Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a37303a3a2f34342d3434203d3e203633323836.roa
File:                     323630323a663732653a37303a3a2f34342d3434203d3e203633323836.roa (raw, json)
Hash identifier:          wSVaVF02BA9qMwRO8F474HL9kvT9RnciGxZ6nuquyHc=
Subject key identifier:   F8:D2:62:28:FC:89:76:88:86:E4:55:13:46:8B:7B:E4:FD:C1:5F:D4
Certificate issuer:       /CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
Certificate serial:       3655EF901EAE86808E7E9AFEFF5F43E94B44FE7E
Authority key identifier: 3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a37303a3a2f34342d3434203d3e203633323836.roa
Signing time:             Tue 07 Apr 2026 21:13:38 +0000
ROA not before:           Tue 07 Apr 2026 21:08:38 +0000
ROA not after:            Tue 06 Apr 2027 21:13:38 +0000
asID:                     63286
IP address blocks:        2602:f72e:70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:55:ef:90:1e:ae:86:80:8e:7e:9a:fe:ff:5f:43:e9:4b:44:fe:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
        Validity
            Not Before: Apr  7 21:08:38 2026 GMT
            Not After : Apr  6 21:13:38 2027 GMT
        Subject: CN=F8D26228FC89768886E45513468B7BE4FDC15FD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c1:e9:84:bb:5d:c7:4f:eb:c2:de:11:8e:c4:
                    9a:02:e7:ee:3f:67:f8:5b:07:4a:9c:4e:20:f8:de:
                    fe:bc:46:15:84:f5:14:d4:08:76:dd:b6:b7:64:c6:
                    17:34:a6:10:7e:0e:c3:e4:c3:94:de:7b:3d:7b:d9:
                    a2:1a:54:f2:0b:5c:4c:92:3d:74:48:ba:5a:67:03:
                    18:e7:96:21:50:e6:68:55:fd:a1:ec:2a:e7:4b:4b:
                    f5:19:44:40:38:ed:66:7b:bc:6a:67:74:72:04:fa:
                    49:0f:dd:93:48:65:69:f0:00:fd:92:31:16:ee:54:
                    be:33:1e:04:17:5f:5a:54:99:5c:4d:a1:31:a1:fb:
                    55:db:00:62:d9:36:f2:db:0c:f2:ca:10:61:af:56:
                    83:28:a2:36:ca:93:8c:b4:e3:1a:11:4d:83:92:5c:
                    f9:e1:f4:4a:f3:81:11:e8:1e:7c:5d:26:ec:b8:5c:
                    9f:01:ca:74:a6:09:ef:f7:c9:c7:6c:2b:12:0b:c7:
                    cb:8f:8b:1b:fc:3f:cf:f7:a9:b3:e5:6d:63:be:d1:
                    30:55:c9:2a:e6:71:e1:8a:cf:07:9b:e3:86:6c:2e:
                    47:98:70:06:6f:02:b8:ae:ac:d5:68:c8:94:e6:0a:
                    7f:67:44:4b:9e:fb:6c:22:f3:e9:71:20:88:e1:5f:
                    57:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D2:62:28:FC:89:76:88:86:E4:55:13:46:8B:7B:E4:FD:C1:5F:D4
            X509v3 Authority Key Identifier:
                keyid:3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a37303a3a2f34342d3434203d3e203633323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:70::/44

    Signature Algorithm: sha256WithRSAEncryption
         bc:92:9e:1f:bb:10:b5:1d:31:3b:e7:84:c2:f7:8c:61:c2:94:
         54:3b:de:48:7f:bc:28:77:d6:0f:14:c4:7c:31:48:83:ad:73:
         5e:bf:4f:3e:5f:c8:8a:e0:27:4f:fa:37:ca:7d:36:9e:03:2b:
         a1:e0:61:d1:c9:da:8c:17:af:fb:6d:33:06:85:70:fc:68:61:
         4f:04:60:a7:46:03:5a:ea:97:4c:1c:be:ec:aa:92:a3:b1:9e:
         b7:40:83:12:dd:42:d0:b3:53:27:6d:4e:51:28:44:14:f1:06:
         62:f3:72:d3:26:97:03:80:70:b0:05:a4:6a:d8:8c:80:85:b6:
         80:65:8f:05:a9:76:e4:59:a4:71:01:1d:70:16:fc:16:9a:c7:
         95:be:82:8f:30:63:6e:85:f2:a1:d1:3d:d5:13:6d:10:2d:3b:
         78:39:bd:0c:04:71:d1:f5:43:21:f9:5b:c8:4f:24:d2:30:71:
         15:42:40:99:74:8b:b3:90:1d:7d:38:ea:95:6a:22:6c:c5:42:
         65:32:23:98:b1:1c:3a:bd:58:15:17:ee:0c:f6:5f:0a:e2:e6:
         47:3f:10:7c:8c:42:fe:e3:67:19:89:34:08:a9:c0:08:5f:0a:
         26:fa:44:c8:96:28:f7:0f:f5:36:67:60:41:57:d5:7c:57:59:
         07:e3:e7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:53:14 2026 by rpki-client