Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a38303a3a2f34312d3431203d3e20343031363236.roa
File:                     323630323a663732653a38303a3a2f34312d3431203d3e20343031363236.roa (raw, json)
Hash identifier:          KTUlLRCJele0Zmh8/Mg0UhoisWeeMMkQAyqsmRYU9qE=
Subject key identifier:   E0:D4:E7:AB:6A:91:06:4C:AC:AD:31:A0:4F:95:BA:A6:E8:B5:2E:54
Certificate issuer:       /CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
Certificate serial:       23B55E56B371EC3AE40CAD55A20A8D72B400AB69
Authority key identifier: 3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a38303a3a2f34312d3431203d3e20343031363236.roa
Signing time:             Tue 07 Apr 2026 21:13:38 +0000
ROA not before:           Tue 07 Apr 2026 21:08:38 +0000
ROA not after:            Tue 06 Apr 2027 21:13:38 +0000
asID:                     401626
IP address blocks:        2602:f72e:80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b5:5e:56:b3:71:ec:3a:e4:0c:ad:55:a2:0a:8d:72:b4:00:ab:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
        Validity
            Not Before: Apr  7 21:08:38 2026 GMT
            Not After : Apr  6 21:13:38 2027 GMT
        Subject: CN=E0D4E7AB6A91064CACAD31A04F95BAA6E8B52E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a7:79:93:cb:d2:b8:23:e8:f6:4c:96:5e:f5:
                    92:8d:11:4b:61:c7:f3:68:5f:85:f8:a2:21:6c:71:
                    2c:da:01:a8:6b:57:c7:c5:e7:32:65:df:b4:b7:84:
                    b5:01:98:4b:1d:22:d4:44:54:db:5e:9f:34:c6:d5:
                    7a:10:75:73:5d:8e:39:bd:ed:f3:92:ca:5a:bd:6f:
                    3a:05:1e:cf:a0:c2:a9:c8:3b:c1:fe:9f:60:ad:2b:
                    e6:f4:56:27:70:b6:ac:b6:28:de:f6:cc:92:e2:a0:
                    9b:46:09:da:06:0f:4c:05:f9:9d:b8:9d:3d:18:35:
                    f8:64:d4:a3:8c:27:77:48:37:8c:23:9f:3c:ae:f6:
                    3c:93:aa:9a:36:9a:8b:60:2f:9a:33:23:7c:2e:7b:
                    12:18:6c:96:38:91:1e:9d:76:3f:a6:39:b8:c4:65:
                    42:1e:fc:7d:35:6e:4f:45:40:42:9c:c7:f7:9e:5b:
                    75:a9:ce:aa:1d:4c:87:f0:68:18:c0:32:a0:77:7e:
                    ec:87:49:19:85:19:e8:b1:4c:c4:b2:27:97:77:c6:
                    06:50:8c:67:1e:c8:a4:65:52:60:a2:ba:1d:a6:5d:
                    5e:8d:f6:e5:fa:7a:39:6c:af:1f:3a:cf:d5:91:ef:
                    19:84:87:e7:ca:19:d2:50:3e:fc:37:a7:5d:b1:b0:
                    92:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D4:E7:AB:6A:91:06:4C:AC:AD:31:A0:4F:95:BA:A6:E8:B5:2E:54
            X509v3 Authority Key Identifier:
                keyid:3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a38303a3a2f34312d3431203d3e20343031363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:80::/41

    Signature Algorithm: sha256WithRSAEncryption
         57:f1:28:1f:bd:67:f1:00:3c:51:29:ba:40:1d:41:5c:76:63:
         1b:11:0c:39:9c:df:16:8d:e4:e3:57:fb:e9:59:8a:98:5e:d1:
         1c:7c:17:b2:1b:b1:d5:42:06:5e:eb:36:9c:bf:28:56:3e:8a:
         8e:1c:05:93:7c:3d:fb:4b:a3:8d:36:24:0a:23:c8:f5:df:ff:
         8b:bb:e6:1e:f2:a7:6d:9a:2a:1e:37:06:0e:07:cc:3a:35:70:
         43:5a:4d:d0:eb:7f:aa:5c:06:f2:54:11:87:f2:ec:dd:89:fd:
         13:3f:33:d2:84:27:22:d5:33:84:bb:35:3f:47:93:56:2a:1a:
         d1:78:b3:c8:ce:40:21:9e:44:4d:ab:c9:be:0e:f6:73:53:85:
         81:2a:8c:52:cb:be:25:27:46:f1:b4:d0:78:d5:d6:0f:52:82:
         f4:0d:fe:f9:94:85:f0:a2:62:a1:46:55:24:cd:9b:bd:50:0d:
         7f:82:a1:8f:d5:52:9d:86:a3:bd:85:47:10:4b:2f:ed:1d:9a:
         10:e6:1a:d0:3a:9b:dc:bb:39:f6:3a:af:d6:a4:08:50:99:a0:
         22:3f:af:43:2b:ec:d3:fd:f4:ba:58:8d:91:7f:19:2c:e7:9b:
         d7:79:73:53:cf:f0:26:ac:28:b8:a5:9a:47:ea:57:d7:76:1a:
         c4:60:5c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:21:05 2026 by rpki-client