Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/323630323a663530643a3364623a3a2f34382d3438203d3e203133333137.roa
File:                     323630323a663530643a3364623a3a2f34382d3438203d3e203133333137.roa (raw, json)
Hash identifier:          2dGI/93b4YEeQ7UtwA8c+AmRE9PsHoAoItJM3VrTJqA=
Subject key identifier:   36:0C:2F:AB:58:D3:9A:37:B3:CF:E3:EB:7F:A9:9B:6A:75:DA:C2:C3
Certificate issuer:       /CN=ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd
Certificate serial:       634673FA6161DB8A6123AB96E439BDA1794B91BA
Authority key identifier: C9:A1:12:F9:4A:FC:5E:89:00:CD:D8:B9:E7:50:8E:96:A8:65:F9:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/323630323a663530643a3364623a3a2f34382d3438203d3e203133333137.roa
Signing time:             Fri 02 Oct 2026 06:00:09 +0000
ROA not before:           Fri 02 Oct 2026 05:55:09 +0000
ROA not after:            Fri 01 Oct 2027 06:00:09 +0000
asID:                     13317
IP address blocks:        2602:f50d:3db::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/26d1481e-4825-43d7-9d68-440e85e92eed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/26d1481e-4825-43d7-9d68-440e85e92eed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 07:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:46:73:fa:61:61:db:8a:61:23:ab:96:e4:39:bd:a1:79:4b:91:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd
        Validity
            Not Before: Oct  2 05:55:09 2026 GMT
            Not After : Oct  1 06:00:09 2027 GMT
        Subject: CN=360C2FAB58D39A37B3CFE3EB7FA99B6A75DAC2C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:fb:92:dc:0c:ba:97:41:40:51:be:fd:c4:
                    36:e1:32:76:7a:12:66:5c:da:e4:2e:f8:20:94:f5:
                    f4:dc:32:a7:12:af:5b:85:e9:99:81:62:2c:43:23:
                    88:3c:ef:6c:67:d3:71:9a:71:11:50:cf:c0:1c:af:
                    ea:f6:54:a7:57:20:70:d9:24:02:34:04:5c:9d:13:
                    88:e1:39:7a:19:5b:94:72:59:b9:33:f3:a5:78:e5:
                    be:08:66:35:50:fe:ce:56:86:a4:b5:20:ee:45:5e:
                    2b:5e:2a:d5:dc:97:af:b2:28:a3:2c:63:b8:24:98:
                    d9:32:b0:7a:ec:cb:c3:11:c8:98:a2:35:d9:87:a9:
                    34:da:8f:65:38:97:56:34:5b:db:80:32:2c:d1:2c:
                    d1:e5:40:18:e3:58:11:af:ef:9a:e8:c9:59:6b:21:
                    83:9b:89:1a:21:67:33:f2:c3:d6:37:16:d0:37:83:
                    d4:85:c1:76:0c:6f:fd:77:63:ea:21:84:5c:e4:fc:
                    fa:d1:62:b5:67:d9:ac:94:60:42:b7:a3:df:0b:6e:
                    fc:2e:96:de:4c:dd:92:58:e8:4c:e1:f2:55:f1:a8:
                    8d:35:7b:71:6e:8c:05:fb:33:22:35:09:b3:6b:fb:
                    c8:20:0e:45:2a:e4:15:10:89:01:36:bd:86:74:24:
                    7e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0C:2F:AB:58:D3:9A:37:B3:CF:E3:EB:7F:A9:9B:6A:75:DA:C2:C3
            X509v3 Authority Key Identifier:
