Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3330303a3a2f34302d3430203d3e20343031363832.roa
File:                     323630343a6361303a3330303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier:          DCkKkzFGiquGWUiFuPPACixs9E6drnBGI1maWbsV4mc=
Subject key identifier:   4D:53:5B:A2:5C:77:AC:7B:37:E7:B1:1B:CF:8C:DF:D0:98:B3:1D:48
Certificate issuer:       /CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
Certificate serial:       18504EF2BDD19C1FA787751246E7A93822AD63EA
Authority key identifier: 7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3330303a3a2f34302d3430203d3e20343031363832.roa
Signing time:             Fri 30 May 2025 20:26:21 +0000
ROA not before:           Fri 30 May 2025 20:21:21 +0000
ROA not after:            Fri 29 May 2026 20:26:21 +0000
asID:                     401682
IP address blocks:        2604:ca0:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:27:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:50:4e:f2:bd:d1:9c:1f:a7:87:75:12:46:e7:a9:38:22:ad:63:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
        Validity
            Not Before: May 30 20:21:21 2025 GMT
            Not After : May 29 20:26:21 2026 GMT
        Subject: CN=4D535BA25C77AC7B37E7B11BCF8CDFD098B31D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0d:ed:0e:2d:04:9a:b5:af:05:81:c1:8f:14:
                    5b:92:9f:1b:9c:44:7d:da:0f:ae:57:16:cb:d8:c1:
                    fe:29:12:c7:ac:a1:96:70:b3:f0:ad:2c:46:06:78:
                    55:76:5d:64:8c:e6:b9:18:57:16:6d:93:5a:37:37:
                    b6:d3:9c:29:bd:04:8d:e3:c4:fc:9e:3d:e3:d4:65:
                    79:a2:c1:98:03:0b:8f:33:62:cb:fe:f6:b2:32:85:
                    00:76:f0:94:2d:a7:63:cc:a3:90:1d:e7:2c:6d:47:
                    fd:72:cf:fe:04:5e:e9:62:6e:20:e4:a6:9d:fd:5f:
                    ce:ba:1f:c7:28:10:c0:c9:bc:12:44:52:e1:76:98:
                    76:ac:00:9b:d9:5a:e3:a7:81:08:6c:38:69:f5:74:
                    eb:f3:b9:67:d9:1f:1a:fc:7e:dc:d8:b5:13:da:9f:
                    97:e8:c2:5a:9b:ac:0c:0f:7d:4e:43:a2:cf:3c:d7:
                    2c:b8:da:ec:46:5a:49:1e:e6:0e:63:7c:0c:9d:82:
                    77:8f:e8:8a:21:e1:a6:7a:d9:eb:12:8f:de:a9:6b:
                    88:77:31:f0:82:1b:73:7f:35:80:32:41:b8:a5:bd:
                    8a:6c:e7:ee:b9:38:f0:41:4d:4e:c6:cc:c8:10:f8:
                    1d:c8:cc:06:a2:18:bf:9e:8e:82:ad:38:3f:c2:c9:
                    69:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:53:5B:A2:5C:77:AC:7B:37:E7:B1:1B:CF:8C:DF:D0:98:B3:1D:48
            X509v3 Authority Key Identifier:
                keyid:7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3330303a3a2f34302d3430203d3e20343031363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ca0:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:47:c7:dc:fe:25:28:46:38:19:9d:5e:84:46:16:1e:0e:a7:
         eb:23:97:94:69:e1:6e:85:3e:3b:a8:a8:4f:51:35:11:17:61:
         88:a4:53:ed:42:c6:0b:7e:e6:f9:dc:cd:01:f4:30:8b:95:60:
         e4:1e:b0:e0:80:0d:94:dc:3d:7d:5c:06:7a:e3:85:9c:e7:fb:
         20:b9:37:f8:34:a1:69:8e:13:f3:1f:6b:73:02:c4:13:30:eb:
         49:3c:30:f9:5a:69:64:76:24:71:20:85:d5:9c:42:80:f7:5c:
         37:93:9e:f2:17:31:a5:40:a1:ef:81:36:4e:b9:1e:2a:d0:83:
         0e:cc:3e:01:02:2b:28:1a:98:a8:3f:59:32:df:e6:f0:48:55:
         a1:cd:01:5d:c1:79:e3:5a:80:e9:62:b2:de:46:5a:57:4a:51:
         0e:34:b8:03:ac:66:b5:b9:70:a7:01:73:1e:e6:31:05:3b:de:
         58:e2:3b:62:b9:1e:98:6d:73:16:cb:8b:6c:ee:3c:4b:c8:ab:
         08:3c:6a:18:63:32:dd:46:f3:26:53:c1:df:9c:7e:29:92:fb:
         04:2b:ab:66:50:c3:dc:bb:13:c3:0b:34:30:5c:68:d6:b8:0f:
         98:72:53:95:bc:53:cc:c3:85:d9:41:01:58:45:99:11:23:c4:
         3a:e1:b6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:41:58 2025 by rpki-client