Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3133303a3a2f34342d3434203d3e203130313033.roa
File:                     323630373a373463303a3133303a3a2f34342d3434203d3e203130313033.roa (raw, json)
Hash identifier:          Wfcd9PMQ86iMwF9S/jwfuCTyeAHjmGbTN4QJErtIetM=
Subject key identifier:   C2:37:E1:1C:AC:1F:86:88:BB:33:E1:5F:9E:4A:C2:7D:89:82:82:EA
Certificate issuer:       /CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
Certificate serial:       73C6944E77B37E8149E037825771771095B39B38
Authority key identifier: CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3133303a3a2f34342d3434203d3e203130313033.roa
Signing time:             Thu 05 Feb 2026 18:19:49 +0000
ROA not before:           Thu 05 Feb 2026 18:14:49 +0000
ROA not after:            Thu 04 Feb 2027 18:19:49 +0000
asID:                     10103
IP address blocks:        2607:74c0:130::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl
                          rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c6:94:4e:77:b3:7e:81:49:e0:37:82:57:71:77:10:95:b3:9b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
        Validity
            Not Before: Feb  5 18:14:49 2026 GMT
            Not After : Feb  4 18:19:49 2027 GMT
        Subject: CN=C237E11CAC1F8688BB33E15F9E4AC27D898282EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0f:98:7b:97:15:de:83:01:8e:86:6b:5b:15:
                    37:cd:b2:92:23:20:c2:ea:17:c0:0d:0b:d6:b5:c9:
                    66:c5:96:d1:96:d5:30:dd:5f:f4:4f:93:24:26:af:
                    e4:d2:3d:5f:e1:36:75:a7:7c:53:83:4f:f7:8e:cf:
                    8e:08:bd:61:a1:7d:ca:96:1b:f3:98:77:ec:82:59:
                    fa:db:8e:ee:02:ff:f5:37:0b:21:c7:60:55:1e:6e:
                    2a:01:bd:6d:1a:52:69:0d:39:f7:5a:a1:80:ff:85:
                    84:e5:52:c9:62:c6:98:4a:52:32:aa:b8:d0:8c:a9:
                    e9:27:ae:ee:fc:96:b2:f5:81:10:49:a3:4b:e7:a8:
                    2c:fe:5a:ec:98:1a:7a:b6:40:18:f8:e8:c3:69:2d:
                    8f:47:e8:2b:22:7e:ef:9a:50:00:e0:00:a8:1c:8a:
                    89:c6:03:9e:68:d5:08:7c:2c:f3:67:ec:e0:3a:dd:
                    80:66:66:18:fd:88:8c:af:3e:05:63:6e:d9:13:b8:
                    d8:40:61:32:61:f2:99:f2:d8:6e:78:69:1b:66:94:
                    39:53:ad:5e:53:d5:62:04:29:7e:a7:d9:b0:81:83:
                    23:36:2e:e9:79:ed:44:e8:63:91:85:b6:52:a9:28:
                    7a:60:8c:ea:96:a3:d0:61:49:6c:7a:2f:2d:2b:a5:
                    25:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:37:E1:1C:AC:1F:86:88:BB:33:E1:5F:9E:4A:C2:7D:89:82:82:EA
            X509v3 Authority Key Identifier:
                keyid:CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3133303a3a2f34342d3434203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0:130::/44

