Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61393a3a2f34382d3438203d3e203439383637.roa
File:                     323630323a663962613a61393a3a2f34382d3438203d3e203439383637.roa (raw, json)
Hash identifier:          EwWWWtnv0uoQM53MpIwlgQV3yvmGZLQNpeH0dMI3uwY=
Subject key identifier:   80:5E:18:3C:91:36:09:C6:D3:AE:F1:9F:EA:3D:3F:0B:4C:5E:D0:6F
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       5DB90BCC4A50E0095ADC7C87F44B4FC40BADA2DB
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61393a3a2f34382d3438203d3e203439383637.roa
Signing time:             Wed 17 Jun 2026 09:32:55 +0000
ROA not before:           Wed 17 Jun 2026 09:27:55 +0000
ROA not after:            Wed 16 Jun 2027 09:32:55 +0000
asID:                     49867
IP address blocks:        2602:f9ba:a9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Jun 2026 09:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b9:0b:cc:4a:50:e0:09:5a:dc:7c:87:f4:4b:4f:c4:0b:ad:a2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jun 17 09:27:55 2026 GMT
            Not After : Jun 16 09:32:55 2027 GMT
        Subject: CN=805E183C913609C6D3AEF19FEA3D3F0B4C5ED06F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f1:ac:4e:88:e5:ca:ed:4b:b9:9c:86:a1:4f:
                    16:f2:27:e5:4e:48:02:ff:f6:f2:ab:da:2d:dc:55:
                    5f:6d:dd:cc:eb:70:6f:e0:47:70:47:97:c1:ab:88:
                    56:fa:7a:53:04:63:e4:80:da:f0:2e:e8:43:ab:24:
                    67:6c:8e:15:cd:ab:b0:82:b6:e7:b6:ae:5c:7a:be:
                    61:a7:85:fe:cc:c8:b3:6b:2f:a9:3b:07:5e:32:d9:
                    5f:69:b0:aa:0b:9e:d2:28:c4:65:27:26:ce:67:2f:
                    20:fa:2b:31:69:7c:43:7b:01:d2:6b:9c:69:7c:f1:
                    db:b2:c0:20:e7:58:9b:f2:36:fa:34:07:c7:a3:0c:
                    35:4a:c7:7c:2e:50:cf:e9:0b:3e:5d:b8:a4:f3:29:
                    3d:6c:71:5f:91:02:e4:86:62:89:82:6d:cd:3f:1c:
                    3f:a8:c9:92:65:e5:c7:1c:2d:0c:08:a7:91:d0:fc:
                    34:32:39:cb:0d:99:87:ff:19:71:30:93:2a:f9:12:
                    fe:d6:2d:36:c5:38:44:99:f3:46:81:81:f7:d5:f4:
                    be:4a:da:89:cf:cb:ed:8b:d2:e6:0d:82:6d:79:53:
                    fa:42:06:a6:71:79:de:3b:eb:3f:3a:a1:b6:9d:d2:
                    de:8c:fb:85:99:6c:8e:64:bf:5b:2b:8d:f8:8e:78:
                    56:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5E:18:3C:91:36:09:C6:D3:AE:F1:9F:EA:3D:3F:0B:4C:5E:D0:6F
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61393a3a2f34382d3438203d3e203439383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:a9::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:05:26:53:ef:2e:28:89:a2:1c:50:81:35:d5:66:d5:72:12:
         0c:b2:85:29:a5:98:2a:17:0a:28:29:00:05:f9:d8:cd:4f:ce:
         63:18:40:f9:a5:f5:5c:09:c8:27:d1:06:6c:f5:17:81:16:d3:
         b1:c4:32:d1:8b:25:57:e5:a1:b4:10:24:6f:dd:4c:cc:c6:5e:
         66:a6:0c:34:36:d0:f5:c1:8e:48:cc:5a:5d:60:15:a6:88:39:
         0f:f2:c7:4f:3a:f4:08:76:61:b5:fb:31:1f:42:e9:a7:8b:ee:
         69:d4:f7:1c:5f:1f:a4:75:85:ed:e9:44:e9:cd:da:39:4e:d8:
         7d:ba:68:f5:20:24:e5:93:ac:96:d8:f6:52:b1:09:af:cb:01:
         a7:4b:d5:77:3e:db:e4:b9:f0:bd:4a:e0:22:fe:ff:01:f7:85:
         1b:77:36:b6:bf:d6:b9:57:a8:8a:5e:2a:24:a6:64:10:3d:b5:
         9a:f3:9f:2d:91:db:96:ae:ce:2e:26:46:b2:e0:bf:72:d1:af:
         4a:f9:47:86:d6:40:b2:fa:3a:40:93:e0:d0:12:12:6e:e0:79:
         89:27:65:6f:9e:59:17:e0:1f:8b:d1:38:4c:44:38:d6:8a:51:
         1f:19:94:55:34:19:24:62:ae:33:55:0c:c3:62:72:4d:36:1e:
         e1:fb:32:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 17:26:06 2026 by rpki-client