Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130633a3a2f34382d3438203d3e20333936333536.roa
File:                     323630323a666636323a3130633a3a2f34382d3438203d3e20333936333536.roa (raw, json)
Hash identifier:          69Ct38Q7c1nadPBgFXtE8gYA0wW/ITB15zkP9YzoJJM=
Subject key identifier:   52:EC:46:72:D9:43:A4:69:F5:EC:AE:55:46:13:D8:AF:C6:22:2F:03
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       51D7A81920DA0CEA1ED4129F7FAFBC83273A4035
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130633a3a2f34382d3438203d3e20333936333536.roa
Signing time:             Tue 14 Apr 2026 10:35:56 +0000
ROA not before:           Tue 14 Apr 2026 10:30:56 +0000
ROA not after:            Tue 13 Apr 2027 10:35:56 +0000
asID:                     396356
IP address blocks:        2602:ff62:10c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d7:a8:19:20:da:0c:ea:1e:d4:12:9f:7f:af:bc:83:27:3a:40:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr 14 10:30:56 2026 GMT
            Not After : Apr 13 10:35:56 2027 GMT
        Subject: CN=52EC4672D943A469F5ECAE554613D8AFC6222F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:64:df:15:e0:da:73:43:d6:61:da:2c:f6:d4:
                    c6:0f:1e:81:d6:fb:27:4b:8b:b2:a0:77:c0:e6:cb:
                    c5:76:36:29:90:3f:9e:43:df:b9:a6:16:d0:e0:c1:
                    2f:cf:e0:7f:6f:42:29:35:01:d4:29:5e:f8:5a:32:
                    81:7a:ad:8d:1e:f3:fc:c3:40:d9:01:0f:a9:06:c3:
                    fe:78:90:a3:fb:9e:90:05:9e:f2:d9:0a:ff:b1:65:
                    57:e2:4b:b2:4d:74:17:88:95:25:e2:fc:2e:af:fc:
                    a4:09:17:d1:99:2f:31:65:16:46:24:f2:78:a2:1a:
                    4e:7b:00:bf:ff:52:e1:b3:6c:00:e6:77:4e:8a:9e:
                    ec:61:4a:76:63:cd:68:68:32:c8:f9:74:1e:77:c1:
                    e9:82:64:4b:e7:03:2b:0c:d5:7c:62:9f:d0:27:0d:
                    5a:ed:a8:07:1a:40:06:cf:a3:b1:b1:2a:68:77:2d:
                    1e:94:de:bb:44:29:8e:99:af:b5:cc:40:d2:5b:a4:
                    11:e5:0c:6b:ff:8c:20:4e:08:dd:73:82:74:a7:d5:
                    aa:89:58:60:7e:8f:1a:f2:39:97:0a:09:21:85:85:
                    5f:8b:28:b4:16:ed:a1:e9:a8:5e:07:6b:ac:c6:66:
                    ad:cc:c3:0d:64:d0:ef:7a:40:bd:2c:5c:31:42:7a:
                    53:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EC:46:72:D9:43:A4:69:F5:EC:AE:55:46:13:D8:AF:C6:22:2F:03
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130633a3a2f34382d3438203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10c::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:1c:88:9d:c3:ff:ee:43:74:65:45:eb:1b:32:be:8d:62:52:
         67:de:48:a6:fa:34:22:9b:52:ad:d7:1b:aa:02:95:36:33:dd:
         dc:df:5a:cb:c5:43:a6:2c:13:2c:b1:6e:2e:08:cd:aa:59:a7:
         fe:ef:e2:12:5c:76:e5:26:fa:e0:2d:3c:82:b3:29:2a:06:8e:
         32:f5:dc:0c:47:fb:f1:a3:f0:c1:93:9f:1e:22:68:e1:21:81:
         fb:db:eb:e2:43:88:bc:16:d5:c6:ee:32:c1:47:37:6e:55:f4:
         22:2f:35:8c:37:cd:e4:76:07:01:72:2a:be:2a:14:41:0d:4e:
         88:0c:51:75:fa:85:d0:38:ad:c1:b3:0c:21:2a:d5:8a:ee:b6:
         a3:32:1b:f4:dc:23:f3:3f:6e:57:84:31:2f:8c:1f:14:8b:c8:
         14:8a:b0:be:66:19:7d:15:3d:6e:56:f1:72:f1:cc:75:4d:21:
         a2:06:e5:b4:ac:fe:05:88:91:85:23:eb:24:c5:24:14:21:34:
         47:cb:f5:3b:5f:9d:7c:e2:51:36:df:e3:bb:19:fb:f4:72:93:
         ab:76:24:81:50:9e:b7:2a:69:79:2a:ea:d6:78:3c:5a:22:9f:
         7b:57:99:f0:fe:fd:9f:d0:10:00:a4:79:db:65:79:0e:2d:e7:
         36:43:6c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:44:48 2026 by rpki-client