Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a353a3a2f34382d3438203d3e20323039313039.roa
File:                     323630323a663764633a353a3a2f34382d3438203d3e20323039313039.roa (raw, json)
Hash identifier:          eZQ6tbCCPDc4phc14/+QAz9FrpDOnSJoNSoMZI2oDH8=
Subject key identifier:   0A:19:30:D6:C6:75:01:57:12:79:35:7F:E5:6E:AF:5D:15:2B:56:4D
Certificate issuer:       /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial:       19950F04DFD36D31162FB971D85D47FEB0DAE4A6
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a353a3a2f34382d3438203d3e20323039313039.roa
Signing time:             Wed 13 May 2026 14:22:30 +0000
ROA not before:           Wed 13 May 2026 14:17:30 +0000
ROA not after:            Wed 12 May 2027 14:22:30 +0000
asID:                     209109
IP address blocks:        2602:f7dc:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:95:0f:04:df:d3:6d:31:16:2f:b9:71:d8:5d:47:fe:b0:da:e4:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
        Validity
            Not Before: May 13 14:17:30 2026 GMT
            Not After : May 12 14:22:30 2027 GMT
        Subject: CN=0A1930D6C67501571279357FE56EAF5D152B564D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:04:eb:d7:cc:80:4d:5d:7d:3b:57:3c:79:10:
                    f9:e0:f1:03:66:3e:93:45:72:0c:38:22:2a:fb:e4:
                    71:cf:b1:dd:54:ca:d4:0e:9c:d4:cd:ba:39:92:18:
                    72:a9:57:71:3a:d9:1c:c5:f5:82:b5:a8:dc:64:d5:
                    1a:42:0e:19:82:ef:09:a3:2c:cd:94:27:79:87:38:
                    a6:83:ac:31:6d:96:e7:0b:05:ad:9c:8b:6a:59:eb:
                    2b:ba:29:cd:03:b8:3d:be:1f:2b:43:ba:55:73:3f:
                    19:72:1e:af:74:6e:42:3f:bf:4e:b0:8d:ff:21:67:
                    7b:de:c1:9f:43:e4:ed:00:10:a0:bf:18:3a:41:b7:
                    c3:9d:a5:f5:8e:34:6a:f3:34:da:5c:a7:0f:d0:56:
                    66:2e:98:f5:81:48:39:59:9f:9d:64:7d:79:8a:1e:
                    de:02:35:a1:70:4c:43:d1:ae:d9:35:01:ab:85:99:
                    0f:25:41:1d:8a:b5:5b:0e:92:e6:80:fe:36:66:cf:
                    13:5b:14:3c:4e:73:a8:0e:32:25:83:73:e6:56:07:
                    d4:f7:71:26:19:d2:66:3b:5b:14:71:bd:ef:f5:b3:
                    e1:b6:71:65:20:00:3c:5f:16:1f:61:2b:2a:1f:0d:
                    6e:fa:55:b4:2f:e2:5e:34:73:45:64:3f:c4:6d:d8:
                    d8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:19:30:D6:C6:75:01:57:12:79:35:7F:E5:6E:AF:5D:15:2B:56:4D
            X509v3 Authority Key Identifier:
                keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a353a3a2f34382d3438203d3e20323039313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7dc:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:8b:ac:cf:07:2d:bc:e9:fb:20:60:fb:6a:c9:5c:45:9c:ad:
         2b:2e:d2:3c:c8:6e:92:a5:f4:53:b8:fb:ba:bd:6a:8f:be:b6:
         20:40:8f:76:a8:29:31:34:89:cb:7c:bb:45:ce:7c:e1:84:3a:
         29:f9:5b:47:48:b6:17:b2:08:74:d4:7a:18:4d:5e:d9:c6:80:
         ba:de:43:df:e6:5b:54:e5:ca:5a:1c:0b:4a:5b:3c:64:7f:ca:
         55:3a:8b:57:40:cf:ea:ac:03:20:bf:dc:f4:76:81:1c:ce:11:
         0a:89:04:df:ed:95:d5:e3:c1:ef:8e:46:45:4d:31:ac:30:b7:
         5d:cb:44:b0:21:a3:15:2f:4e:b2:2b:bf:fa:e3:2f:9a:0e:f1:
         e6:ce:77:c4:c6:ca:90:b5:b3:68:24:77:9d:3a:10:c1:5f:cf:
         ea:00:20:3f:97:65:87:15:9c:97:01:19:8f:3a:68:88:43:1f:
         27:3b:28:79:68:44:62:ff:f1:59:27:29:e5:12:3d:ff:75:43:
         2b:f1:4f:bd:e9:f4:3d:be:21:e0:3e:a2:40:18:8b:35:db:51:
         d1:00:00:70:2f:e8:a9:80:75:56:48:83:0c:e0:f2:ce:ad:37:
         6d:d9:c2:1b:84:13:d0:9e:5a:f5:28:e3:04:44:ca:7e:64:1c:
         59:f3:f5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:12:16 2026 by rpki-client