Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a33663a3a2f34382d3438203d3e20313333353034.roa
File:                     323630323a663732653a33663a3a2f34382d3438203d3e20313333353034.roa (raw, json)
Hash identifier:          U/LhHsCSfXSolOescWp6ROFFEYq1EK4oT2R25K6chAI=
Subject key identifier:   8C:29:21:7F:A2:14:53:35:46:B4:5C:E0:69:0A:73:8F:A4:AB:67:7E
Certificate issuer:       /CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
Certificate serial:       55AB30A092445B3381FD4D352F334BB72C5468A2
Authority key identifier: 3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a33663a3a2f34382d3438203d3e20313333353034.roa
Signing time:             Tue 07 Apr 2026 21:13:38 +0000
ROA not before:           Tue 07 Apr 2026 21:08:38 +0000
ROA not after:            Tue 06 Apr 2027 21:13:38 +0000
asID:                     133504
IP address blocks:        2602:f72e:3f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ab:30:a0:92:44:5b:33:81:fd:4d:35:2f:33:4b:b7:2c:54:68:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
        Validity
            Not Before: Apr  7 21:08:38 2026 GMT
            Not After : Apr  6 21:13:38 2027 GMT
        Subject: CN=8C29217FA214533546B45CE0690A738FA4AB677E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:90:ba:6d:19:51:fa:83:09:92:70:90:b5:
                    5c:94:d4:1b:86:b1:45:18:a6:8a:a2:86:2a:82:09:
                    bb:fa:d4:fe:c1:ad:2a:28:dd:14:a3:ea:bc:ae:6a:
                    45:3c:96:5c:37:1c:7c:f6:54:93:be:e3:ec:2c:79:
                    ce:16:63:b7:e8:bb:bd:08:e9:1e:61:ca:fe:02:ba:
                    0c:03:2f:6a:dd:27:3e:ba:3b:4a:22:ac:27:7e:8b:
                    52:85:4f:18:8d:04:70:5f:85:56:2f:26:ca:47:49:
                    df:1e:f6:aa:87:5d:73:ac:52:dd:e0:97:03:05:89:
                    b6:01:54:52:0c:33:49:be:58:59:1c:7c:a3:92:f7:
                    42:f8:f5:61:e0:3e:d2:9e:5b:d1:b7:14:67:5c:cf:
                    34:0c:a8:85:ac:cc:ea:14:4f:ae:e4:56:aa:14:a0:
                    0a:e6:f5:fc:90:66:06:3c:b2:04:f5:02:4e:a6:6c:
                    98:7d:ca:be:25:6d:f2:10:d2:75:6a:dd:27:c3:fb:
                    f2:6b:34:6c:1a:f6:9b:0c:54:48:f3:58:5c:cc:ea:
                    56:71:99:c3:69:64:6a:36:d9:b1:55:e5:34:60:f9:
                    75:75:12:6b:26:27:4a:77:79:2d:6c:cb:9b:43:82:
                    a6:92:4b:cf:26:be:f3:08:f4:31:fb:d2:63:a3:d3:
                    c8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:29:21:7F:A2:14:53:35:46:B4:5C:E0:69:0A:73:8F:A4:AB:67:7E
            X509v3 Authority Key Identifier:
                keyid:3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a33663a3a2f34382d3438203d3e20313333353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:3f::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:67:77:d1:29:d1:6a:01:50:f6:32:56:f9:64:e0:d2:6c:e1:
