Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3a2f33322d3438203d3e203535323031.roa
File:                     323630373a373463303a3a2f33322d3438203d3e203535323031.roa (raw, json)
Hash identifier:          QX0tdyYSZ2EGk4MO6epXulcuR5gFujpPQKTsqO23Bwo=
Subject key identifier:   94:40:DA:B1:E1:23:7A:27:E4:4B:0D:A0:8B:39:1F:1A:40:0F:FA:FF
Certificate issuer:       /CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
Certificate serial:       36C25628A58AC4B05250121B796AE337D5017226
Authority key identifier: CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3a2f33322d3438203d3e203535323031.roa
Signing time:             Thu 05 Feb 2026 18:19:49 +0000
ROA not before:           Thu 05 Feb 2026 18:14:49 +0000
ROA not after:            Thu 04 Feb 2027 18:19:49 +0000
asID:                     55201
IP address blocks:        2607:74c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl
                          rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c2:56:28:a5:8a:c4:b0:52:50:12:1b:79:6a:e3:37:d5:01:72:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
        Validity
            Not Before: Feb  5 18:14:49 2026 GMT
            Not After : Feb  4 18:19:49 2027 GMT
        Subject: CN=9440DAB1E1237A27E44B0DA08B391F1A400FFAFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:24:11:61:41:fa:55:51:ae:3d:2e:93:77:
                    89:87:f0:01:bc:4f:e4:13:9b:49:ea:ec:c0:1e:8a:
                    63:22:ea:15:67:33:bc:84:59:9e:26:3b:1c:ea:25:
                    7d:ef:8c:4a:5f:0c:11:a4:f6:d4:6b:ee:ed:b3:8b:
                    4b:9d:1c:b2:35:48:60:da:f2:1c:35:25:0e:23:52:
                    e4:af:5e:1a:c4:d8:80:93:de:0e:2b:49:b1:38:e2:
                    c4:fd:9d:f9:ab:b7:15:ab:70:91:be:a2:40:97:58:
                    0f:7d:54:21:fa:70:7c:78:55:da:9f:50:59:db:76:
                    69:c5:bc:1e:56:6c:ff:00:73:de:4c:5e:cd:d0:ce:
                    fa:4d:6b:df:0d:14:2e:04:96:d9:99:79:60:87:a3:
                    0a:32:81:0a:9c:95:d3:a8:7a:59:2e:67:74:ee:61:
                    e8:94:8b:ab:01:34:68:dc:90:1e:11:db:da:99:60:
                    4f:48:3a:e7:37:fc:7b:5e:85:8e:57:16:fc:b5:c5:
                    7e:53:db:f8:94:1f:c4:52:28:04:38:05:61:52:71:
                    e3:83:df:e8:7c:5f:bf:96:e9:d3:06:49:8d:80:c6:
                    29:f0:4d:7d:b3:16:67:95:57:f9:a3:cc:99:e5:d3:
                    02:d1:e1:f4:dc:70:f6:eb:50:dc:87:30:f4:24:d8:
                    88:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:40:DA:B1:E1:23:7A:27:E4:4B:0D:A0:8B:39:1F:1A:40:0F:FA:FF
            X509v3 Authority Key Identifier:
                keyid:CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3a2f33322d3438203d3e203535323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:ca:c5:58:a3:39:42:53:d3:f2:9f:ea:6e:54:8d:17:b2:14:
         10:05:5e:52:9d:fa:40:2d:2d:63:6d:0f:17:ed:46:b1:0e:ae:
         32:cc:9a:ba:12:b5:e5:2d:fb:1a:55:c2:5c:f5:5a:ef:de:c4:
         85:3d:67:05:18:9b:b2:76:03:23:cc:1b:10:42:84:6e:1a:f2:
         42:bc:76:7f:20:4f:23:62:7a:ed:02:a7:c2:26:47:c7:00:3d:
         d6:cc:f6:87:27:e7:94:61:f2:1a:23:72:a9:b8:b4:18:1f:90:
         d7:78:79:f7:44:b3:37:29:ba:83:47:13:59:d0:69:b0:5b:25:
         35:af:94:ba:04:ab:4a:5d:2e:b2:3d:6b:11:5f:bd:98:c0:42:
         e8:53:c0:c0:3f:ea:86:94:3f:5b:ef:6f:d8:c2:64:bf:01:5d:
         f8:34:27:34:9e:db:8d:65:e6:83:4e:60:8f:74:07:f1:0a:e5:
         af:9e:32:13:4a:15:f4:c9:54:67:6d:49:fa:5c:1d:c8:19:3f:
         13:2f:5d:10:b0:d9:18:c8:7e:86:4a:3c:a8:5a:7a:91:e1:57:
         04:a9:f9:89:32:40:fe:40:6e:f1:b8:50:60:85:3f:a2:99:e9:
         31:d7:0d:87:40:d2:40:c6:60:a3:5f:fe:06:31:bf:de:6b:9d:
         d1:2f:3f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:23:40 2026 by rpki-client