Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a663a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a663a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          /tipXJJXMMszRKOIqCgFZVfbYiLG+aLcMC3+brwzMAs=
Subject key identifier:   38:DF:FE:FD:0A:5E:D6:0C:72:1A:C9:B0:6B:39:95:8A:C3:3F:58:06
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       60B0FCB4304FCF39A0FE1DF1F473F9CC985A16AA
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a663a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 16 Oct 2025 11:36:37 +0000
ROA not before:           Thu 16 Oct 2025 11:31:37 +0000
ROA not after:            Thu 15 Oct 2026 11:36:37 +0000
asID:                     9009
IP address blocks:        2602:fad4:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 17:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b0:fc:b4:30:4f:cf:39:a0:fe:1d:f1:f4:73:f9:cc:98:5a:16:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Oct 16 11:31:37 2025 GMT
            Not After : Oct 15 11:36:37 2026 GMT
        Subject: CN=38DFFEFD0A5ED60C721AC9B06B39958AC33F5806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d2:5a:56:bb:0b:ec:76:da:e0:94:b0:1f:75:
                    8c:3d:e0:bd:ee:ce:f9:0f:e3:58:5e:8e:8a:82:44:
                    6b:a8:af:61:11:b7:e3:6b:32:25:dd:ba:4d:88:48:
                    00:3c:f4:38:3f:ab:d0:fd:70:dd:a4:54:83:a5:09:
                    f6:fa:e5:c8:db:54:f1:03:59:c5:71:ed:a3:25:9f:
                    0e:6b:fb:84:f8:58:bc:57:87:fc:8a:cf:13:4d:46:
                    e4:77:dd:27:e8:3c:4e:da:95:8e:d7:47:ce:1b:0d:
                    ad:36:3f:bf:52:86:e3:fb:79:2a:4d:d5:d7:a0:42:
                    e6:31:66:06:fb:bb:e2:6a:62:3e:44:f5:26:48:21:
                    27:62:b8:63:e3:0d:5b:ac:9a:08:b5:21:4e:60:f6:
                    1c:da:b4:23:2b:59:b6:b4:a5:0e:c8:78:7b:5c:34:
                    20:b4:d0:82:0a:e9:28:4e:50:a4:cc:6b:9d:f8:c7:
                    00:f1:8d:1c:1b:38:ae:0e:0c:2e:93:e6:33:5c:ce:
                    9a:6a:1a:72:70:68:be:e6:2c:78:96:12:0a:0f:3e:
                    c0:dc:56:ab:a0:2d:9e:13:c1:25:ae:a1:6d:69:fb:
                    77:59:3a:7c:f4:50:86:89:fe:df:fc:23:c6:fb:80:
                    ea:c6:b8:38:ae:a8:9e:dd:14:b2:a0:8a:7f:4e:c7:
                    b4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DF:FE:FD:0A:5E:D6:0C:72:1A:C9:B0:6B:39:95:8A:C3:3F:58:06
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a663a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:a6:3c:1e:35:2a:fd:d5:31:b6:81:96:3b:36:a1:27:f8:7a:
         b1:c1:d0:dd:de:c0:6c:6c:2c:92:e8:31:0e:78:bd:21:b6:ff:
