81:ff:cf:52:e8:df:ef:f1:50:6e:a0:16:e7:18:77:
                    27:b6:aa:a7:47:52:4f:2f:b9:2b:bf:ab:80:38:95:
                    43:22:33:36:ae:18:d2:c6:1f:09:40:07:7f:aa:e2:
                    68:4b:20:12:7b:e2:36:5c:78:d6:20:c6:83:c6:15:
                    91:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C7:E1:E6:4D:32:D0:3C:8D:BB:02:2C:A4:96:4C:3C:67:D1:F7:67
            X509v3 Authority Key Identifier:
                keyid:0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a38303a3a2f34312d3431203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:80::/41

    Signature Algorithm: sha256WithRSAEncryption
         5d:7a:7e:2b:c7:08:fa:79:5c:63:52:e1:55:d6:95:b8:92:f0:
         97:69:ad:00:0f:be:cc:64:ed:23:76:f4:42:a1:72:0b:06:1d:
         f4:e2:f1:25:55:1b:9f:8c:39:2a:e1:05:ca:c2:cd:31:34:69:
         bd:7b:08:2e:9d:54:27:04:5d:c1:45:bf:01:52:3b:61:2a:a6:
         5a:fb:5c:b3:bc:7e:32:a4:69:1f:cf:f4:a8:08:1d:48:b9:cd:
         af:3d:6a:57:6a:b3:92:13:e5:56:3b:0c:13:3a:b7:47:70:28:
         10:a0:01:a5:2d:38:11:ce:6d:3a:30:f3:c5:16:36:9c:94:cd:
         0a:98:14:bd:aa:81:4e:ec:0f:53:68:70:aa:a4:37:6b:5f:00:
         56:bd:d6:c0:d8:54:9e:f3:d1:22:93:4d:a0:10:ce:0b:2b:39:
         13:8d:53:46:f5:be:f1:35:59:89:ef:33:d5:5b:bb:97:50:64:
         e5:58:a6:ea:6f:78:9d:98:f9:e6:5e:27:ea:f4:29:d5:f1:a9:
         f0:b1:16:70:1f:cb:b4:d7:22:85:55:4a:37:7c:da:f0:b0:1f:
         4d:d7:2b:b4:21:07:a3:af:23:42:eb:c0:e8:57:b0:9a:8a:ff:
         bb:48:b5:92:af:54:85:67:dd:b1:c0:3c:8b:e5:fe:2a:1b:fa:
         92:5b:e5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 13:50:24 2025 by rpki-client