Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a32343a3a2f34382d3438203d3e203131393637.roa
File:                     323630323a663732653a32343a3a2f34382d3438203d3e203131393637.roa (raw, json)
Hash identifier:          fGXr1p/cjVD19k7nWJmvP6FYqq9pLUK73udZbQt27dQ=
Subject key identifier:   9F:B4:C4:F0:DF:33:AC:E2:C9:B1:C3:22:E7:3F:5A:56:15:32:C2:3D
Certificate issuer:       /CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
Certificate serial:       02ADA90DE376E564C38399E4709E002A0AE27A4A
Authority key identifier: 3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a32343a3a2f34382d3438203d3e203131393637.roa
Signing time:             Tue 07 Apr 2026 21:13:39 +0000
ROA not before:           Tue 07 Apr 2026 21:08:39 +0000
ROA not after:            Tue 06 Apr 2027 21:13:39 +0000
asID:                     11967
IP address blocks:        2602:f72e:24::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ad:a9:0d:e3:76:e5:64:c3:83:99:e4:70:9e:00:2a:0a:e2:7a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
        Validity
            Not Before: Apr  7 21:08:39 2026 GMT
            Not After : Apr  6 21:13:39 2027 GMT
        Subject: CN=9FB4C4F0DF33ACE2C9B1C322E73F5A561532C23D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:50:ee:b1:c7:8d:92:c2:00:77:aa:79:91:35:
                    09:d8:de:c6:2f:77:04:7f:99:e6:e6:ab:5f:66:91:
                    4a:fe:84:bd:0b:30:94:eb:ba:fa:7f:2d:5a:7e:b1:
                    25:2c:ea:52:40:a0:b5:08:15:bb:10:bd:03:df:71:
                    90:8f:d3:17:b9:d7:50:72:54:c4:ab:9b:3b:25:17:
                    91:ad:ea:f6:0d:ff:35:4a:95:e0:85:d6:c0:a9:a3:
                    7b:f2:5d:d1:8d:29:d5:96:30:e4:e9:d8:3e:13:9b:
                    4f:f1:9e:89:ac:9f:b0:01:28:2c:70:5d:a9:c5:12:
                    59:20:65:c9:d9:94:26:ff:11:d4:d8:d9:1c:cc:6d:
                    33:ce:6f:d2:7e:7e:03:82:34:d8:bb:da:a3:05:a6:
                    58:e3:f1:3d:b2:48:5c:46:45:55:4f:4d:c2:e1:9c:
                    b3:f6:98:51:8d:84:74:74:32:6e:1e:b3:2c:21:1c:
                    0e:ec:c1:59:a8:f5:6b:92:9e:52:66:19:a5:28:de:
                    4e:62:da:e1:94:81:0a:f6:d1:1b:25:23:e3:c7:e5:
                    38:62:d4:58:d3:21:5c:81:61:33:cf:35:2b:1e:73:
                    a2:c8:cd:83:76:9f:a2:57:9b:42:36:74:a2:f4:c2:
                    94:54:9a:ef:88:95:1e:8c:37:c0:fb:7f:30:ef:18:
                    a8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B4:C4:F0:DF:33:AC:E2:C9:B1:C3:22:E7:3F:5A:56:15:32:C2:3D
            X509v3 Authority Key Identifier:
                keyid:3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a32343a3a2f34382d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:24::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:a3:e1:28:e6:2a:66:09:02:07:37:6f:c3:5d:86:ac:6a:9f:
         0b:30:ff:04:83:4b:dc:b7:09:97:a0:aa:9c:78:03:37:0c:51:
         31:a7:32:5a:bf:97:e0:e7:9c:f9:e9:46:fc:d5:8a:39:54:a2:
         dc:4c:f7:28:84:b8:84:01:95:dd:ad:33:54:f5:e7:e7:a4:3e:
         01:72:99:83:8b:6d:44:9b:b7:4e:31:38:fa:8c:c8:df:28:cd:
         6f:6d:2d:f8:62:1a:a2:11:ca:5f:ce:0f:99:c7:0c:55:27:f0:
         b5:f8:39:c0:7e:ec:91:61:05:3f:25:ef:47:67:4f:14:c3:f9:
         ea:50:ce:23:cd:23:10:84:ea:c8:c5:bb:a4:1c:94:56:e0:dc:
         54:32:65:21:73:0d:c3:7d:e4:a6:e3:85:a4:ec:bd:6d:b5:20:
         39:5e:85:8e:12:05:b0:21:25:1e:d6:22:20:57:24:cd:8f:d7:
         6c:35:9a:16:0f:ce:28:be:a8:2c:a2:21:7e:cf:da:95:38:d2:
         ad:ab:4a:2d:42:11:78:76:d0:ce:ed:eb:f2:4b:a0:7c:68:78:
         27:01:24:02:23:87:25:df:97:2d:df:e9:16:32:7a:bb:71:9b:
         8b:d8:c6:81:dc:38:65:60:17:2c:4f:7f:84:7a:18:ac:69:ea:
         32:c9:c8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:00:16 2026 by rpki-client