Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a34303a3a2f34322d3432203d3e20343031363236.roa
File:                     323630323a663732653a34303a3a2f34322d3432203d3e20343031363236.roa (raw, json)
Hash identifier:          rLxBptLmxO3saNWz7FsWsVE86Hcv6En5H9FRPNiVALs=
Subject key identifier:   52:2F:3C:C5:2C:6C:75:64:A6:39:5E:3F:C6:26:84:33:AE:D5:5C:65
Certificate issuer:       /CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
Certificate serial:       16AE835B7452B194410C76E58380B816D2B6DFC7
Authority key identifier: 3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a34303a3a2f34322d3432203d3e20343031363236.roa
Signing time:             Tue 07 Apr 2026 21:13:39 +0000
ROA not before:           Tue 07 Apr 2026 21:08:39 +0000
ROA not after:            Tue 06 Apr 2027 21:13:39 +0000
asID:                     401626
IP address blocks:        2602:f72e:40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ae:83:5b:74:52:b1:94:41:0c:76:e5:83:80:b8:16:d2:b6:df:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
        Validity
            Not Before: Apr  7 21:08:39 2026 GMT
            Not After : Apr  6 21:13:39 2027 GMT
        Subject: CN=522F3CC52C6C7564A6395E3FC6268433AED55C65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:94:87:41:42:b3:55:39:da:59:81:09:bb:07:
                    c3:8e:07:6b:0f:7d:9e:68:8f:30:d6:77:62:45:70:
                    cd:00:30:18:97:da:27:64:6b:75:91:26:d6:5e:65:
                    54:96:78:a0:0a:73:7c:7f:1b:a7:3c:4b:94:2a:a9:
                    2a:35:36:f4:48:0e:8b:e4:ba:91:17:28:41:42:70:
                    10:0b:8c:bd:9c:68:dd:cb:54:2a:01:fc:d0:e4:94:
                    0b:fd:10:5a:41:b3:ce:51:1a:29:fb:54:fa:3b:7a:
                    c7:8c:f5:0c:df:c7:e4:ca:24:b4:30:05:70:cd:1f:
                    39:37:d6:a1:b0:72:9b:65:b5:0e:5e:31:5d:1c:98:
                    a1:28:79:a8:be:ea:9f:88:10:75:92:04:4d:5d:24:
                    94:a5:4f:33:97:94:f4:9a:e8:93:c2:fa:07:e6:43:
                    55:c0:3e:93:9d:69:31:23:e3:4b:95:8f:b6:a2:64:
                    76:58:93:cb:94:7f:eb:b1:cd:48:f4:c0:c4:42:34:
                    1c:f0:23:9d:61:2e:cd:7a:f4:45:ab:77:4e:93:e2:
                    a6:fb:4f:0c:35:c9:8f:3c:3a:22:28:92:3b:68:15:
                    6c:d0:4c:0f:f6:d1:ad:6d:48:62:95:96:da:c2:10:
                    e6:01:fe:bc:6c:b4:69:db:a3:26:c3:03:89:13:57:
                    2a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2F:3C:C5:2C:6C:75:64:A6:39:5E:3F:C6:26:84:33:AE:D5:5C:65
            X509v3 Authority Key Identifier:
                keyid:3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a34303a3a2f34322d3432203d3e20343031363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:40::/42

