Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a3a2f33362d3438203d3e203134343437.roa
File:                     323630323a663631333a3a2f33362d3438203d3e203134343437.roa (raw, json)
Hash identifier:          RJQBa6gE8F80ZBpAyW3BWvQS8UUGyeZr7lncv/8uqcc=
Subject key identifier:   B1:F3:B1:DE:D6:5A:38:22:48:4F:7C:57:F3:BE:B7:53:EA:69:C7:7E
Certificate issuer:       /CN=5d9371e706db917120354ce162e131307448d445d3bda534e4
Certificate serial:       1D41A0ED8D15299E54ADD5C2085223295E06734B
Authority key identifier: 31:8A:31:E0:F9:B2:FD:58:4D:99:4E:84:8E:7E:81:7C:CC:91:52:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a3a2f33362d3438203d3e203134343437.roa
Signing time:             Wed 20 May 2026 18:24:51 +0000
ROA not before:           Wed 20 May 2026 18:19:51 +0000
ROA not after:            Wed 19 May 2027 18:24:51 +0000
asID:                     14447
IP address blocks:        2602:f613::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/15838c48-cf11-45c4-8e0b-0455f2640cd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/15838c48-cf11-45c4-8e0b-0455f2640cd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 05:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:41:a0:ed:8d:15:29:9e:54:ad:d5:c2:08:52:23:29:5e:06:73:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9371e706db917120354ce162e131307448d445d3bda534e4
        Validity
            Not Before: May 20 18:19:51 2026 GMT
            Not After : May 19 18:24:51 2027 GMT
        Subject: CN=B1F3B1DED65A3822484F7C57F3BEB753EA69C77E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:83:79:a3:27:4b:2c:b3:de:68:82:bb:98:f9:
                    fb:46:22:c4:33:58:12:53:50:b1:85:46:da:1c:d5:
                    80:0d:a5:93:be:f7:ce:8b:55:88:b4:29:d1:f0:d7:
                    19:61:7e:e9:df:fc:3a:bd:d7:49:5b:18:0e:db:a7:
                    af:41:b6:20:7d:9d:06:49:f7:a2:b8:88:dc:83:0b:
                    7e:85:83:30:a0:09:05:a3:86:68:56:e0:48:7f:13:
                    91:20:59:e3:ac:64:f8:23:16:27:2b:78:02:cf:4c:
                    d7:1c:76:32:a1:5d:88:d0:f4:8f:57:2d:bb:31:d8:
                    79:ae:35:4e:df:84:94:2a:22:e5:72:3c:8a:3c:69:
                    bf:0b:f0:19:41:b2:e2:a1:06:d5:e6:bd:f7:69:13:
                    c7:ac:44:d3:9a:17:46:cd:f9:d0:11:18:a3:ae:52:
                    af:11:1c:49:74:dc:68:49:82:b7:18:d4:38:06:25:
                    0e:05:a4:aa:82:28:ff:b9:2c:d5:42:84:63:60:7b:
                    eb:48:51:69:72:de:11:05:78:f1:72:61:8a:e9:bc:
                    85:31:19:11:77:2c:81:4e:52:ec:34:2f:9b:35:d3:
                    d1:c4:9b:6e:8f:3f:bb:12:a2:b1:2c:1a:4a:78:a9:
                    fb:75:11:9d:f4:38:23:e2:08:df:70:da:1c:fb:98:
                    32:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F3:B1:DE:D6:5A:38:22:48:4F:7C:57:F3:BE:B7:53:EA:69:C7:7E
            X509v3 Authority Key Identifier:
                keyid:31:8A:31:E0:F9:B2:FD:58:4D:99:4E:84:8E:7E:81:7C:CC:91:52:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a3a2f33362d3438203d3e203134343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f613::/36

    Signature Algorithm: sha256WithRSAEncryption
         87:a9:74:a4:31:7c:1a:32:04:c2:72:c9:49:12:67:0f:04:0a:
         96:47:c7:8c:46:25:86:71:99:5c:6f:80:7a:19:91:f0:fc:c1:
         4c:19:c5:3c:0f:85:71:69:c8:fa:a0:de:15:96:22:aa:78:fe:
         56:f7:27:2d:5b:85:ae:ac:2c:25:75:8f:01:69:c0:71:80:3d:
         04:33:d0:a6:c0:c8:68:49:df:ce:2e:25:71:88:cc:e1:44:d1:
         91:0e:a5:aa:a1:a0:75:85:e7:c1:6e:3a:ac:54:06:af:01:a9:
         42:5f:ee:cb:ba:42:b3:3b:35:83:9c:c3:e3:3f:fe:a3:c7:e7:
         28:36:a4:6f:2b:f0:cc:05:1f:24:ce:8d:cb:22:ff:e6:f4:d2:
         7c:74:39:0d:b3:21:1f:ed:9c:d6:5d:9e:72:98:c2:c7:bd:e0:
         61:c5:6c:76:5d:fe:40:c4:27:b4:51:e5:fc:00:8e:b7:10:56:
         d7:89:34:71:81:f8:9b:ed:73:31:6a:76:7d:df:8c:85:b8:0c:
         ee:76:b2:49:c3:8c:08:f0:8f:c7:06:c8:62:4f:ad:6f:fa:ac:
         b9:1b:05:ae:36:c5:ab:87:d6:f8:a4:48:61:dd:87:32:11:6a:
         78:81:64:78:0a:64:d6:4c:38:c9:b7:a9:0a:33:ab:42:31:a8:
         a8:f2:ed:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:19:49 2026 by rpki-client