Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3730303a3a2f34302d3430203d3e20323037343435.roa
File:                     323630323a663962613a3730303a3a2f34302d3430203d3e20323037343435.roa (raw, json)
Hash identifier:          QieNwj+xpP5tmzhtO59imxUSfj9qjSQIoJUv03F0W3I=
Subject key identifier:   18:30:DA:1B:A8:BA:01:D9:A1:50:ED:E5:12:C7:85:84:52:AA:00:89
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       1B83D47D4DFEB7A113E8A9DFF4F034EA83E50CEF
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3730303a3a2f34302d3430203d3e20323037343435.roa
Signing time:             Wed 17 Jun 2026 09:32:51 +0000
ROA not before:           Wed 17 Jun 2026 09:27:51 +0000
ROA not after:            Wed 16 Jun 2027 09:32:51 +0000
asID:                     207445
IP address blocks:        2602:f9ba:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Jun 2026 09:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:83:d4:7d:4d:fe:b7:a1:13:e8:a9:df:f4:f0:34:ea:83:e5:0c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jun 17 09:27:51 2026 GMT
            Not After : Jun 16 09:32:51 2027 GMT
        Subject: CN=1830DA1BA8BA01D9A150EDE512C7858452AA0089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:73:3a:fe:60:a9:26:b8:0f:82:f8:c7:83:54:
                    10:c8:08:d1:fe:6c:13:b6:d8:bc:81:8d:c4:28:ea:
                    ab:b2:09:e1:38:e2:29:94:61:b7:21:b4:8a:04:6e:
                    6a:ac:5c:de:14:da:d7:71:7e:ae:65:ee:26:d7:c8:
                    5d:78:0d:a5:1f:40:b8:83:9c:f0:ea:9f:a3:de:89:
                    72:07:c0:9d:27:b2:4d:d2:27:a9:fc:3c:cd:10:2b:
                    b8:c7:44:c1:67:8a:98:28:5d:e9:be:ff:11:86:2a:
                    a9:3e:69:2b:64:bf:45:7d:20:eb:4b:d1:c8:e0:9b:
                    c3:b6:16:03:e5:dc:21:f5:57:62:6a:76:31:ce:a4:
                    af:c1:c6:1c:d9:64:2c:04:ed:40:68:00:c7:43:07:
                    6f:00:c4:5c:12:29:69:a3:a7:59:7d:72:ed:a8:ca:
                    ea:39:6d:17:b1:23:53:d4:c0:61:16:5a:a1:c2:7f:
                    bc:1d:97:a5:8f:c0:55:72:13:8e:e0:7b:83:ee:fa:
                    d3:e6:0f:0f:e9:bf:10:b5:41:41:01:e1:34:be:1b:
                    9f:b8:85:a2:77:12:22:0e:96:63:63:53:3a:1f:ee:
                    84:67:ba:5a:ca:9a:30:d8:a7:00:d7:2e:64:dc:3a:
                    71:9e:4d:eb:07:52:8a:d5:59:70:c6:a4:df:1d:4e:
                    44:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:30:DA:1B:A8:BA:01:D9:A1:50:ED:E5:12:C7:85:84:52:AA:00:89
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3730303a3a2f34302d3430203d3e20323037343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:ff:17:c6:bb:58:14:eb:b0:a5:e8:5e:cb:a4:02:dc:3c:bf:
