Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a323a3a2f34382d3438203d3e20323136333234.roa
File:                     323630323a663764633a323a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          0u3UWWALUmy05RiIwi4ljMuJBV58Fg/xzojiBehqtDY=
Subject key identifier:   96:49:D6:99:2A:25:37:18:43:05:61:BD:88:DD:C4:F0:6E:7C:B7:48
Certificate issuer:       /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial:       331DD69E8BE94B670A4DE671FB0016F4222DF1CD
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a323a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Wed 04 Jun 2025 13:40:52 +0000
ROA not before:           Wed 04 Jun 2025 13:35:52 +0000
ROA not after:            Wed 03 Jun 2026 13:40:52 +0000
asID:                     216324
IP address blocks:        2602:f7dc:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 11:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1d:d6:9e:8b:e9:4b:67:0a:4d:e6:71:fb:00:16:f4:22:2d:f1:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
        Validity
            Not Before: Jun  4 13:35:52 2025 GMT
            Not After : Jun  3 13:40:52 2026 GMT
        Subject: CN=9649D6992A253718430561BD88DDC4F06E7CB748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:59:5e:6d:59:31:ff:69:47:08:8b:97:df:09:
                    bd:17:76:ef:db:e5:37:f6:d4:b5:d8:0c:6f:dc:a4:
                    66:c4:e6:54:ec:2c:ac:7f:02:e7:66:55:2e:6e:2a:
                    fc:ca:3b:95:99:f3:f7:51:34:3e:f4:e5:f8:69:49:
                    ce:34:8b:f6:56:22:aa:37:2f:f4:57:11:28:26:86:
                    84:94:d2:60:28:64:ef:8d:f5:94:57:62:39:12:75:
                    23:a0:02:d4:1a:0c:19:77:48:7c:c9:99:a9:cd:1d:
                    78:7d:21:47:f3:ce:90:a7:06:ae:30:c9:3a:0d:09:
                    aa:03:c1:03:58:44:dd:e8:95:2c:fa:a2:5f:6a:15:
                    29:cd:dc:09:5b:6d:29:b6:82:9d:32:fc:9c:30:42:
                    ca:80:d9:3a:1c:67:9d:0f:cb:2e:eb:dd:e5:96:42:
                    b3:1f:90:f0:54:82:43:c3:a0:2a:cf:b7:0b:e7:f2:
                    43:00:89:5d:d5:77:48:8a:f5:a1:40:b8:ec:db:eb:
                    6b:51:da:8b:5f:07:d6:a9:0c:96:cb:5f:ea:88:81:
                    0b:79:11:c3:08:26:3f:c1:da:c7:15:e5:92:48:e3:
                    f8:8b:8d:ae:6e:34:44:47:42:f8:ff:56:ea:3d:12:
                    6e:c1:a9:a5:22:f0:b9:50:07:14:c6:f6:5f:02:88:
                    46:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:49:D6:99:2A:25:37:18:43:05:61:BD:88:DD:C4:F0:6E:7C:B7:48
            X509v3 Authority Key Identifier:
                keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a323a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7dc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:76:f2:b0:45:b1:b1:c3:e6:14:f1:3c:28:a1:9c:84:00:18:
         84:90:e2:76:df:ee:4c:80:4b:6e:a2:b6:8c:36:e8:a7:ba:59:
         47:0b:b4:7b:f1:0d:72:0c:52:15:e1:8b:e9:61:61:e6:ef:03:
         0a:79:7c:fa:af:6c:f6:85:62:f2:05:a4:c7:ac:61:a4:69:26:
         c9:f2:44:e0:13:a0:29:33:dc:60:fd:43:16:d6:15:e4:1a:d0:
         ae:cf:e8:76:17:fe:de:fe:25:89:2d:ea:08:f5:26:1b:d2:22:
         71:8a:c7:17:60:f8:12:f7:20:d3:81:4c:08:cf:d1:40:30:6a:
         29:e3:15:c0:bf:22:16:35:52:1f:3c:53:8e:69:b2:ba:5d:19:
         e3:55:e5:6f:23:02:ce:3e:a7:33:c5:b2:e9:75:f7:23:4d:32:
         d5:a9:3c:5d:62:18:6d:6a:88:4a:07:64:90:c7:c5:23:b7:a1:
         50:20:a4:0f:50:1b:77:75:a1:e6:f4:cb:9a:38:a3:e3:4c:f3:
         2e:eb:77:0b:ff:97:12:62:3d:7f:ef:82:4e:9e:09:b8:fa:14:
         40:46:df:3c:11:b9:b3:ae:d9:f4:04:c8:27:7f:47:8a:ce:20:
         7a:12:cc:76:6b:46:98:76:6d:53:47:74:3c:e2:47:c6:c7:0d:
         84:22:8a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:52:26 2025 by rpki-client