Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/955bf72735874e48af40acc6610a1941/0/323630323a666236373a3a2f34382d3438203d3e20333937323434.roa
File:                     323630323a666236373a3a2f34382d3438203d3e20333937323434.roa (raw, json)
Hash identifier:          rU8r1g4rW9hu8V2KgnRmHJVGvMOPtVIzu5pAjtU8H4Q=
Subject key identifier:   80:EE:6D:B5:3E:02:5F:80:A9:75:7D:FB:12:77:86:5F:BE:04:2D:AB
Certificate issuer:       /CN=79d88309d0c38c1df0c23daa63c621f26b82729dbba8572628
Certificate serial:       0D5D5341CF5E9AD072D0E9652E371DC1429068ED
Authority key identifier: 12:03:77:C4:F4:45:AF:03:58:B3:D5:C8:B6:F1:E7:91:8D:F8:65:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4538806d-1647-4e36-8f5c-ae55c7431632/79d88309d0c38c1df0c23daa63c621f26b82729dbba8572628.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/955bf72735874e48af40acc6610a1941/0/323630323a666236373a3a2f34382d3438203d3e20333937323434.roa
Signing time:             Mon 19 May 2025 19:08:55 +0000
ROA not before:           Mon 19 May 2025 19:03:55 +0000
ROA not after:            Mon 18 May 2026 19:08:55 +0000
asID:                     397244
IP address blocks:        2602:fb67::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/955bf72735874e48af40acc6610a1941/0/120377C4F445AF0358B3D5C8B6F1E7918DF865C0.crl
                          rsync://rpki-rps.arin.net/repository/955bf72735874e48af40acc6610a1941/0/120377C4F445AF0358B3D5C8B6F1E7918DF865C0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4538806d-1647-4e36-8f5c-ae55c7431632/79d88309d0c38c1df0c23daa63c621f26b82729dbba8572628.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4538806d-1647-4e36-8f5c-ae55c7431632/4538806d-1647-4e36-8f5c-ae55c7431632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4538806d-1647-4e36-8f5c-ae55c7431632/4538806d-1647-4e36-8f5c-ae55c7431632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4538806d-1647-4e36-8f5c-ae55c7431632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:5d:53:41:cf:5e:9a:d0:72:d0:e9:65:2e:37:1d:c1:42:90:68:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d88309d0c38c1df0c23daa63c621f26b82729dbba8572628
        Validity
            Not Before: May 19 19:03:55 2025 GMT
            Not After : May 18 19:08:55 2026 GMT
        Subject: CN=80EE6DB53E025F80A9757DFB1277865FBE042DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7d:91:85:32:83:eb:a6:09:8b:c4:ad:52:9d:
                    ab:5b:4e:10:d5:4b:b5:18:d1:dd:40:d2:f8:85:ba:
                    f3:0b:e6:f0:97:f8:d6:66:b7:96:b2:2e:d1:f1:6f:
                    ef:a6:c7:4e:28:cd:08:a3:99:be:ee:e8:f9:10:75:
                    ae:b6:1a:af:c2:65:ca:ef:a0:28:0d:5c:4f:b7:0d:
                    8d:c2:e4:ab:09:4a:3e:58:bb:12:ea:4c:1a:0a:06:
                    13:3d:75:ca:5d:73:d8:a4:9d:3c:ac:01:b2:ab:35:
                    57:56:3f:ec:ed:0f:bf:ec:17:71:bb:a8:b8:cb:ef:
                    51:d4:2f:53:a2:bd:77:6c:4e:a9:34:6e:47:72:dc:
                    fa:bb:94:af:d8:83:68:6c:fa:9e:f5:42:0a:c7:97:
                    c2:5d:df:37:26:6d:83:7d:2e:57:40:28:67:3c:8e:
                    8b:78:ef:3d:9c:75:0f:0c:fc:05:04:75:85:a0:12:
                    e1:c5:80:d4:77:e7:02:38:fc:26:7e:44:ff:64:b1:
                    6e:a9:03:84:99:a6:c9:c8:b8:06:57:a4:56:6b:29:
                    78:6f:cb:78:cb:c3:ff:4b:b6:59:ff:44:38:e7:e8:
                    9f:be:5d:11:6a:6d:db:6e:2a:c2:c6:a4:80:dd:27:
                    e3:d7:7d:c5:5f:04:78:97:fb:1c:04:85:d6:37:65:
                    ac:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EE:6D:B5:3E:02:5F:80:A9:75:7D:FB:12:77:86:5F:BE:04:2D:AB
            X509v3 Authority Key Identifier:
                keyid:12:03:77:C4:F4:45:AF:03:58:B3:D5:C8:B6:F1:E7:91:8D:F8:65:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/955bf72735874e48af40acc6610a1941/0/120377C4F445AF0358B3D5C8B6F1E7918DF865C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4538806d-1647-4e36-8f5c-ae55c7431632/79d88309d0c38c1df0c23daa63c621f26b82729dbba8572628.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/955bf72735874e48af40acc6610a1941/0/323630323a666236373a3a2f34382d3438203d3e20333937323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb67::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:a4:7b:57:11:1f:57:40:3e:16:8e:3a:cc:a5:57:5b:c6:0d:
         3a:eb:e2:cd:16:49:0c:7a:ed:b2:4c:f5:c5:55:ab:68:48:48:
         3d:2d:8c:bd:d7:27:dc:b9:83:8e:b2:8b:79:1f:09:60:d5:4f:
         b5:ca:64:d4:57:18:25:ee:75:54:c2:b0:35:0f:5f:72:e7:53:
         66:97:78:29:95:63:d7:2f:b7:3c:8f:1a:e1:9e:5a:21:de:9a:
         ed:e8:bf:96:4e:1d:c7:b1:eb:fb:40:4e:ad:35:e8:a4:ca:ef:
         60:d8:cf:59:39:69:52:02:11:20:0b:d7:69:d5:06:91:71:36:
         4e:fe:51:50:57:12:7c:e0:b2:c9:2f:5a:e4:30:74:a4:c0:7f:
         2f:47:92:1a:1f:68:1f:03:82:91:4f:a4:f9:af:c7:d8:14:ab:
         8d:8a:33:03:b1:97:91:53:18:93:37:af:19:71:12:3c:48:c1:
         8c:fb:1a:af:48:94:27:82:3d:89:90:38:55:84:c1:8d:fa:ea:
         01:12:7a:dd:07:93:ec:a3:7d:45:68:d8:b7:41:25:b2:29:76:
         22:26:ee:69:67:67:23:b5:80:d4:40:be:58:fe:ab:ee:e6:68:
         54:68:a8:f6:74:1d:8a:20:ca:56:e2:13:ee:e5:6b:01:fe:a1:
         e4:f2:f5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:12:09 2025 by rpki-client