         f2:1e:60:cc:95:c6:4c:f7:5f:a9:30:11:91:40:2c:58:d3:3f:
         98:5b:bc:bc:85:56:08:a3:f1:89:7f:be:ba:fd:7e:6c:f0:ee:
         d6:3d:d9:8f:32:74:14:0e:97:03:6f:74:26:b9:61:ad:ea:eb:
         ec:6c:5d:67:87:c2:11:58:ad:b7:0b:37:1d:b2:ec:0c:e8:7e:
         3c:5a:dc:37:60:12:36:c4:57:03:bc:f9:d9:e9:1f:84:b4:c0:
         5d:67:1d:0a:77:8c:d9:34:e0:69:82:c2:07:40:a9:c5:b8:34:
         88:3b:38:fd:9f:1f:37:64:92:f1:80:5a:e2:8e:3a:6d:d5:0f:
         5a:f9:f1:17:9d:64:d0:13:ee:62:2f:84:74:42:e5:64:95:b3:
         09:e8:28:f6:21:1b:7b:01:39:e7:e4:58:90:34:e9:f6:f3:7d:
         1d:42:a3:4d:e1:8d:8b:0b:cc:56:e6:ae:fe:f5:70:fe:e8:41:
         9f:0b:a1:50:f1:68:5e:19:a2:bb:8e:75:08:08:f2:a8:96:6a:
         08:17:7c:8c:b1:13:26:7f:c3:b8:63:a4:7f:5c:a5:cf:f5:34:
         18:61:75:87:fb:22:7e:c3:12:00:c8:6a:2f:55:c6:1f:99:be:
         39:59:13:79
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUG4PUfU3+t6ET6Knf9PA06oPlDO8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGQ4YTY3MmRkNzk2ZTVhZmQ5NTg3NmU5YjU2ODU2NWFl
ZjJiMGI3NmI4MzgyZWEyMmEwHhcNMjYwNjE3MDkyNzUxWhcNMjcwNjE2MDkzMjUx
WjAzMTEwLwYDVQQDEygxODMwREExQkE4QkEwMUQ5QTE1MEVERTUxMkM3ODU4NDUy
QUEwMDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XM6/mCpJrgP
gvjHg1QQyAjR/mwTtti8gY3EKOqrsgnhOOIplGG3IbSKBG5qrFzeFNrXcX6uZe4m
18hdeA2lH0C4g5zw6p+j3olyB8CdJ7JN0iep/DzNECu4x0TBZ4qYKF3pvv8Rhiqp
PmkrZL9FfSDrS9HI4JvDthYD5dwh9VdianYxzqSvwcYc2WQsBO1AaADHQwdvAMRc
Eilpo6dZfXLtqMrqOW0XsSNT1MBhFlqhwn+8HZelj8BVchOO4HuD7vrT5g8P6b8Q
tUFBAeE0vhufuIWidxIiDpZjY1M6H+6EZ7paypow2KcA1y5k3Dpxnk3rB1KK1Vlw
xqTfHU5E6QIDAQABo4ICvDCCArgwHQYDVR0OBBYEFBgw2huougHZoVDt5RLHhYRS
qgCJMB8GA1UdIwQYMBaAFHa/RHyTUISUnbBG/3c4seV8gk/5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzlhNjg5NjRmNWZmNjQwZWJhZDEwMGRlZWE3YzliYTQ2LzEv
NzZCRjQ0N0M5MzUwODQ5NDlEQjA0NkZGNzczOEIxRTU3QzgyNEZGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzhkMzdhMDcyLTE1YWUtNDkwNS04MTBlLTk5MWZjNjIwMWI0NS84ZDhh
NjcyZGQ3OTZlNWFmZDk1ODc2ZTliNTY4NTY1YWVmMmIwYjc2YjgzODJlYTIyYS5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS85YTY4OTY0ZjVmZjY0MGViYWQxMDBk
ZWVhN2M5YmE0Ni8xLzMyMzYzMDMyM2E2NjM5NjI2MTNhMzczMDMwM2EzYTJmMzQz
MDJkMzQzMDIwM2QzZTIwMzIzMDM3MzQzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5ugcwDQYJ
KoZIhvcNAQELBQADggEBAF7/F8a7WBTrsKXoXsukAtw8v/IeYMyVxkz3X6kwEZFA
LFjTP5hbvLyFVgij8Yl/vrr9fmzw7tY92Y8ydBQOlwNvdCa5Ya3q6+xsXWeHwhFY
rbcLNx2y7Azofjxa3DdgEjbEVwO8+dnpH4S0wF1nHQp3jNk04GmCwgdAqcW4NIg7
OP2fHzdkkvGAWuKOOm3VD1r58RedZNAT7mIvhHRC5WSVswnoKPYhG3sBOefkWJA0
6fbzfR1Co03hjYsLzFbmrv71cP7oQZ8LoVDxaF4ZoruOdQgI8qiWaggXfIyxEyZ/
w7hjpH9cpc/1NBhhdYf7In7DEgDIai9Vxh+ZvjlZE3k=
-----END CERTIFICATE-----
Generated at Sat Jun 20 17:27:13 2026 by rpki-client