Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a3a2f34342d3438203d3e203131393637.roa
File:                     323630323a663732653a3a2f34342d3438203d3e203131393637.roa (raw, json)
Hash identifier:          C8LCu8vscdQtf+WgoP1XvOb0rND5ZGO25tN9zw+IIN8=
Subject key identifier:   50:62:80:56:6E:A8:DE:07:9B:7D:F9:58:45:3C:9F:05:16:48:78:7E
Certificate issuer:       /CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
Certificate serial:       7E01794FADC7ADADB36F55A615279F22C9772532
Authority key identifier: 3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a3a2f34342d3438203d3e203131393637.roa
Signing time:             Tue 07 Apr 2026 21:13:38 +0000
ROA not before:           Tue 07 Apr 2026 21:08:38 +0000
ROA not after:            Tue 06 Apr 2027 21:13:38 +0000
asID:                     11967
IP address blocks:        2602:f72e::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:01:79:4f:ad:c7:ad:ad:b3:6f:55:a6:15:27:9f:22:c9:77:25:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
        Validity
            Not Before: Apr  7 21:08:38 2026 GMT
            Not After : Apr  6 21:13:38 2027 GMT
        Subject: CN=506280566EA8DE079B7DF958453C9F051648787E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8c:c8:c1:32:14:a8:cc:74:1a:ee:72:a2:bc:
                    25:96:70:a6:8d:4c:49:a0:1f:b3:45:c8:b4:bc:55:
                    53:e7:17:bd:88:6b:39:25:f1:a9:94:ab:d3:13:3b:
                    0a:b2:9f:b6:03:0c:37:6e:36:d4:f2:45:fd:75:a6:
                    b9:4d:9b:6a:ef:0f:66:a3:43:0e:60:f1:0f:27:04:
                    26:e9:ba:64:72:dc:83:fa:e2:1a:81:81:61:ff:dd:
                    b8:bf:eb:2b:4a:09:e6:4c:14:05:f2:cf:a3:c1:d1:
                    37:9d:16:1b:f1:a2:fb:75:55:0a:60:8b:74:b9:47:
                    bc:8d:f2:7b:3b:86:a2:87:be:24:53:ad:10:33:b7:
                    55:04:d7:69:d6:c8:24:f6:bc:d8:29:25:97:ac:26:
                    75:87:cc:d0:da:c9:23:5a:0e:d2:0d:fb:e8:9b:e8:
                    d2:30:bf:30:2f:38:e9:71:94:39:84:23:3f:1f:70:
                    36:57:34:ac:ad:8a:db:5a:5c:d9:67:dd:c4:96:bc:
                    c1:00:3a:53:ea:75:9e:a1:ef:ae:98:7d:4c:cb:ef:
                    3e:2c:a1:b3:91:8c:4d:2e:d8:03:57:70:d4:f2:07:
                    59:1d:39:1d:f7:8c:8f:5b:2e:6e:05:bc:2a:53:ef:
                    31:fd:84:2b:64:f6:35:19:d7:45:cb:9b:4a:b9:89:
                    5b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:62:80:56:6E:A8:DE:07:9B:7D:F9:58:45:3C:9F:05:16:48:78:7E
            X509v3 Authority Key Identifier:
                keyid:3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a3a2f34342d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e::/44

    Signature Algorithm: sha256WithRSAEncryption
         13:56:cd:09:7e:54:f7:9d:fd:28:53:0a:9b:02:51:c4:aa:90:
         76:8c:fa:08:f8:f0:b8:9d:ff:a7:df:31:3e:2b:e8:95:04:b1:
         63:ea:d6:91:29:aa:9f:dd:a8:cb:f2:3c:a9:64:3a:a4:85:11:
         39:2e:ca:b2:0c:dc:ee:02:8c:d1:f7:6a:fe:58:c8:8f:e2:08:
         14:89:4d:fb:2f:0f:15:5c:af:5c:29:30:c9:dd:c4:43:3f:34:
         1c:12:cf:40:5b:af:34:ae:a1:68:2d:3c:86:9a:8a:73:13:d5:
         fe:31:53:73:d9:4d:ee:af:07:c5:6c:1e:6e:e5:6e:74:06:dd:
         87:5f:b3:d0:e7:a2:29:1d:a0:a0:df:6f:bc:30:0d:ff:03:0d:
         59:8f:04:36:15:76:80:3d:a6:e7:0e:a0:2b:7e:03:b4:b9:af:
         86:cc:8c:fd:ba:c6:e3:32:a7:de:74:fc:77:07:17:76:74:22:
         56:19:e8:7b:20:1a:f9:1c:f4:e2:18:5d:60:89:86:54:9d:80:
         63:b6:36:aa:90:b4:a0:f6:c6:b6:1e:9b:77:48:a9:8d:9a:6a:
         3a:2d:b3:6e:50:28:9c:3a:86:15:7c:76:9c:af:8e:8d:d9:ed:
         ab:21:e2:bf:a2:eb:c6:cd:95:32:e8:cc:d8:fb:b8:ff:23:dc:
         58:f9:a6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:37:13 2026 by rpki-client