    Signature Algorithm: sha256WithRSAEncryption
         82:e3:03:39:d5:6b:fe:36:1f:db:59:e4:79:69:4c:ea:50:9f:
         93:5d:65:c1:5e:49:e2:c6:e9:65:50:de:72:70:1e:96:3f:9e:
         bd:63:94:8e:c1:83:b4:c3:8c:e5:e7:60:39:aa:09:0f:28:fc:
         5a:0c:7f:fe:5a:db:52:d9:b3:71:71:1e:bc:10:83:09:a3:41:
         55:2e:20:60:48:a3:55:d8:03:2c:6e:40:ce:1a:04:52:0b:91:
         19:d0:d5:a5:66:8f:fe:bc:d4:12:da:d9:97:d8:26:b3:5a:38:
         a7:08:05:11:cb:a1:ff:e7:40:e5:11:b9:9a:ab:c2:5a:49:fb:
         8c:97:2e:26:1a:f7:1a:f6:c8:a6:b0:5d:63:e8:57:24:a0:30:
         35:3b:7b:92:c8:cf:71:ba:6e:28:2f:5a:0f:c1:38:48:48:83:
         ba:36:97:76:c6:e3:c3:10:20:c1:b0:c5:d0:86:02:9c:55:30:
         b0:09:77:c0:a8:a0:15:4c:00:f5:bd:97:3a:05:56:b6:d8:27:
         28:43:f5:42:6f:45:06:66:af:24:59:a4:51:b8:07:94:02:a0:
         40:cf:71:2a:d9:23:7a:7c:d9:f3:21:d3:ce:78:34:d5:b6:39:
         a8:c9:6b:d5:33:ea:69:94:2f:c2:29:6b:8e:4d:c9:6f:47:3d:
         8c:ca:2a:a9
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUFq6DW3RSsZRBDHblg4C4FtK238cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzY5ZGJjMmVjMWNkNDUzYTZjYmE3ZGY0MTY4ODMzODk3
MDhlZjNkODIwNGY3YWJmYzEwHhcNMjYwNDA3MjEwODM5WhcNMjcwNDA2MjExMzM5
WjAzMTEwLwYDVQQDEyg1MjJGM0NDNTJDNkM3NTY0QTYzOTVFM0ZDNjI2ODQzM0FF
RDU1QzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5SHQUKzVTna
WYEJuwfDjgdrD32eaI8w1ndiRXDNADAYl9onZGt1kSbWXmVUlnigCnN8fxunPEuU
KqkqNTb0SA6L5LqRFyhBQnAQC4y9nGjdy1QqAfzQ5JQL/RBaQbPOURop+1T6O3rH
jPUM38fkyiS0MAVwzR85N9ahsHKbZbUOXjFdHJihKHmovuqfiBB1kgRNXSSUpU8z
l5T0muiTwvoH5kNVwD6TnWkxI+NLlY+2omR2WJPLlH/rsc1I9MDEQjQc8COdYS7N
evRFq3dOk+Km+08MNcmPPDoiKJI7aBVs0EwP9tGtbUhilZbawhDmAf68bLRp26Mm
wwOJE1cqtQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFFIvPMUsbHVkpjleP8YmhDOu
1VxlMB8GA1UdIwQYMBaAFDpz2uCg1J9Voz41Ovta0sDHtUrsMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUzZjgyMGY1LzYv
M0E3M0RBRTBBMEQ0OUY1NUEzM0UzNTNBRkI1QUQyQzBDN0I1NEFFQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzY2MzNmLTM0M2QtNGFjMy1hOTM2LTk4OTU4ZTU2MzBlNi8zNjlk
YmMyZWMxY2Q0NTNhNmNiYTdkZjQxNjg4MzM4OTcwOGVmM2Q4MjA0ZjdhYmZjMS5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVk
MzA1M2Y4MjBmNS82LzMyMzYzMDMyM2E2NjM3MzI2NTNhMzQzMDNhM2EyZjM0MzIy
ZDM0MzIyMDNkM2UyMDM0MzAzMTM2MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBiYC9y4AQDANBgkq
hkiG9w0BAQsFAAOCAQEAguMDOdVr/jYf21nkeWlM6lCfk11lwV5J4sbpZVDecnAe
lj+evWOUjsGDtMOM5edgOaoJDyj8Wgx//lrbUtmzcXEevBCDCaNBVS4gYEijVdgD
LG5AzhoEUguRGdDVpWaP/rzUEtrZl9gms1o4pwgFEcuh/+dA5RG5mqvCWkn7jJcu
Jhr3GvbIprBdY+hXJKAwNTt7ksjPcbpuKC9aD8E4SEiDujaXdsbjwxAgwbDF0IYC
nFUwsAl3wKigFUwA9b2XOgVWttgnKEP1Qm9FBmavJFmkUbgHlAKgQM9xKtkjenzZ
8yHTzng01bY5qMlr1TPqaZQvwilrjk3Jb0c9jMoqqQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:06:29 2026 by rpki-client