Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a3a2f34342d3438203d3e203131393637.roa
File:                     323630323a663732653a3a2f34342d3438203d3e203131393637.roa (raw, json)
Hash identifier:          1Ao9HxKrjeFxB3tXl8w9ev/umZV41RF1D7yYws+wwyc=
Subject key identifier:   F5:9D:5C:57:7A:8C:00:1F:E1:67:23:92:DE:27:55:FD:86:21:F6:5A
Certificate issuer:       /CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
Certificate serial:       679DE2065CD21E193640379B1A74CDB2707D1217
Authority key identifier: 0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a3a2f34342d3438203d3e203131393637.roa
Signing time:             Wed 15 Oct 2025 20:24:36 +0000
ROA not before:           Wed 15 Oct 2025 20:19:36 +0000
ROA not after:            Wed 14 Oct 2026 20:24:36 +0000
asID:                     11967
IP address blocks:        2602:f72e::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9d:e2:06:5c:d2:1e:19:36:40:37:9b:1a:74:cd:b2:70:7d:12:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
        Validity
            Not Before: Oct 15 20:19:36 2025 GMT
            Not After : Oct 14 20:24:36 2026 GMT
        Subject: CN=F59D5C577A8C001FE1672392DE2755FD8621F65A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1a:6d:b3:96:37:c9:db:98:62:9d:11:04:08:
                    e1:74:a8:af:d3:fa:2b:a6:2b:c1:c3:7d:1e:b2:0a:
                    42:04:f6:09:2d:3a:bd:68:d4:0e:aa:b5:49:fa:81:
                    ce:61:a2:cf:35:aa:c2:f9:76:25:43:5c:c3:77:f5:
                    88:8a:18:b8:ae:68:26:fd:88:62:92:96:6a:49:20:
                    3d:6a:6a:03:f1:2f:cc:86:ec:e2:c4:d1:1c:67:48:
                    8d:23:fc:70:26:31:21:b8:64:b9:b9:ae:a3:eb:4f:
                    91:8d:1f:57:69:dc:c9:16:4c:c0:6e:15:11:e6:12:
                    66:c3:a1:fc:f2:a3:84:91:b0:dd:55:a7:12:29:7a:
                    5a:cf:f5:36:ac:94:cf:4a:40:99:a8:4f:e7:60:7c:
                    35:19:1e:01:c0:ee:23:d8:34:7f:68:48:db:2d:8d:
                    9b:4b:c0:36:d5:0a:c1:85:30:7f:c5:ef:65:35:f8:
                    47:ec:7b:1e:a9:4a:f5:59:d5:3f:e9:70:b8:02:ad:
                    b2:97:09:dd:fa:b0:89:56:37:14:f2:8d:47:c3:fa:
                    27:79:cd:b2:5c:70:19:bc:fc:8f:c6:72:38:3f:4b:
                    73:83:ab:60:22:f3:18:91:21:25:35:fe:eb:ef:f2:
                    55:b6:65:9f:4b:bc:87:9e:25:b7:25:74:0e:05:c5:
                    b7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9D:5C:57:7A:8C:00:1F:E1:67:23:92:DE:27:55:FD:86:21:F6:5A
            X509v3 Authority Key Identifier:
                keyid:0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a3a2f34342d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e::/44

    Signature Algorithm: sha256WithRSAEncryption
         27:af:3e:7f:b2:88:48:ee:46:5d:52:06:91:29:bd:8c:8e:43:
         59:c3:2b:b3:26:9a:ab:d9:a8:cd:a4:29:a5:f4:41:f1:0c:ed:
         eb:da:03:81:b8:0b:ce:c6:54:45:48:c8:6f:9d:dc:b0:48:e6:
         87:47:24:e0:8b:ae:e5:96:42:cc:ae:30:d4:4f:66:2f:27:50:
         26:e8:37:a3:a3:d0:4b:25:9b:f0:45:ca:7c:b2:3a:67:7d:46:
         ef:b0:31:12:92:bf:12:99:a6:be:5a:74:ff:a2:7e:b4:0b:a9:
         1c:a6:d8:76:5f:14:ef:22:80:c3:1c:2f:59:b6:db:d8:c8:84:
         9a:87:b2:9a:48:94:d1:46:02:dc:bf:b8:13:e7:ae:e9:53:84:
         29:bd:6b:f0:c8:fe:90:84:7e:88:72:10:26:dd:6c:5d:28:97:
         2e:11:a8:0b:d9:43:df:ec:c7:9c:30:65:5f:77:75:d5:02:30:
         75:a4:44:93:32:fa:ce:fe:ea:52:61:ef:18:08:c6:38:80:d2:
         0f:54:bb:9d:a8:d2:03:a3:b7:bf:72:9e:c8:44:75:58:f8:e0:
         af:7c:a4:6c:b4:60:89:32:fa:7f:d8:93:8f:7f:46:e2:3d:43:
         95:14:3e:97:5b:7a:0c:04:0c:d5:a5:7f:39:94:7d:36:e1:44:
         1a:5b:06:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 13:50:01 2025 by rpki-client