Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/323630323a663530643a3430303a3a2f34342d3438203d3e20333933383535.roa
File:                     323630323a663530643a3430303a3a2f34342d3438203d3e20333933383535.roa (raw, json)
Hash identifier:          Pi2YzsI0wJtVNt4bjm0aK8XzgkYm8BNA+EO8lQEULUQ=
Subject key identifier:   5C:94:FC:72:C5:47:9D:6E:1C:EE:BA:15:C8:F2:49:DF:F5:3C:80:38
Certificate issuer:       /CN=ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd
Certificate serial:       1EC5072761AAEA78139CA26F0A899AB60C3168BF
Authority key identifier: C9:A1:12:F9:4A:FC:5E:89:00:CD:D8:B9:E7:50:8E:96:A8:65:F9:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/323630323a663530643a3430303a3a2f34342d3438203d3e20333933383535.roa
Signing time:             Sat 20 Jun 2026 09:50:37 +0000
ROA not before:           Sat 20 Jun 2026 09:45:37 +0000
ROA not after:            Sat 19 Jun 2027 09:50:37 +0000
asID:                     393855
IP address blocks:        2602:f50d:400::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/26d1481e-4825-43d7-9d68-440e85e92eed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/26d1481e-4825-43d7-9d68-440e85e92eed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Jul 2026 22:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c5:07:27:61:aa:ea:78:13:9c:a2:6f:0a:89:9a:b6:0c:31:68:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd
        Validity
            Not Before: Jun 20 09:45:37 2026 GMT
            Not After : Jun 19 09:50:37 2027 GMT
        Subject: CN=5C94FC72C5479D6E1CEEBA15C8F249DFF53C8038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:12:c6:5b:07:88:00:b7:97:92:89:56:47:
                    8c:96:dd:f4:12:0d:92:53:37:d7:05:56:54:41:47:
                    32:be:a0:94:6b:f3:ec:94:60:87:de:cb:24:c9:b3:
                    fe:f4:23:11:cf:09:08:85:57:57:22:bb:be:66:44:
                    32:9a:17:30:2d:d6:69:73:d1:64:cf:4d:1e:3e:d9:
                    05:34:b2:ba:f3:72:54:3d:40:fe:ca:09:c9:9a:67:
                    2f:f0:38:64:d7:82:c7:64:05:aa:ab:a7:6e:65:c8:
                    38:a1:cd:0e:fa:a3:82:0a:a6:ac:be:6d:5c:6c:47:
                    cc:a6:fb:46:d6:7f:a0:62:78:fa:41:b7:5c:b0:de:
                    24:24:c7:c0:0f:6e:6b:08:93:df:ee:94:8f:37:02:
                    c3:70:f2:0e:08:f1:fb:bd:87:b1:5d:e7:bf:fb:03:
                    23:48:94:6f:5a:d9:4c:c2:1f:b9:95:97:54:9e:f2:
                    cc:f3:2e:4b:dd:4e:fe:0f:b0:10:bc:f8:d9:27:49:
                    30:aa:fb:20:27:9b:2b:ee:ec:0c:a8:b3:f4:63:45:
                    00:71:44:b7:52:ae:99:99:d4:26:bb:60:93:22:2f:
                    03:a2:84:a0:f0:99:19:c6:aa:d6:ea:d3:ea:d6:40:
                    c8:6b:16:4d:7b:ec:5c:e3:8f:d1:c3:32:76:84:5e:
                    15:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:94:FC:72:C5:47:9D:6E:1C:EE:BA:15:C8:F2:49:DF:F5:3C:80:38
            X509v3 Authority Key Identifier:
                keyid:C9:A1:12:F9:4A:FC:5E:89:00:CD:D8:B9:E7:50:8E:96:A8:65:F9:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/323630323a663530643a3430303a3a2f34342d3438203d3e20333933383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f50d:400::/44

    Signature Algorithm: sha256WithRSAEncryption
         56:ea:e0:08:50:9a:d8:ce:42:a6:83:2f:ce:1b:dc:b9:33:49:
         01:12:1e:11:c9:14:75:a9:9a:6b:fe:09:e8:b6:df:bf:fd:7f:
         6c:fa:90:ed:ff:6b:b5:89:72:d4:4b:f9:04:c8:16:e7:01:4e:
         bf:c6:8f:73:ec:90:b6:a2:43:eb:52:cb:be:1e:f0:ce:78:f5:
         52:5d:0d:d2:9a:07:8a:78:f3:e9:97:d8:c0:84:2c:54:d9:03:
         12:79:61:22:83:26:57:fe:a9:6e:d4:5c:29:40:ee:f3:fd:ec:
         a5:a7:c7:d6:74:e1:05:6b:f6:1d:fd:76:83:49:a0:0a:f6:87:
         3d:1e:b8:06:98:20:7b:7d:89:64:ac:1e:62:a5:d3:c6:46:c9:
         d7:38:e7:cc:ac:8c:b3:df:2f:15:22:17:ea:2a:0e:3e:98:18:
         00:b3:ac:e7:c8:70:82:c0:9e:25:79:59:90:c0:9f:0b:7b:96:
         44:06:56:e6:83:be:cd:3c:7e:66:f6:e2:c9:8a:dc:5b:a2:f7:
         91:6f:63:88:b3:ad:29:4b:3d:e8:55:54:97:1a:ec:28:68:8b:
         37:8a:ef:89:61:07:d3:a6:d2:ee:2f:00:01:2b:4f:c7:7b:6a:
         e6:1b:62:ea:a6:e4:f3:56:96:e4:6a:fd:be:9a:8a:08:31:c4:
         2f:60:cf:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 04:17:26 2026 by rpki-client