Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131353a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3131353a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          kxGqZBGRp901P3WcIFpkW/xIe0ACMmJaFeAIc+hkTwM=
Subject key identifier:   94:2F:51:86:50:24:E9:C8:75:38:FC:D8:8F:B6:72:47:29:18:50:C7
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       01B03752901EA94A5DDD03FD328B145905F1D07E
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131353a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 02 Apr 2026 13:35:55 +0000
ROA not before:           Thu 02 Apr 2026 13:30:55 +0000
ROA not after:            Thu 01 Apr 2027 13:35:55 +0000
asID:                     9009
IP address blocks:        2602:ff62:115::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b0:37:52:90:1e:a9:4a:5d:dd:03:fd:32:8b:14:59:05:f1:d0:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr  2 13:30:55 2026 GMT
            Not After : Apr  1 13:35:55 2027 GMT
        Subject: CN=942F51865024E9C87538FCD88FB67247291850C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:c4:f8:8a:d2:99:e9:77:b2:16:fc:ca:8c:
                    76:af:74:ba:54:18:b0:54:da:4a:ff:27:bf:39:9f:
                    87:1f:04:57:90:ac:e1:03:97:8a:a5:df:0d:14:d8:
                    36:83:4f:2d:8e:e8:19:4f:f3:d2:7d:51:1c:6a:06:
                    cc:ef:25:d7:21:c3:73:4a:8a:80:da:ae:66:f9:c3:
                    6a:ab:f6:18:3c:ee:8a:6c:de:96:82:69:d8:f8:4e:
                    d5:0b:13:c4:a7:b3:96:8d:fc:55:a0:9d:09:c5:c7:
                    c0:a0:82:69:87:d4:3f:e9:50:61:68:9a:e5:8a:83:
                    00:18:7e:c8:bf:2a:82:31:5c:a9:81:ce:dd:b2:a8:
                    04:2e:de:58:da:45:e4:3c:e9:3f:cb:7b:cb:38:ba:
                    62:b5:59:a1:c0:04:15:97:d3:2a:72:11:c4:90:74:
                    7e:83:03:48:93:f1:f6:eb:83:2c:b6:45:2b:7d:2d:
                    a1:37:87:cb:db:8d:a5:3f:1f:4f:35:8e:53:3c:50:
                    23:a9:8c:3f:bc:4e:50:7c:49:45:58:21:03:5b:b1:
                    28:8a:dd:d1:9d:bd:f7:97:d1:12:f1:1b:96:73:7d:
                    40:58:43:03:11:7a:17:e7:fb:c8:87:f4:55:7f:1f:
                    34:41:cb:13:1f:7a:0c:7e:b6:5c:3b:2c:b9:55:20:
                    11:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2F:51:86:50:24:E9:C8:75:38:FC:D8:8F:B6:72:47:29:18:50:C7
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131353a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:115::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:1f:bc:d2:6e:d0:7d:ee:7a:0f:bd:55:6a:37:d1:f2:5d:c0:
         ee:0c:83:13:da:00:f9:38:a3:93:83:01:3a:81:9a:ea:86:b9:
         bf:20:fc:43:ef:52:73:2e:b4:4f:68:21:dc:44:75:13:a1:46:
         3b:ec:20:53:ef:68:16:a1:0e:6a:af:ce:22:48:96:89:a2:de:
         3d:83:ed:d7:74:f9:20:74:43:49:61:6c:cf:2d:17:cc:4c:83:
         d0:d6:c5:d6:48:cf:97:b0:af:7e:80:0b:0f:aa:ce:c9:e7:83:
         bd:f4:48:40:98:be:db:d9:2e:88:a7:60:ce:b0:88:0f:a9:8e:
         1a:e8:31:4f:10:00:41:e8:29:e3:94:3c:a5:63:ac:b3:b9:e9:
         ea:5c:f5:da:dc:3b:57:85:f9:54:36:32:69:ed:5f:46:b5:f0:
         e6:4e:10:02:9c:94:ef:b2:76:fd:04:80:54:7d:89:a0:ba:35:
         85:18:7c:f9:42:23:f9:5e:f3:45:a6:03:eb:2a:39:e4:98:d9:
         3e:d9:c8:68:f1:0f:93:21:c0:38:1f:c3:e0:5e:01:3c:c4:bf:
         85:82:b2:13:23:7b:3d:5c:d1:3b:b5:bb:01:22:bd:6f:19:ea:
         3f:c4:52:01:78:cf:3c:75:9e:74:2c:43:a6:c4:83:25:8b:74:
         8b:71:41:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:34 2026 by rpki-client