Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/323630323a3239363a3132333a3a2f34382d3438203d3e20343030383137.roa
File:                     323630323a3239363a3132333a3a2f34382d3438203d3e20343030383137.roa (raw, json)
Hash identifier:          0W1j1C8RYYcNtsUGGepDoDTFZsvnZpVuv4PQlYuWcTg=
Subject key identifier:   99:61:37:20:A7:34:66:4D:9C:2C:4D:99:25:22:D2:A0:D0:42:31:3E
Certificate issuer:       /CN=90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192
Certificate serial:       5DE3477899A228FD5D4936BCE31E664EFF772FD6
Authority key identifier: 18:1D:49:68:B5:50:98:19:52:C3:18:30:1A:B2:D4:C1:0F:7F:34:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/323630323a3239363a3132333a3a2f34382d3438203d3e20343030383137.roa
Signing time:             Mon 08 Sep 2025 10:42:31 +0000
ROA not before:           Mon 08 Sep 2025 10:37:31 +0000
ROA not after:            Mon 07 Sep 2026 10:42:31 +0000
asID:                     400817
IP address blocks:        2602:296:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 03:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e3:47:78:99:a2:28:fd:5d:49:36:bc:e3:1e:66:4e:ff:77:2f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192
        Validity
            Not Before: Sep  8 10:37:31 2025 GMT
            Not After : Sep  7 10:42:31 2026 GMT
        Subject: CN=99613720A734664D9C2C4D992522D2A0D042313E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bb:5b:65:de:36:07:8d:0c:c2:88:a7:77:8c:
                    ea:c9:42:2e:36:cc:a0:bb:e9:f1:cb:89:b4:11:11:
                    78:d1:3b:16:9a:c8:88:d9:d2:a9:b6:20:ea:46:03:
                    5d:b2:82:77:fd:c9:55:8e:1c:09:9c:9c:60:73:93:
                    7e:96:ae:b2:bf:41:9c:c8:15:16:54:9d:f0:d5:42:
                    9f:a9:d3:53:fc:00:b3:44:52:d4:21:de:18:a5:1b:
                    aa:ab:b5:e6:15:89:a5:86:c0:c5:44:91:b6:e2:9b:
                    0b:60:28:1b:04:3d:f1:5a:8d:5f:b6:c5:cc:bd:5e:
                    33:45:27:4d:4e:f5:41:f5:27:bf:55:ab:d3:6b:84:
                    1f:f2:cc:09:46:ba:80:be:57:62:74:71:fb:a9:cf:
                    67:fe:b0:a6:23:23:ae:7b:95:36:12:aa:16:fe:16:
                    43:f4:60:4d:4a:16:e1:8d:95:e1:ba:24:c5:52:67:
                    79:ff:76:8b:ab:32:50:c2:28:65:29:d0:45:8a:c8:
                    12:79:ab:5a:45:f9:0c:0d:0e:cb:91:44:91:9c:e2:
                    3a:e7:1c:e5:1b:2d:88:bd:44:1f:a9:f0:c5:0c:60:
                    bf:e7:07:9d:f5:ca:a0:57:d7:e0:7b:5a:78:58:95:
                    76:7a:fd:fe:2d:f6:c9:b8:3d:68:17:97:3f:1b:7e:
                    df:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:61:37:20:A7:34:66:4D:9C:2C:4D:99:25:22:D2:A0:D0:42:31:3E
            X509v3 Authority Key Identifier:
                keyid:18:1D:49:68:B5:50:98:19:52:C3:18:30:1A:B2:D4:C1:0F:7F:34:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/323630323a3239363a3132333a3a2f34382d3438203d3e20343030383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:296:123::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:ad:f1:ee:4e:4c:42:1c:65:ac:33:85:ca:63:58:cc:b7:30:
         ac:73:44:49:28:5d:51:af:70:f1:1f:7d:76:e1:d3:29:9e:e2:
         de:34:27:fc:34:0c:6f:b5:08:64:64:fd:b8:a3:27:5d:b8:d7:
         cf:dc:2c:b6:6d:ed:46:cb:ad:23:9d:cc:29:02:f8:40:ac:5a:
         66:c9:86:be:e6:94:66:21:36:ca:db:b8:1d:05:9d:e9:bd:70:
         75:15:5b:2c:30:b0:cd:27:d6:94:a4:57:4e:28:43:d3:b6:b7:
         42:03:eb:d6:3b:f3:55:ea:a9:c1:7c:b5:de:2e:ad:8d:24:1a:
         92:7a:92:82:60:12:b5:73:9d:fa:dc:32:f3:66:40:db:47:7b:
         83:58:cc:cc:dc:3a:ea:a4:16:f8:b5:99:54:5f:88:28:95:c5:
         9e:98:fa:47:94:82:88:4e:02:4a:e1:1f:1b:f2:8c:9c:5b:ba:
         31:26:d3:32:8b:fb:43:2f:a7:08:d4:58:fe:fc:ba:dc:df:8f:
         7c:51:04:c3:48:f9:81:d3:64:50:80:63:f8:23:de:df:26:fd:
         3b:03:ad:94:70:15:ca:5f:d4:50:87:17:3a:f9:6c:e3:91:ec:
         ab:f5:b5:67:6b:aa:00:54:c1:7a:e8:3b:b4:77:04:e3:fd:18:
         55:2f:67:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 04:23:17 2025 by rpki-client