                keyid:C9:A1:12:F9:4A:FC:5E:89:00:CD:D8:B9:E7:50:8E:96:A8:65:F9:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/323630323a663530643a3364623a3a2f34382d3438203d3e203133333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f50d:3db::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:b1:3d:f8:5b:99:36:5a:11:91:be:93:70:19:29:82:d6:c9:
         ca:28:6b:1e:7d:d1:3f:88:b7:51:96:73:3e:c6:ca:8a:b0:44:
         3a:73:dc:2c:8e:46:e4:e8:3f:7b:82:0d:ba:0f:21:56:01:ed:
         0a:08:27:4c:54:1b:2e:47:91:cb:61:da:1c:37:49:70:e2:41:
         97:f9:7c:e3:24:5c:44:57:f1:73:f3:cc:b8:0b:dc:2c:09:7e:
         dd:8e:f4:a7:5d:b3:0c:01:93:0b:bb:1e:7b:24:f7:40:88:63:
         d1:45:92:68:23:a3:10:d1:66:7c:64:d2:38:d7:2e:51:73:10:
         d0:88:5a:5e:32:53:85:55:74:92:aa:ec:3f:ca:26:d1:a5:10:
         86:9a:16:28:4a:79:c4:9f:ad:e8:f2:46:ee:32:a9:c1:fe:e5:
         5c:f5:35:46:5b:ba:a6:13:b3:70:1d:e5:cf:85:4a:6c:67:f1:
         3d:3a:f7:ae:27:75:29:3a:53:c1:3c:4b:b6:1a:c2:fe:78:73:
         1a:e7:f4:82:4c:15:d4:07:63:0c:04:d1:e8:22:e7:64:19:88:
         a0:35:11:ca:4f:8b:72:1d:43:7a:cb:15:a9:f3:c6:99:ee:d4:
         38:b9:d0:f5:58:b2:c0:94:57:fd:a0:e4:d2:66:4a:5b:ee:d3:
         51:d4:08:fe
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUY0Zz+mFh24phI6uW5Dm9oXlLkbowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGRjMjg4Nzc2ODY4MDdkY2MzNGEwYWU1NzQzZDMwZmFk
M2FkZmFjOGIwNTVlNmQyZGQwHhcNMjYxMDAyMDU1NTA5WhcNMjcxMDAxMDYwMDA5
WjAzMTEwLwYDVQQDEygzNjBDMkZBQjU4RDM5QTM3QjNDRkUzRUI3RkE5OUI2QTc1
REFDMkMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTX7ktwMupdB
QFG+/cQ24TJ2ehJmXNrkLvgglPX03DKnEq9bhemZgWIsQyOIPO9sZ9NxmnERUM/A
HK/q9lSnVyBw2SQCNARcnROI4Tl6GVuUclm5M/OleOW+CGY1UP7OVoaktSDuRV4r
XirV3JevsiijLGO4JJjZMrB67MvDEciYojXZh6k02o9lOJdWNFvbgDIs0SzR5UAY
41gRr++a6MlZayGDm4kaIWcz8sPWNxbQN4PUhcF2DG/9d2PqIYRc5Pz60WK1Z9ms
lGBCt6PfC278LpbeTN2SWOhM4fJV8aiNNXtxbowF+zMiNQmza/vIIA5FKuQVEIkB
Nr2GdCR+zwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFDYML6tY05o3s8/j63+pm2p1
2sLDMB8GA1UdIwQYMBaAFMmhEvlK/F6JAM3YuedQjpaoZfkNMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODcyODk4ODgwMTg3NjAyYTUwYTAzOTEwLzEv
QzlBMTEyRjk0QUZDNUU4OTAwQ0REOEI5RTc1MDhFOTZBODY1RjkwRC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDll
ZjFiNGUyLzI2ZDE0ODFlLTQ4MjUtNDNkNy05ZDY4LTQ0MGU4NWU5MmVlZC9kZGMy
ODg3NzY4NjgwN2RjYzM0YTBhZTU3NDNkMzBmYWQzYWRmYWM4YjA1NWU2ZDJkZC5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg3Mjg5ODg4MDE4NzYw
MmE1MGEwMzkxMC8xLzMyMzYzMDMyM2E2NjM1MzA2NDNhMzM2NDYyM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzEzMzMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC9Q0D2zANBgkq
hkiG9w0BAQsFAAOCAQEASLE9+FuZNloRkb6TcBkpgtbJyihrHn3RP4i3UZZzPsbK
irBEOnPcLI5G5Og/e4INug8hVgHtCggnTFQbLkeRy2HaHDdJcOJBl/l84yRcRFfx
c/PMuAvcLAl+3Y70p12zDAGTC7seeyT3QIhj0UWSaCOjENFmfGTSONcuUXMQ0Iha
XjJThVV0kqrsP8om0aUQhpoWKEp5xJ+t6PJG7jKpwf7lXPU1Rlu6phOzcB3lz4VK
bGfxPTr3rid1KTpTwTxLthrC/nhzGuf0gkwV1AdjDATR6CLnZBmIoDURyk+Lch1D
essVqfPGme7UOLnQ9ViywJRX/aDk0mZKW+7TUdQI/g==
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:05:35 2026 by rpki-client