Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/861501d0812d44f881fc26bfbb4e6d87/0/323630323a663362303a3a2f33362d3336203d3e20343032363133.roa
File:                     323630323a663362303a3a2f33362d3336203d3e20343032363133.roa (raw, json)
Hash identifier:          7cqlej7aNesidXNzrx8R9XVMUeM5JuOSTaIYRTeSXbs=
Subject key identifier:   CC:9B:7D:69:70:73:0B:6C:6B:E0:77:20:65:73:21:17:EB:8F:80:84
Certificate issuer:       /CN=ec879b11c696440b021b9784ec72b24183516522cadcfa59c1
Certificate serial:       54E95DD610E7B21B2E7F2F5707BB37820D75F9FB
Authority key identifier: CA:39:1A:30:ED:4B:59:B1:27:C0:38:9C:9E:AF:29:3D:87:19:08:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0d6adbdf-02aa-4a3a-87dd-6ba325ec488e/ec879b11c696440b021b9784ec72b24183516522cadcfa59c1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/861501d0812d44f881fc26bfbb4e6d87/0/323630323a663362303a3a2f33362d3336203d3e20343032363133.roa
Signing time:             Wed 12 Aug 2026 00:03:37 +0000
ROA not before:           Tue 11 Aug 2026 23:58:37 +0000
ROA not after:            Wed 11 Aug 2027 00:03:37 +0000
asID:                     402613
IP address blocks:        2602:f3b0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/861501d0812d44f881fc26bfbb4e6d87/0/CA391A30ED4B59B127C0389C9EAF293D871908A8.crl
                          rsync://rpki-rps.arin.net/repository/861501d0812d44f881fc26bfbb4e6d87/0/CA391A30ED4B59B127C0389C9EAF293D871908A8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0d6adbdf-02aa-4a3a-87dd-6ba325ec488e/ec879b11c696440b021b9784ec72b24183516522cadcfa59c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0d6adbdf-02aa-4a3a-87dd-6ba325ec488e/0d6adbdf-02aa-4a3a-87dd-6ba325ec488e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0d6adbdf-02aa-4a3a-87dd-6ba325ec488e/0d6adbdf-02aa-4a3a-87dd-6ba325ec488e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0d6adbdf-02aa-4a3a-87dd-6ba325ec488e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e9:5d:d6:10:e7:b2:1b:2e:7f:2f:57:07:bb:37:82:0d:75:f9:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec879b11c696440b021b9784ec72b24183516522cadcfa59c1
        Validity
            Not Before: Aug 11 23:58:37 2026 GMT
            Not After : Aug 11 00:03:37 2027 GMT
        Subject: CN=CC9B7D6970730B6C6BE0772065732117EB8F8084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:48:69:9e:86:72:e0:ce:ad:49:84:49:73:d4:
                    fa:ba:1a:50:ed:bb:f9:a2:6e:00:ed:c7:90:58:4f:
                    4d:91:1f:cd:c4:13:dd:a4:32:46:0f:76:c3:aa:80:
                    58:30:27:68:df:45:dc:c7:58:12:89:fd:1e:38:fc:
                    10:46:58:64:0d:1b:6c:e9:eb:36:f0:fc:73:18:a6:
                    95:5a:45:30:a4:84:4d:53:21:72:7f:81:fb:f7:59:
                    7f:cd:63:66:91:9b:d0:11:5a:12:89:43:d2:5d:54:
                    fd:eb:b4:8a:9a:74:4e:0f:fe:e2:a8:4c:80:94:fb:
                    6c:ac:a5:9a:df:21:a4:64:be:a6:c7:a8:f2:e4:b0:
                    73:75:d3:5d:41:22:a8:20:d2:f5:a8:29:b2:ab:57:
                    ce:80:3e:42:72:72:59:73:34:3c:a7:bb:4a:3b:6f:
                    84:ba:7f:8e:91:90:f0:04:b3:c3:9f:26:f2:5d:54:
                    e0:76:00:00:2d:1c:03:02:70:e5:44:6e:1f:f8:1f:
                    20:57:22:57:a3:51:8f:37:ff:38:94:f6:b7:51:34:
                    90:bc:dd:dc:ee:86:47:e4:2a:41:95:25:b3:40:90:
                    88:d0:23:6d:3e:4b:9f:db:52:08:05:4e:2e:31:a7:
                    01:bf:76:b5:1c:94:5e:f1:c5:09:6d:b9:1f:3a:91:
                    08:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9B:7D:69:70:73:0B:6C:6B:E0:77:20:65:73:21:17:EB:8F:80:84
            X509v3 Authority Key Identifier:
                keyid:CA:39:1A:30:ED:4B:59:B1:27:C0:38:9C:9E:AF:29:3D:87:19:08:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/861501d0812d44f881fc26bfbb4e6d87/0/CA391A30ED4B59B127C0389C9EAF293D871908A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0d6adbdf-02aa-4a3a-87dd-6ba325ec488e/ec879b11c696440b021b9784ec72b24183516522cadcfa59c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/861501d0812d44f881fc26bfbb4e6d87/0/323630323a663362303a3a2f33362d3336203d3e20343032363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3b0::/36

    Signature Algorithm: sha256WithRSAEncryption
         a7:f5:cd:df:36:e3:f8:d9:80:58:ca:10:4b:43:b3:ab:34:fd:
         25:79:e1:4a:1c:6b:92:cd:74:27:8b:4a:65:ac:07:c4:65:b7:
         1a:b6:3a:42:4a:cf:44:87:5b:75:6f:94:ee:33:1f:2f:c9:4c:
         94:2c:06:ea:ea:a2:88:2f:6c:22:ff:33:79:16:f7:83:87:2c:
         c4:ca:9e:53:93:17:a7:d4:ca:22:0b:41:ec:f3:e4:b6:69:9b:
         cf:15:4e:27:5b:c0:d4:bd:fc:64:13:ce:b5:b3:41:37:46:62:
         79:b3:66:59:80:fd:48:e7:2b:db:3a:bf:ba:41:07:c0:e2:6d:
         06:df:e4:39:1e:0a:a2:42:ec:72:e7:d6:dd:c2:97:c9:aa:6f:
         d8:90:cf:df:cb:bf:be:9b:7c:53:a9:7b:4a:67:0c:9b:72:61:
         1d:ae:b5:df:c3:8b:b6:23:81:cd:92:28:36:53:90:c5:fe:0c:
         e3:3c:bc:df:da:a8:cd:0f:73:1d:8d:ed:bb:88:29:9d:4b:d7:
         b5:fa:dd:ce:03:a5:bc:fe:bf:46:ef:a2:92:48:e9:d1:e9:48:
         85:68:05:7c:37:26:d5:8e:9e:a4:c3:ce:67:cb:cb:20:94:c9:
         7a:d4:c4:40:f0:e3:13:4a:eb:48:e2:a4:39:d7:04:1b:f8:e1:
         42:4d:de:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:25:58 2026 by rpki-client