Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131343a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3131343a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          wfQNGznOqukknFIF+HTCP0VBNyr5j2/I2k+maCEIf3U=
Subject key identifier:   FB:9F:1C:06:4B:AC:F3:DF:C1:13:B5:CC:30:96:73:79:9D:21:47:27
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       593AA56021F442382A21A49F46F546345046BCB0
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131343a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 02 Apr 2026 13:35:54 +0000
ROA not before:           Thu 02 Apr 2026 13:30:54 +0000
ROA not after:            Thu 01 Apr 2027 13:35:54 +0000
asID:                     9009
IP address blocks:        2602:ff62:114::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3a:a5:60:21:f4:42:38:2a:21:a4:9f:46:f5:46:34:50:46:bc:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr  2 13:30:54 2026 GMT
            Not After : Apr  1 13:35:54 2027 GMT
        Subject: CN=FB9F1C064BACF3DFC113B5CC309673799D214727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bf:12:c5:c3:f5:d9:17:e8:10:8f:ad:7a:ea:
                    3a:66:da:1b:0d:8d:3e:c2:05:01:3c:c9:b8:ec:e8:
                    f1:c5:07:ae:e8:2b:9e:97:68:d2:a4:5b:06:44:eb:
                    b8:e0:d1:a4:2c:9d:a9:d2:a7:1e:ac:b0:87:6e:d2:
                    12:41:33:d4:d9:b7:4d:4d:02:a0:d1:7c:9f:15:4e:
                    c4:58:35:c1:11:b7:e2:4d:a5:7f:16:7b:0d:a7:ac:
                    37:e7:a9:0c:5f:c8:34:47:79:48:3e:a9:1e:4b:8a:
                    92:24:a9:a1:3a:65:01:1b:51:5f:72:04:89:09:0e:
                    9b:e9:b9:ca:90:59:63:ff:8f:20:6e:5b:4e:7b:68:
                    ae:8d:44:e4:1b:cb:c0:a4:9e:19:3e:c4:1f:d8:4a:
                    25:c6:d1:89:20:6d:9b:b7:22:79:e4:4b:c5:b2:64:
                    b8:7a:a1:34:45:09:8b:0f:4a:f2:9b:65:5f:b1:63:
                    a6:7d:8d:7e:e3:bf:98:b1:61:83:a2:cf:bf:fa:6e:
                    fe:1c:e2:a3:5f:56:90:c1:57:de:ec:a9:88:9f:90:
                    e3:10:44:15:67:22:ac:fb:1b:d4:39:ac:3a:0b:72:
                    e1:04:31:f1:41:d7:45:80:d3:cb:81:1a:0c:0d:8e:
                    78:d9:fb:4b:56:de:3b:c8:85:92:06:73:96:92:66:
                    f9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9F:1C:06:4B:AC:F3:DF:C1:13:B5:CC:30:96:73:79:9D:21:47:27
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131343a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:114::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:d3:4a:2b:bd:05:17:26:ef:03:83:72:8e:71:f5:55:77:06:
         78:fd:cd:cb:1b:e3:03:ee:a6:13:81:4e:2e:7d:f4:3f:67:14:
         5b:fc:98:11:05:55:34:7e:35:e9:09:2e:79:bc:be:80:b9:47:
         42:d3:a7:45:2d:ec:d8:bf:9b:01:e2:6f:4c:13:88:ef:c8:12:
         e1:39:0e:a3:d6:60:23:11:7d:49:b4:dd:a7:c6:56:c5:56:5e:
         92:eb:f5:11:a5:e6:2e:9f:1d:e3:78:84:44:e3:f3:57:a9:81:
         00:2d:45:df:2f:12:bd:dd:d8:28:a5:15:0f:a3:99:28:ea:be:
         e4:d5:be:4a:ea:67:ec:c6:c4:34:f6:3d:2e:5a:12:17:9c:d4:
         24:65:f4:0d:f5:be:7b:aa:a1:9c:fb:dc:2d:06:ae:b3:c3:66:
         05:f9:32:65:c7:ef:27:f0:47:29:28:78:6a:c1:c6:86:96:ff:
         a5:2e:99:6f:28:b2:e0:ab:df:61:28:80:d0:76:4e:f4:55:4f:
         09:0a:97:a7:2b:54:78:36:21:3d:56:f0:89:1f:55:b7:5b:d7:
         d6:04:1a:a1:b9:ed:0f:e1:e5:14:b1:74:58:a3:9a:84:0b:69:
         e6:1f:f8:41:8b:ce:be:7b:5b:39:1e:9d:ee:13:c3:3b:ad:93:
         91:07:c2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:22 2026 by rpki-client