Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a32303a3a2f34382d3438203d3e20333937363538.roa
File:                     323630323a663732653a32303a3a2f34382d3438203d3e20333937363538.roa (raw, json)
Hash identifier:          GzASTqDTigI8qUOWuV31MYljNrdFLaTtZVzjpDefim0=
Subject key identifier:   06:CF:E9:57:BA:56:B4:0C:7A:E2:60:C7:31:35:3D:EE:7A:72:2A:D5
Certificate issuer:       /CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
Certificate serial:       0D4262E08D9FFCFA3FCB341FB917069C9989202B
Authority key identifier: 3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a32303a3a2f34382d3438203d3e20333937363538.roa
Signing time:             Fri 14 Aug 2026 19:45:07 +0000
ROA not before:           Fri 14 Aug 2026 19:40:07 +0000
ROA not after:            Fri 13 Aug 2027 19:45:07 +0000
asID:                     397658
IP address blocks:        2602:f72e:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 10:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:42:62:e0:8d:9f:fc:fa:3f:cb:34:1f:b9:17:06:9c:99:89:20:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
        Validity
            Not Before: Aug 14 19:40:07 2026 GMT
            Not After : Aug 13 19:45:07 2027 GMT
        Subject: CN=06CFE957BA56B40C7AE260C731353DEE7A722AD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0d:c2:a7:1b:f1:a9:55:c1:5d:b1:e5:fa:aa:
                    69:7b:b6:80:a1:39:88:5c:66:77:7d:84:10:9f:f5:
                    98:e5:0d:38:51:54:5e:0d:aa:00:27:71:ef:2e:5f:
                    c2:70:6d:09:11:21:04:32:6c:a9:c2:d4:73:75:78:
                    92:61:f2:55:37:45:25:3f:db:0d:ac:f1:65:75:43:
                    2e:37:0a:49:ae:87:d6:94:3c:a8:a9:b0:0e:e6:e5:
                    ce:a7:8f:b1:73:6c:bf:21:2d:b4:22:71:bc:3a:bf:
                    5e:fc:90:60:79:61:0f:9a:44:05:20:e6:3c:a5:d0:
                    42:db:cb:9d:2e:5f:61:fd:59:f7:e9:67:92:23:4f:
                    18:49:cd:61:80:6d:59:58:78:10:e9:01:12:ad:8f:
                    1a:94:2c:e0:d8:92:fb:e7:34:f4:2e:4a:44:10:f2:
                    c9:7f:ff:4c:a5:51:c5:5f:37:5e:77:30:dc:8e:1e:
                    da:84:2e:47:0d:ac:f0:1e:35:9b:ed:ec:1f:50:95:
                    77:93:00:32:c5:e4:0f:64:2e:6d:38:d7:ab:2d:24:
                    58:2f:87:ec:92:72:7f:31:56:f1:57:d1:5b:8c:e1:
                    cb:f1:b5:3c:4e:ba:94:e9:6e:3f:07:3c:26:6c:15:
                    c8:c2:75:00:b8:0c:2f:02:f6:2c:d4:d3:3a:58:ad:
                    81:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CF:E9:57:BA:56:B4:0C:7A:E2:60:C7:31:35:3D:EE:7A:72:2A:D5
            X509v3 Authority Key Identifier:
                keyid:3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a32303a3a2f34382d3438203d3e20333937363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:20:b0:b5:0e:a3:b6:e1:9f:7f:e2:dd:bf:8a:ac:80:52:c4:
         b5:e7:7b:76:d6:e8:e8:9e:52:1a:9f:62:39:73:24:58:cf:76:
         34:c5:b5:09:b7:61:f4:06:24:f5:76:b0:42:9b:c5:9b:b2:3c:
         f1:a0:76:ae:22:36:a9:46:60:c3:ae:0e:fb:01:fd:ce:9f:4c:
         18:b8:09:2d:f0:18:4d:da:b7:9b:d5:7f:c2:54:6b:1e:c2:8d:
         f3:8d:76:85:56:8b:61:6a:ce:ee:ed:e9:bf:98:20:51:69:a5:
         e1:32:80:03:a3:ec:a0:ec:1c:14:42:0e:f3:26:f4:61:ac:d4:
         73:b9:d6:a5:31:1e:1a:e4:95:4f:a9:d7:fc:2c:31:c1:d5:e9:
         de:04:f6:6f:33:37:fa:f7:19:45:52:59:18:42:b2:60:59:5c:
         19:46:8d:19:d8:f3:61:65:f4:6d:53:52:e9:6c:9c:7a:09:78:
         10:a2:20:d6:15:60:6e:da:4d:29:c3:9e:63:58:14:9c:c2:21:
         ae:25:27:54:f6:40:d5:14:83:5c:e8:9b:ba:19:9e:b4:4a:ec:
         3e:38:be:fd:c4:14:37:6b:00:fc:a1:12:55:40:9e:07:19:19:
         54:dd:d0:5f:95:eb:9c:15:c2:58:f9:04:30:f0:41:f9:a5:21:
         13:cc:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:16:53 2026 by rpki-client