Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132343a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3132343a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          0wuO+VtiDac+opcuZ6UD7dmX5sSGlO47n5Ibr4ZCQDk=
Subject key identifier:   09:76:13:0A:28:62:1B:F6:91:FB:A4:CF:53:2C:D4:34:F9:70:C7:F1
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       1EEB7455C6BBB7D0EB63D84C47173691069BA53F
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132343a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 02 Apr 2026 13:35:54 +0000
ROA not before:           Thu 02 Apr 2026 13:30:54 +0000
ROA not after:            Thu 01 Apr 2027 13:35:54 +0000
asID:                     9009
IP address blocks:        2602:ff62:124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:eb:74:55:c6:bb:b7:d0:eb:63:d8:4c:47:17:36:91:06:9b:a5:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr  2 13:30:54 2026 GMT
            Not After : Apr  1 13:35:54 2027 GMT
        Subject: CN=0976130A28621BF691FBA4CF532CD434F970C7F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c5:29:5e:34:3e:2f:96:2a:da:98:2c:9c:c2:
                    c9:de:ec:a3:b9:59:36:39:f2:b6:7b:9b:38:03:8c:
                    b1:d2:d1:d9:b5:c1:d3:06:62:02:e9:73:2f:a0:3b:
                    4c:01:8d:67:27:8e:39:d5:9d:55:61:26:6c:f4:6d:
                    30:56:e7:40:b0:3c:74:a4:c5:94:79:fe:28:ad:e1:
                    8e:ef:93:6d:6e:6c:42:43:df:2b:2d:7e:a3:39:07:
                    a0:0f:ff:a0:9c:82:8e:d3:05:27:6a:20:c2:d3:00:
                    e0:24:92:ce:4e:bc:91:ea:71:4c:db:71:60:75:90:
                    87:d4:dd:b2:09:f1:c2:b7:9c:52:45:17:80:43:a1:
                    b9:c5:f0:4e:1f:77:c8:01:7e:61:c1:94:ac:d5:d7:
                    c1:44:63:c8:70:0b:72:b1:da:05:82:09:9c:a1:98:
                    f7:08:3b:ab:e7:a3:0e:35:97:cb:1b:58:f8:fe:d9:
                    4e:a0:eb:f9:83:f7:b8:64:05:52:3d:61:f1:b2:d5:
                    51:25:ac:eb:df:14:e0:37:b1:f1:99:7d:1d:69:87:
                    d1:77:f8:04:c2:ed:bd:fc:3c:07:cc:b4:a1:37:87:
                    8c:2c:56:56:aa:81:b9:00:51:07:c9:d0:c9:c5:2a:
                    54:3f:18:61:39:50:9e:b1:c6:28:b6:4f:91:c6:2b:
                    69:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:76:13:0A:28:62:1B:F6:91:FB:A4:CF:53:2C:D4:34:F9:70:C7:F1
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132343a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:124::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:92:1f:dc:0a:6d:bc:79:0e:a1:f5:70:91:4c:d7:86:ec:2f:
         48:f0:b1:f9:95:d3:e0:e5:9e:92:65:33:d3:6e:a7:00:9e:06:
         83:e9:9e:8f:fe:70:df:24:7e:7a:11:1b:22:fe:8d:60:60:99:
         b6:6f:04:51:0c:85:87:85:2b:c4:b8:c5:6f:c8:1c:85:a9:44:
         64:7b:5d:9e:9a:e9:78:62:eb:87:88:1d:5e:b8:aa:d8:fe:f2:
         89:47:a5:25:f5:0b:27:42:6e:f1:19:fb:8e:ea:13:bd:26:3a:
         d5:75:0b:1f:0d:68:0b:0a:22:fb:18:29:c4:b0:66:03:6c:75:
         0d:3f:58:2d:4f:90:b1:fa:42:c3:4c:50:1b:4f:16:ae:e3:72:
         ed:29:4a:e6:c0:a5:34:65:57:65:de:b2:1b:e2:8e:25:00:ea:
         90:43:c2:45:ad:af:80:05:95:c3:ea:39:76:d7:03:5d:36:34:
         48:12:58:3a:31:ae:a3:e3:90:4e:9d:ed:54:bc:13:95:f5:aa:
         75:9d:c8:f8:6c:db:32:b0:e1:73:29:7d:77:35:9c:da:20:88:
         9c:f7:8b:4e:5c:2b:8b:8f:18:c1:f9:6b:07:aa:cb:b4:e4:20:
         23:7a:75:01:86:de:90:93:5c:f3:7b:bf:6a:73:01:90:2e:2d:
         4e:e9:d6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:18:35 2026 by rpki-client