Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61613a3a2f34382d3438203d3e203139333330.roa
File:                     323630323a663962613a61613a3a2f34382d3438203d3e203139333330.roa (raw, json)
Hash identifier:          YS6UEkRmTJOdtzZwZILwdARD214H9LlcIzMsXqQHOCY=
Subject key identifier:   AE:50:30:74:26:1C:9A:57:2F:7E:10:81:37:37:85:43:25:F1:94:6A
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       30567BAB3A155CF5DD264C9A6C42F5B05DAAFD4D
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61613a3a2f34382d3438203d3e203139333330.roa
Signing time:             Wed 17 Jun 2026 09:32:54 +0000
ROA not before:           Wed 17 Jun 2026 09:27:54 +0000
ROA not after:            Wed 16 Jun 2027 09:32:54 +0000
asID:                     19330
IP address blocks:        2602:f9ba:aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Jun 2026 09:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:56:7b:ab:3a:15:5c:f5:dd:26:4c:9a:6c:42:f5:b0:5d:aa:fd:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jun 17 09:27:54 2026 GMT
            Not After : Jun 16 09:32:54 2027 GMT
        Subject: CN=AE503074261C9A572F7E10813737854325F1946A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1b:b6:db:a5:cd:30:30:29:9d:94:78:e5:a4:
                    eb:95:e6:45:03:a7:4b:a5:7d:5c:8a:4b:ed:04:44:
                    c7:55:8d:8a:de:53:53:75:ba:f0:bf:e8:1d:ac:a5:
                    81:84:cc:6a:9a:bc:23:00:5f:34:0e:0a:09:5d:37:
                    0a:4d:1d:6f:e3:41:2c:df:89:f8:0e:85:d3:11:f4:
                    62:a8:1a:b4:96:9a:ea:6a:ae:99:c8:77:72:dc:d8:
                    33:9c:ac:86:a2:25:a1:cc:92:78:d7:d0:04:92:e4:
                    2f:bf:20:62:80:10:49:8a:79:6e:d0:43:06:9a:6d:
                    81:95:4d:6a:82:a6:ef:96:01:15:7f:93:97:75:86:
                    8a:98:fd:96:b3:4e:32:ac:7f:6f:b4:7a:dd:b5:ca:
                    04:5d:57:19:9f:07:76:5e:8b:3e:83:1f:25:0d:7a:
                    dd:c5:7b:0c:73:77:3c:92:1e:71:a2:02:f3:71:8f:
                    7a:66:7f:8a:76:9f:aa:10:29:3f:e7:43:50:2e:c5:
                    7b:98:ea:06:93:46:e5:bd:cb:a7:fb:0e:4d:ab:29:
                    74:51:ac:c4:11:ec:5c:28:02:d1:22:c7:a7:c0:ac:
                    47:d9:41:f2:e9:b2:20:34:65:cb:dc:81:26:1a:a3:
                    a7:09:c7:ee:89:63:b5:5a:95:9b:fb:87:ef:be:21:
                    f2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:50:30:74:26:1C:9A:57:2F:7E:10:81:37:37:85:43:25:F1:94:6A
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61613a3a2f34382d3438203d3e203139333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:b9:e6:3f:6f:53:00:df:2e:c8:8d:af:5b:ad:bd:c5:66:1e:
         7f:bf:b3:ed:53:1b:d9:65:1a:69:0f:31:fe:bd:ec:66:cb:c9:
         fe:8c:51:8d:0c:60:7d:9e:3d:b9:b3:42:07:eb:a0:c9:18:b2:
         1a:db:70:bc:d0:e4:80:e6:d9:79:59:3a:a1:2a:79:3d:0a:50:
         b8:64:31:df:54:f6:55:02:32:6c:2a:f5:30:df:7c:e9:1e:ca:
         9d:6e:c8:2c:c8:9b:7c:7e:54:9e:62:ae:24:63:6f:56:4f:c5:
         00:3a:3b:3f:90:73:56:cb:81:7f:1b:be:0e:73:da:1c:21:03:
         bf:4f:cf:08:22:11:72:08:9d:ce:75:8b:1d:e4:9d:55:bc:e8:
         e0:6e:1e:99:38:9f:78:71:ca:4f:29:a4:e2:85:18:a7:3c:c7:
         dd:a2:8a:00:0b:a9:12:fe:ad:d9:5e:c3:cb:c2:3a:c6:da:61:
         9d:a1:d1:0b:b2:cd:98:56:e9:fe:1c:e9:e6:a3:04:e0:5e:ef:
         9e:38:ed:cf:7d:e5:ae:63:48:3d:73:dd:40:d6:38:df:8b:26:
         71:e8:93:65:45:9b:7a:f6:d0:d6:c2:39:ab:17:bb:3a:20:e0:
         9e:5e:b3:33:f2:14:b9:84:cf:dc:ac:40:1d:e6:e6:63:90:ec:
         e5:e1:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 17:26:27 2026 by rpki-client