         49:00:f5:a6:e2:6a:69:59:d0:78:aa:de:c8:8e:14:b1:8a:e3:
         2b:3b:00:8e:7b:22:d8:f8:24:7c:23:df:76:5c:8a:4f:f4:0e:
         b6:7f:21:a7:5c:b8:6b:3b:73:bb:ab:9a:25:7a:f4:70:c4:d4:
         19:96:c8:00:bb:9f:7a:4f:4e:7a:ce:55:63:87:27:19:8e:dc:
         a8:a2:05:02:c8:8a:3c:40:a3:9b:0e:44:3b:83:90:0e:d0:b4:
         1c:0f:4e:97:ad:b2:a3:15:e9:a9:92:9f:cc:6c:ea:98:36:68:
         8b:bf:5d:6e:21:56:75:ac:28:04:ba:33:c1:62:4c:61:03:73:
         30:88:30:36:c1:e7:ef:dd:9b:78:1d:e3:a2:b4:47:3e:02:68:
         4e:f3:48:1a:ed:3f:1a:cf:52:05:88:65:b2:cf:67:82:b8:c6:
         6b:33:35:26:82:a2:a7:ea:c7:82:73:45:f7:5e:0a:a2:2c:4d:
         3f:2e:84:cf:dc:8a:9f:c5:42:94:98:dc:fb:6a:d8:13:17:ee:
         ba:8a:f8:d3:d2:da:dd:88:34:1e:4d:43:ce:82:ae:f4:58:61:
         0b:6d:e9:85
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgIUYLD8tDBPzzmg/h3x9HP5zJhaFqowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTNlMTM1MjE2YTM3NTU0MGJlNWVmMzQ1MmU2YWEzMmEw
YTAzZWFjNjY3Y2I5ZmU2NGUwHhcNMjUxMDE2MTEzMTM3WhcNMjYxMDE1MTEzNjM3
WjAzMTEwLwYDVQQDEygzOERGRkVGRDBBNUVENjBDNzIxQUM5QjA2QjM5OTU4QUMz
M0Y1ODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9JaVrsL7Hba
4JSwH3WMPeC97s75D+NYXo6KgkRrqK9hEbfjazIl3bpNiEgAPPQ4P6vQ/XDdpFSD
pQn2+uXI21TxA1nFce2jJZ8Oa/uE+Fi8V4f8is8TTUbkd90n6DxO2pWO10fOGw2t
Nj+/Uobj+3kqTdXXoELmMWYG+7viamI+RPUmSCEnYrhj4w1brJoItSFOYPYc2rQj
K1m2tKUOyHh7XDQgtNCCCukoTlCkzGud+McA8Y0cGziuDgwuk+YzXM6aahpycGi+
5ix4lhIKDz7A3FaroC2eE8ElrqFtaft3WTp89FCGif7f/CPG+4Dqxrg4rqie3RSy
oIp/Tse0tQIDAQABo4ICtTCCArEwHQYDVR0OBBYEFDjf/v0KXtYMchrJsGs5lYrD
P1gGMB8GA1UdIwQYMBaAFJB1EYPkO6TqsWr2BLUEHo/+8x3yMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODg5YzNlYWUwMTg4YWZmNjY3MzQwOTRkLzAv
OTA3NTExODNFNDNCQTRFQUIxNkFGNjA0QjUwNDFFOEZGRUYzMURGMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjLzA3NDNlYWNmLWJjNGYtNGM4YS05MTQwLTEzNDdiNmZhNmVlNS9hM2Ux
MzUyMTZhMzc1NTQwYmU1ZWYzNDUyZTZhYTMyYTBhMDNlYWM2NjdjYjlmZTY0ZS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4OWMzZWFlMDE4OGFm
ZjY2NzM0MDk0ZC8wLzMyMzYzMDMyM2E2NjYxNjQzNDNhNjYzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzOTMwMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+tQADzANBgkqhkiG9w0B
AQsFAAOCAQEASqY8HjUq/dUxtoGWOzahJ/h6scHQ3d7AbGwskugxDni9Ibb/SQD1
puJqaVnQeKreyI4UsYrjKzsAjnsi2PgkfCPfdlyKT/QOtn8hp1y4aztzu6uaJXr0
cMTUGZbIALufek9Oes5VY4cnGY7cqKIFAsiKPECjmw5EO4OQDtC0HA9Ol62yoxXp
qZKfzGzqmDZoi79dbiFWdawoBLozwWJMYQNzMIgwNsHn792beB3jorRHPgJoTvNI
Gu0/Gs9SBYhlss9ngrjGazM1JoKip+rHgnNF914KoixNPy6Ez9yKn8VClJjc+2rY
Exfuuor409La3Yg0Hk1DzoKu9FhhC23phQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 07:15:29 2025 by rpki-client