Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130663a3a2f34382d3438203d3e20333936333536.roa
File:                     323630323a666636323a3130663a3a2f34382d3438203d3e20333936333536.roa (raw, json)
Hash identifier:          RYA3NIen0foZ3ajH1Wm8zQZPdj/pwicU9beY9FbTlck=
Subject key identifier:   F5:24:93:EF:A3:EA:6B:56:DE:25:F9:88:71:07:BE:A2:33:26:49:2F
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       4F198863F0C53372578084E4B48E57E2EAC9783D
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130663a3a2f34382d3438203d3e20333936333536.roa
Signing time:             Tue 14 Apr 2026 10:35:57 +0000
ROA not before:           Tue 14 Apr 2026 10:30:57 +0000
ROA not after:            Tue 13 Apr 2027 10:35:57 +0000
asID:                     396356
IP address blocks:        2602:ff62:10f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:19:88:63:f0:c5:33:72:57:80:84:e4:b4:8e:57:e2:ea:c9:78:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr 14 10:30:57 2026 GMT
            Not After : Apr 13 10:35:57 2027 GMT
        Subject: CN=F52493EFA3EA6B56DE25F9887107BEA23326492F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:84:73:28:73:00:0e:13:3d:de:27:87:a4:b2:
                    e0:20:ae:76:43:d4:ce:46:08:3d:af:f9:e8:14:81:
                    92:35:ae:27:8b:47:b6:5c:31:d1:f9:9f:45:45:4c:
                    05:be:4f:69:69:a7:a3:ab:cf:a2:41:df:c4:c8:fe:
                    c7:ae:b8:fc:12:4e:31:8c:6a:37:54:f8:cb:78:29:
                    4a:44:2f:c6:18:e3:b6:f8:79:00:c8:00:13:ad:48:
                    a7:19:83:84:e5:ec:40:b6:76:83:d3:19:0a:e9:aa:
                    f0:13:08:0b:8f:1d:62:aa:57:c5:a5:60:89:72:d7:
                    93:37:69:67:0e:37:c9:7f:7b:c5:7b:f4:fd:e4:a5:
                    23:70:18:90:6e:7d:09:96:f5:36:6f:32:67:a9:ae:
                    74:29:0a:8e:ce:b3:d5:a5:bd:bb:4c:09:87:5a:a3:
                    9c:73:13:66:8e:e3:7b:5e:f5:c7:de:eb:53:13:96:
                    55:68:da:07:4d:19:8f:99:8d:11:73:0f:c9:59:e4:
                    66:54:73:40:21:87:d3:82:b7:c0:14:0d:1b:ec:29:
                    a5:be:d9:6d:1d:07:cb:ed:d2:23:9b:1e:48:26:55:
                    2b:cf:5b:e3:ec:c7:57:61:bd:9d:31:85:a8:f9:57:
                    3b:42:9f:9e:1b:0b:dd:3f:a8:fc:14:07:6c:dd:58:
                    28:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:24:93:EF:A3:EA:6B:56:DE:25:F9:88:71:07:BE:A2:33:26:49:2F
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130663a3a2f34382d3438203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10f::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:09:1e:4d:69:f1:55:fb:30:d9:b6:19:e3:55:46:d2:14:d6:
         8b:ef:20:18:ab:c9:91:53:f8:f2:78:ab:96:5c:f7:c6:40:44:
         b7:51:36:d7:78:68:fb:bb:f1:c4:df:0a:4e:a5:5b:a8:73:8d:
         84:e0:d7:7c:6b:a1:c1:db:2e:fa:12:e8:bc:29:e4:fe:92:e4:
         9d:6c:c8:cf:4c:a1:e2:f7:76:0b:c1:db:7a:c7:83:2f:d2:15:
         91:3c:8f:d8:98:49:43:f5:b8:52:f7:f8:5a:60:60:49:e6:ac:
         0f:82:87:b2:16:62:50:ea:07:fe:e1:bf:d3:68:74:8f:6a:43:
         55:27:1e:d5:e3:63:58:40:16:cb:8c:e2:b9:8f:3f:25:06:e1:
         cb:f2:34:4e:02:fc:4e:8d:01:d4:cf:69:2e:c2:cb:90:9e:4d:
         bf:dd:53:62:c1:a5:39:af:38:73:e2:c1:ab:c7:27:c3:67:ac:
         2e:76:67:20:ff:a0:59:b8:8a:67:97:40:e8:e3:9a:94:b8:3b:
         68:a0:f4:57:0d:36:a0:06:cc:97:24:8a:06:43:f5:c2:b1:10:
         b8:e7:e5:5b:dd:c8:6d:01:fb:ae:0f:12:b3:84:03:c4:bc:72:
         5a:e1:c8:f7:b1:dc:be:c2:60:98:37:c2:70:02:87:4e:47:be:
         7d:ec:c8:54
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUTxmIY/DFM3JXgITktI5X4urJeD0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjYwNDE0MTAzMDU3WhcNMjcwNDEzMTAzNTU3
WjAzMTEwLwYDVQQDEyhGNTI0OTNFRkEzRUE2QjU2REUyNUY5ODg3MTA3QkVBMjMz
MjY0OTJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIRzKHMADhM9
3ieHpLLgIK52Q9TORgg9r/noFIGSNa4ni0e2XDHR+Z9FRUwFvk9paaejq8+iQd/E
yP7Hrrj8Ek4xjGo3VPjLeClKRC/GGOO2+HkAyAATrUinGYOE5exAtnaD0xkK6arw
EwgLjx1iqlfFpWCJcteTN2lnDjfJf3vFe/T95KUjcBiQbn0JlvU2bzJnqa50KQqO
zrPVpb27TAmHWqOccxNmjuN7XvXH3utTE5ZVaNoHTRmPmY0Rcw/JWeRmVHNAIYfT
grfAFA0b7CmlvtltHQfL7dIjmx5IJlUrz1vj7MdXYb2dMYWo+Vc7Qp+eGwvdP6j8
FAds3VgoOwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFPUkk++j6mtW3iX5iHEHvqIz
JkkvMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzMDY2M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM2MzMzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL/YgEPMA0G
CSqGSIb3DQEBCwUAA4IBAQBLCR5NafFV+zDZthnjVUbSFNaL7yAYq8mRU/jyeKuW
XPfGQES3UTbXeGj7u/HE3wpOpVuoc42E4Nd8a6HB2y76Eui8KeT+kuSdbMjPTKHi
93YLwdt6x4Mv0hWRPI/YmElD9bhS9/haYGBJ5qwPgoeyFmJQ6gf+4b/TaHSPakNV
Jx7V42NYQBbLjOK5jz8lBuHL8jROAvxOjQHUz2kuwsuQnk2/3VNiwaU5rzhz4sGr
xyfDZ6wudmcg/6BZuIpnl0Do45qUuDtooPRXDTagBsyXJIoGQ/XCsRC45+Vb3cht
AfuuDxKzhAPEvHJa4cj3sdy+wmCYN8JwAodOR7597MhU
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:14 2026 by rpki-client