Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130623a3a2f34382d3438203d3e20333936333536.roa
File:                     323630323a666636323a3130623a3a2f34382d3438203d3e20333936333536.roa (raw, json)
Hash identifier:          Wn3pLZLJ1FT04qFrJdBlf1V9TSYHohEFpoXWn90+Nno=
Subject key identifier:   75:7E:8D:D3:04:20:7D:A6:50:00:8E:F1:6C:E7:2B:D5:68:2C:C3:DF
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       796621C9DC7A697D45D1DD8AB5217C445D8EE1C1
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130623a3a2f34382d3438203d3e20333936333536.roa
Signing time:             Tue 14 Apr 2026 10:35:56 +0000
ROA not before:           Tue 14 Apr 2026 10:30:56 +0000
ROA not after:            Tue 13 Apr 2027 10:35:56 +0000
asID:                     396356
IP address blocks:        2602:ff62:10b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:66:21:c9:dc:7a:69:7d:45:d1:dd:8a:b5:21:7c:44:5d:8e:e1:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr 14 10:30:56 2026 GMT
            Not After : Apr 13 10:35:56 2027 GMT
        Subject: CN=757E8DD304207DA650008EF16CE72BD5682CC3DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:10:c5:42:72:6f:6f:a8:fc:40:20:35:17:2b:
                    ba:0d:66:b4:46:2c:21:20:fd:8e:04:ca:31:1e:7f:
                    d3:96:7a:34:20:7f:96:d8:40:74:b8:f0:5c:33:8a:
                    e2:61:fb:2e:ba:f8:43:8f:f8:0f:cf:fb:39:81:08:
                    91:c8:bf:f7:08:e5:dc:7d:c2:11:54:1e:7f:14:84:
                    ba:61:21:d1:f3:f5:05:cd:ad:78:ac:bc:b2:3e:55:
                    0f:b7:6e:d7:80:c3:53:ee:01:61:8d:ba:4b:a6:17:
                    0b:a3:73:07:9b:66:6e:d3:20:6d:85:20:28:d2:0d:
                    fa:ab:fa:d2:58:36:c1:fd:dc:b6:24:87:a5:93:0c:
                    55:5c:32:d6:3b:32:83:dd:75:25:52:76:cb:d9:04:
                    c3:e4:41:a5:e2:a4:9a:1a:cd:f7:13:34:0b:dc:89:
                    02:71:28:f1:a5:cb:bb:6e:e8:c7:3a:f0:8c:df:63:
                    99:ad:87:8b:7b:9a:9c:e4:61:68:ef:de:ac:08:9f:
                    0c:85:df:08:cf:7d:49:a2:63:cd:3a:f2:ed:99:9d:
                    ba:17:2c:59:b6:ad:62:9a:74:2b:a9:d3:e4:d9:67:
                    d1:6b:db:9e:c7:1d:00:54:4c:25:38:79:d5:f9:99:
                    5b:aa:40:60:f4:b8:3d:75:5c:92:40:de:7f:f4:c1:
                    90:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7E:8D:D3:04:20:7D:A6:50:00:8E:F1:6C:E7:2B:D5:68:2C:C3:DF
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130623a3a2f34382d3438203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10b::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:30:a7:fc:c4:6c:a0:e1:2c:6e:f6:68:40:a2:fb:f3:b0:62:
         e4:8d:74:e7:96:5f:70:b4:ff:af:6a:4e:7c:f7:04:e3:c6:b0:
         b9:c1:b5:ac:7f:8f:1b:7a:49:04:9a:41:7c:62:d6:fb:c1:0c:
         30:81:45:44:99:7f:6a:29:38:58:b8:b1:fc:a4:75:cb:e2:99:
         25:3e:13:76:ba:07:6c:c8:b6:2e:31:bb:3d:d0:09:59:f2:53:
         86:81:f6:48:41:da:c9:2b:e7:d4:7e:25:70:04:9d:be:24:0e:
         f1:49:36:3a:cf:4e:76:75:a6:55:76:67:12:8c:5e:cc:d9:e5:
         c6:ea:73:12:62:91:af:f0:be:b1:13:02:63:4d:6f:46:44:de:
         ee:92:73:2c:6c:ad:f5:21:2d:b8:5a:0a:5f:61:50:e5:47:ee:
         eb:b9:1c:de:19:21:cb:6e:d2:48:ce:b2:bf:a3:d5:85:2e:f2:
         88:5a:48:6f:be:d9:be:cb:ab:da:90:d3:05:07:11:e1:35:65:
         e3:35:18:a8:76:51:27:33:1b:77:3c:51:af:8b:02:7b:89:33:
         0d:3a:48:bd:40:05:ae:e0:5d:08:85:ff:78:81:c0:d7:7e:9c:
         6b:03:84:d9:15:b7:ca:e3:a1:8f:fd:5c:1a:74:d5:7b:0b:d7:
         c2:3c:60:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:42 2026 by rpki-client