         19:5c:52:01:5a:d2:ed:fd:1e:a1:e9:6f:e2:83:56:8a:43:d8:
         8d:3c:41:d5:ca:2a:a6:3e:ab:97:c8:78:45:ec:f1:ac:9d:18:
         a8:e8:c8:4e:48:d5:c7:38:9c:a2:25:0b:1a:da:44:06:49:c4:
         c4:61:49:73:ef:20:bd:13:bf:cb:cb:99:59:63:a9:44:3b:03:
         f8:ee:64:07:41:19:b7:d9:56:ed:0d:f0:ad:43:17:c7:5a:8d:
         e7:62:9b:1b:c3:21:8e:63:1c:21:d1:ef:89:7a:31:bd:d2:6d:
         b3:ec:94:3c:b5:6c:37:83:fa:63:ae:c8:c7:78:3e:cc:3e:1e:
         30:d3:8c:57:be:00:57:df:22:d5:20:91:03:9f:b0:9b:f4:f6:
         14:46:a2:c7:74:4a:b7:dd:8f:ef:e0:ec:18:f7:d3:19:80:0a:
         1b:e7:91:50:7d:da:a0:29:a3:32:9b:b3:c6:13:bd:0c:e5:28:
         71:28:a4:0b:69:5c:a2:47:5a:e5:14:db:6b:d6:43:39:33:e5:
         de:a8:9c:e7:19:cd:db:12:a6:72:2c:68:65:22:ab:97:f0:c9:
         a5:bf:64:5b:d8:34:a2:21:dc:1c:6b:90:d7:98:8c:ab:de:20:
         57:b2:70:46
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUVaswoJJEWzOB/U01LzNLtyxUaKIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzY5ZGJjMmVjMWNkNDUzYTZjYmE3ZGY0MTY4ODMzODk3
MDhlZjNkODIwNGY3YWJmYzEwHhcNMjYwNDA3MjEwODM4WhcNMjcwNDA2MjExMzM4
WjAzMTEwLwYDVQQDEyg4QzI5MjE3RkEyMTQ1MzM1NDZCNDVDRTA2OTBBNzM4RkE0
QUI2NzdFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5iQum0ZUfqD
CZJwkLVclNQbhrFFGKaKooYqggm7+tT+wa0qKN0Uo+q8rmpFPJZcNxx89lSTvuPs
LHnOFmO36Lu9COkeYcr+AroMAy9q3Sc+ujtKIqwnfotShU8YjQRwX4VWLybKR0nf
Hvaqh11zrFLd4JcDBYm2AVRSDDNJvlhZHHyjkvdC+PVh4D7SnlvRtxRnXM80DKiF
rMzqFE+u5FaqFKAK5vX8kGYGPLIE9QJOpmyYfcq+JW3yENJ1at0nw/vyazRsGvab
DFRI81hczOpWcZnDaWRqNtmxVeU0YPl1dRJrJidKd3ktbMubQ4KmkkvPJr7zCPQx
+9Jjo9PIzwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFIwpIX+iFFM1RrRc4GkKc4+k
q2d+MB8GA1UdIwQYMBaAFDpz2uCg1J9Voz41Ovta0sDHtUrsMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUzZjgyMGY1LzYv
M0E3M0RBRTBBMEQ0OUY1NUEzM0UzNTNBRkI1QUQyQzBDN0I1NEFFQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzY2MzNmLTM0M2QtNGFjMy1hOTM2LTk4OTU4ZTU2MzBlNi8zNjlk
YmMyZWMxY2Q0NTNhNmNiYTdkZjQxNjg4MzM4OTcwOGVmM2Q4MjA0ZjdhYmZjMS5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVk
MzA1M2Y4MjBmNS82LzMyMzYzMDMyM2E2NjM3MzI2NTNhMzM2NjNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMxMzMzMzM1MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC9y4APzANBgkq
hkiG9w0BAQsFAAOCAQEAr2d30SnRagFQ9jJW+WTg0mzhGVxSAVrS7f0eoelv4oNW
ikPYjTxB1coqpj6rl8h4RezxrJ0YqOjITkjVxzicoiULGtpEBknExGFJc+8gvRO/
y8uZWWOpRDsD+O5kB0EZt9lW7Q3wrUMXx1qN52KbG8MhjmMcIdHviXoxvdJts+yU
PLVsN4P6Y67Ix3g+zD4eMNOMV74AV98i1SCRA5+wm/T2FEaix3RKt92P7+DsGPfT
GYAKG+eRUH3aoCmjMpuzxhO9DOUocSikC2lcokda5RTba9ZDOTPl3qic5xnN2xKm
cixoZSKrl/DJpb9kW9g0oiHcHGuQ15iMq94gV7JwRg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:25:48 2026 by rpki-client