Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132353a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3132353a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          h7vpMEeztsWHuGWuAF10xSOuBClc89WDAFcluGrC/es=
Subject key identifier:   6B:37:F8:DA:91:4C:D6:45:0E:5F:2A:EB:37:DE:5D:BE:19:4D:78:E4
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       36B95BC16951F2A19466F76AC83EA59F314F3D0A
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132353a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 02 Apr 2026 13:35:54 +0000
ROA not before:           Thu 02 Apr 2026 13:30:54 +0000
ROA not after:            Thu 01 Apr 2027 13:35:54 +0000
asID:                     9009
IP address blocks:        2602:ff62:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b9:5b:c1:69:51:f2:a1:94:66:f7:6a:c8:3e:a5:9f:31:4f:3d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr  2 13:30:54 2026 GMT
            Not After : Apr  1 13:35:54 2027 GMT
        Subject: CN=6B37F8DA914CD6450E5F2AEB37DE5DBE194D78E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b0:b5:ff:6f:ff:9e:bc:bf:75:d1:e2:46:f0:
                    34:e3:42:61:e7:06:fa:5f:a6:3d:52:6b:fb:94:f2:
                    fc:f2:4b:13:1b:89:00:78:0f:99:0d:93:ed:46:53:
                    4a:2d:b0:f1:e9:19:bb:3c:84:01:6c:68:2d:bb:4b:
                    f4:f2:4d:f0:c8:14:8f:a2:90:46:bb:3c:55:a7:60:
                    be:d9:23:d7:37:be:8a:a6:9d:cf:60:3c:0b:0c:26:
                    46:a2:95:8f:73:e0:3a:d6:bb:8c:c5:90:dc:60:9c:
                    1c:af:22:b3:99:06:75:cc:b5:90:54:9f:8e:54:d0:
                    a5:38:70:e9:a8:16:4c:18:a1:3e:ce:53:5b:52:86:
                    92:a7:99:75:6f:cb:65:35:f2:ae:fa:4a:d7:2e:40:
                    39:86:23:e2:2d:54:23:08:bf:c7:ee:0d:89:c4:85:
                    44:cf:07:26:d5:44:5c:fc:b5:87:ee:56:f8:08:ef:
                    20:17:47:b9:1c:38:80:34:9f:f4:29:1e:3c:7a:d6:
                    91:d7:37:ac:74:a1:40:e0:4d:bd:f5:9b:a1:86:74:
                    c9:f6:fb:df:32:b1:a0:a4:05:93:81:e1:0c:0b:80:
                    75:34:6e:79:45:af:61:24:31:5a:8b:b6:49:c0:9f:
                    b3:02:02:93:90:3d:0d:37:88:5f:4f:6c:c8:08:38:
                    e1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:37:F8:DA:91:4C:D6:45:0E:5F:2A:EB:37:DE:5D:BE:19:4D:78:E4
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132353a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:125::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:10:a1:b6:f7:05:49:d2:bd:8c:b8:d3:5a:ad:b1:94:a1:a4:
         a2:e5:e4:a4:6d:e3:cf:6a:54:fb:2f:76:dd:f0:16:91:24:31:
         8a:b8:ab:e5:2b:73:87:37:fa:bf:32:cf:fa:77:b8:3c:53:ba:
         31:89:98:71:78:52:5d:2d:48:a2:c3:7f:21:38:19:6b:97:33:
         3a:d1:f6:88:76:a5:c1:c1:54:c4:ce:2b:10:5b:57:64:3c:4c:
         bc:95:a2:de:68:df:78:e2:33:2e:cd:a8:55:27:21:d8:d0:57:
         cc:17:c7:b6:3c:45:2c:56:a3:20:cc:bf:96:0d:bc:61:42:1a:
         48:d0:fb:ee:07:df:1f:77:14:e9:32:e1:8a:23:0f:e6:9e:de:
         e0:0f:ff:ef:b7:59:6b:c5:ea:31:91:8a:0e:32:2b:37:b3:c0:
         4d:24:ac:5e:f2:e2:f4:7d:70:5d:8b:56:01:73:85:02:51:81:
         8f:e1:0a:31:18:0a:73:d8:c1:3a:a7:32:35:9c:d4:7f:84:68:
         4f:a2:de:b3:5d:83:fa:e9:ff:b9:d0:fe:c7:00:07:f5:de:de:
         75:de:36:b1:da:08:c7:97:9e:4a:c2:64:4a:28:0c:8e:a9:6f:
         f3:c3:b4:24:22:b4:b7:e8:aa:7e:7b:7f:8c:b9:73:d5:9d:ff:
         6b:7e:cc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:18 2026 by rpki-client