    Signature Algorithm: sha256WithRSAEncryption
         ac:69:57:68:90:41:a6:bc:a5:3c:14:dc:66:76:cd:81:cb:3f:
         d0:e5:21:81:18:dc:4a:34:02:ed:87:1a:2c:01:f6:55:a9:c2:
         3d:92:a8:05:af:96:2e:6b:0e:b9:4c:d3:75:e8:22:99:d6:bd:
         fe:e7:c2:a7:1b:fd:fb:ef:0e:7d:10:61:53:7e:18:4c:ec:72:
         8c:13:18:4e:8b:40:09:1d:f4:b3:a1:21:84:e7:ff:67:3a:28:
         8d:6e:98:d2:68:04:d5:41:ee:7f:57:7c:55:b2:35:0f:6c:07:
         52:c5:de:cf:1d:73:d3:ac:b0:a5:f6:79:5e:02:7f:4c:5a:70:
         e3:6c:57:8f:42:91:43:51:b5:dd:84:a4:fe:a5:55:68:9b:8e:
         a8:bb:6f:e7:89:00:5e:19:b9:df:ee:41:86:fb:44:82:d8:03:
         77:35:fc:21:a5:7f:8f:af:64:1d:12:af:28:13:db:8d:80:cb:
         57:6c:0f:6b:ce:02:03:e9:b0:3d:01:0f:08:c2:ec:9c:f9:b2:
         b5:8f:48:49:e1:9f:b5:61:7f:7b:18:48:7b:76:32:85:cd:67:
         d9:7b:a7:84:0c:a9:38:13:80:e6:84:f6:9f:0b:59:c4:99:b2:
         cd:45:b3:c6:6b:a4:25:f6:d9:b4:2d:23:e0:06:d7:e8:29:9f:
         ed:4c:0c:1a
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUc8aUTnezfoFJ4DeCV3F3EJWzmzgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGVkY2IyZjdjMDNhNGI2ZjQ5MzNkODA1NDZkYTQwYTQ0
MTM1NGY4NWY3ZTg4NTY3N2YwHhcNMjYwMjA1MTgxNDQ5WhcNMjcwMjA0MTgxOTQ5
WjAzMTEwLwYDVQQDEyhDMjM3RTExQ0FDMUY4Njg4QkIzM0UxNUY5RTRBQzI3RDg5
ODI4MkVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw+Ye5cV3oMB
joZrWxU3zbKSIyDC6hfADQvWtclmxZbRltUw3V/0T5MkJq/k0j1f4TZ1p3xTg0/3
js+OCL1hoX3KlhvzmHfsgln6247uAv/1Nwshx2BVHm4qAb1tGlJpDTn3WqGA/4WE
5VLJYsaYSlIyqrjQjKnpJ67u/Jay9YEQSaNL56gs/lrsmBp6tkAY+OjDaS2PR+gr
In7vmlAA4ACoHIqJxgOeaNUIfCzzZ+zgOt2AZmYY/YiMrz4FY27ZE7jYQGEyYfKZ
8thueGkbZpQ5U61eU9ViBCl+p9mwgYMjNi7pee1E6GORhbZSqSh6YIzqlqPQYUls
ei8tK6Ul3wIDAQABo4ICuzCCArcwHQYDVR0OBBYEFMI34RysH4aIuzPhX55Kwn2J
goLqMB8GA1UdIwQYMBaAFMzrmr7lO6iU07zAkwYfbd5xtw5qMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzgyMWVlZjdlMDYwMzQ1ZTRiZTU2OWNkMzQ3Y2NiZTM2LzAv
Q0NFQjlBQkVFNTNCQTg5NEQzQkNDMDkzMDYxRjZEREU3MUI3MEU2QS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzI3OWMxNGE3LWM2ZGEtNDE1NS1iODc1LTg1ZDc1MDc4ZWIzNi9kZWRj
YjJmN2MwM2E0YjZmNDkzM2Q4MDU0NmRhNDBhNDQxMzU0Zjg1ZjdlODg1Njc3Zi5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84MjFlZWY3ZTA2MDM0NWU0YmU1Njlj
ZDM0N2NjYmUzNi8wLzMyMzYzMDM3M2EzNzM0NjMzMDNhMzEzMzMwM2EzYTJmMzQz
NDJkMzQzNDIwM2QzZTIwMzEzMDMxMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYHdMABMDANBgkq
hkiG9w0BAQsFAAOCAQEArGlXaJBBprylPBTcZnbNgcs/0OUhgRjcSjQC7YcaLAH2
VanCPZKoBa+WLmsOuUzTdegimda9/ufCpxv9++8OfRBhU34YTOxyjBMYTotACR30
s6EhhOf/ZzoojW6Y0mgE1UHuf1d8VbI1D2wHUsXezx1z06ywpfZ5XgJ/TFpw42xX
j0KRQ1G13YSk/qVVaJuOqLtv54kAXhm53+5BhvtEgtgDdzX8IaV/j69kHRKvKBPb
jYDLV2wPa84CA+mwPQEPCMLsnPmytY9ISeGftWF/exhIe3Yyhc1n2XunhAypOBOA
5oT2nwtZxJmyzUWzxmukJfbZtC0j4AbX6Cmf7UwMGg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:47 2026 by rpki-client