Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131363a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3131363a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          YZzamZsDwd8D/fP2VhrWDEfOCpLXX4J5dkzlnPGclec=
Subject key identifier:   5E:21:56:43:BC:85:58:56:53:27:5B:3B:73:B0:ED:02:E4:FC:83:9D
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       661CF407877779A58E9F0E3F169F67318FA33C78
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131363a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 02 Apr 2026 13:35:54 +0000
ROA not before:           Thu 02 Apr 2026 13:30:54 +0000
ROA not after:            Thu 01 Apr 2027 13:35:54 +0000
asID:                     9009
IP address blocks:        2602:ff62:116::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1c:f4:07:87:77:79:a5:8e:9f:0e:3f:16:9f:67:31:8f:a3:3c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr  2 13:30:54 2026 GMT
            Not After : Apr  1 13:35:54 2027 GMT
        Subject: CN=5E215643BC85585653275B3B73B0ED02E4FC839D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:c0:d2:d8:7c:ca:00:2e:e0:92:0d:99:72:eb:
                    ee:f5:19:d0:a1:80:16:ff:ae:ff:0e:75:59:38:e3:
                    78:42:e3:0a:78:d3:1b:7f:aa:4e:13:ed:1c:14:3b:
                    81:69:be:06:c1:15:fe:46:43:e0:e6:ad:91:9c:f1:
                    d6:1a:02:bd:0a:72:51:b8:79:29:52:a6:3a:f2:35:
                    2d:dd:0b:12:b2:82:73:4f:79:b6:b1:e0:b3:24:b5:
                    72:25:fe:c6:df:1b:af:3b:bf:41:87:25:ef:a4:7c:
                    5a:e6:24:3a:6d:a9:01:c6:d9:76:0d:33:d4:53:3b:
                    9f:bd:b6:87:0c:fa:14:4e:cb:fa:e1:6c:50:cf:c2:
                    35:b3:a6:d4:91:29:e8:72:62:93:3e:39:d1:86:d5:
                    d1:1b:da:29:5a:0e:8c:1d:2b:66:21:10:8b:51:36:
                    66:87:4e:bf:38:96:e7:74:0a:af:44:f6:28:f8:07:
                    8d:d7:b6:27:19:51:2b:f9:87:65:f6:80:45:a5:48:
                    92:18:40:66:05:55:9b:b9:b1:9a:ab:4f:b5:38:6c:
                    88:fa:f3:e9:1d:12:90:44:8e:66:11:d9:be:80:d1:
                    0b:04:96:f3:62:80:b5:55:82:07:9f:80:33:5b:6d:
                    ba:ac:76:83:55:43:b3:21:e6:4a:4e:28:da:ab:10:
                    12:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:21:56:43:BC:85:58:56:53:27:5B:3B:73:B0:ED:02:E4:FC:83:9D
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131363a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:116::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:70:58:27:ad:3b:21:85:74:31:5f:30:b5:ef:fc:41:d7:9b:
         59:06:f4:d3:a9:10:87:64:47:eb:3d:0b:32:f7:4c:ed:fd:e3:
         a0:9c:bd:67:62:fb:f1:8a:44:e3:46:06:c5:87:de:84:da:06:
         4e:28:9f:b1:1d:7c:56:4e:ce:f8:fb:d2:ce:47:75:41:ac:30:
         ae:66:86:df:5e:59:b9:a0:24:bc:f6:5d:2b:02:9f:03:ae:c7:
         9b:41:b9:c0:17:77:8e:ca:db:cd:7e:9d:21:ec:6d:64:5f:e5:
         b8:e7:97:06:9f:92:a1:e2:10:0c:a2:ea:45:11:4e:99:32:83:
         6e:e6:f6:f7:e9:ea:d8:37:13:83:72:e6:61:bb:44:d1:6c:f7:
         25:1f:9b:49:20:de:b3:c7:72:74:e2:22:01:5a:4b:42:1b:0d:
         05:ff:9f:49:96:19:9d:24:7d:f4:35:6e:16:e0:cc:df:be:f1:
         b0:4c:f3:0e:eb:62:32:50:a7:37:b2:f4:2e:19:79:a3:4d:02:
         98:5b:69:97:12:9c:71:f8:cc:f7:a8:5c:47:2e:75:9c:e6:7c:
         93:29:3c:80:5b:32:ae:3d:2a:1b:c5:36:a6:ea:f8:48:3f:e3:
         22:2a:50:88:17:3f:e4:fe:97:32:8b:07:e9:8f:d4:13:27:2c:
         36:0f:61:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:47:43 2026 by rpki-client