Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3130303a3a2f34382d3438203d3e203137313339.roa
File:                     323630373a666361383a3130303a3a2f34382d3438203d3e203137313339.roa (raw, json)
Hash identifier:          BXwNH5qWJT8UelvTHgKJnYB/AjRd3nga7dSDmGk2yEk=
Subject key identifier:   D3:98:56:C2:0A:46:81:62:24:85:46:51:C6:53:01:2D:B7:20:BA:3F
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       28FC0E7260BCE7927AAB4550430E4389DFE8C3D9
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3130303a3a2f34382d3438203d3e203137313339.roa
Signing time:             Thu 15 May 2025 21:40:13 +0000
ROA not before:           Thu 15 May 2025 21:35:13 +0000
ROA not after:            Thu 14 May 2026 21:40:13 +0000
asID:                     17139
IP address blocks:        2607:fca8:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fc:0e:72:60:bc:e7:92:7a:ab:45:50:43:0e:43:89:df:e8:c3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 15 21:35:13 2025 GMT
            Not After : May 14 21:40:13 2026 GMT
        Subject: CN=D39856C20A46816224854651C653012DB720BA3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f2:a6:3a:22:1c:93:4e:86:d6:92:38:d4:8f:
                    3d:04:0c:73:4b:28:be:40:a7:10:82:1c:2d:33:be:
                    8b:2e:5b:e0:ad:af:23:7b:f3:17:fd:e5:7f:8f:73:
                    3f:ad:64:1f:5a:a7:30:7b:f7:32:de:a4:c2:93:cf:
                    cb:8f:a6:7c:19:88:cc:98:4e:c3:f1:55:fe:00:60:
                    b1:5e:27:fc:e1:18:23:f2:14:60:67:14:19:2e:e7:
                    fd:20:f8:34:52:28:7e:d9:91:ae:a9:cf:5a:66:91:
                    fe:1f:0c:a9:2f:26:aa:e1:c1:84:93:04:f2:63:40:
                    bb:67:91:79:cb:9b:c6:38:b4:3c:d3:96:c6:aa:1f:
                    30:45:27:c0:69:d0:0b:1a:80:bf:83:ea:44:f8:15:
                    bb:42:96:45:d1:a6:70:f3:8f:db:4a:fc:6f:68:fe:
                    e1:f6:a1:df:80:2d:aa:0c:54:7f:94:a9:2b:d8:e6:
                    99:a4:50:c1:21:e9:eb:1b:fe:7d:03:6f:70:27:bd:
                    eb:9b:6f:7f:60:9f:b4:b7:aa:f5:ae:b6:b2:a9:97:
                    10:ce:d7:5f:68:e2:db:31:d5:76:10:5e:f2:e9:40:
                    e4:51:d3:6d:ae:66:76:c3:ec:63:01:ed:5c:cb:11:
                    34:f9:ec:37:c6:b4:89:80:1d:d0:f5:15:26:95:0d:
                    c2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:98:56:C2:0A:46:81:62:24:85:46:51:C6:53:01:2D:B7:20:BA:3F
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3130303a3a2f34382d3438203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fca8:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:39:dc:ce:0c:92:e7:47:e8:b2:34:44:91:7f:6e:59:e0:e4:
         66:54:0b:57:e3:78:a3:23:21:2d:65:e5:bf:93:90:55:cd:66:
         46:5b:01:d2:62:fa:c5:83:91:da:03:82:e7:46:89:a6:ef:04:
         9f:48:26:8d:6b:d4:8a:83:ba:18:ed:72:1e:f5:b6:00:37:10:
         75:9c:49:db:5e:ab:60:bc:bc:00:9a:a2:62:9a:41:8e:c3:be:
         55:1f:5f:85:5e:54:01:90:87:c1:66:4a:88:ca:fe:d9:9c:75:
         34:94:a2:ae:b2:dd:ea:ae:0f:d3:59:f0:72:c1:22:1c:cd:df:
         43:67:d5:3a:d6:b3:5e:7d:ea:b7:52:a9:76:ad:e6:6a:10:db:
         84:2e:4c:e3:02:39:27:49:5a:ee:4f:f7:0d:eb:b0:ef:91:a3:
         60:93:0f:d7:26:c3:ad:ba:6e:3b:95:56:7d:ea:85:71:5b:dd:
         56:4e:e8:fd:bb:a8:1e:c2:f5:b1:66:a1:1c:98:dc:73:c1:f7:
         0c:c2:2f:cd:35:c4:8c:6c:85:59:ae:23:80:08:71:60:5d:9a:
         4f:0d:8f:ac:d7:c9:44:4a:c9:55:6b:b0:b1:cb:27:07:cc:f8:
         dc:5e:80:87:e1:e0:02:e9:e7:db:62:99:91:3f:18:7d:c4:c1:
         49:81:a7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:19:36 2025 by rpki-client