Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132363a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3132363a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          jfvNnFy+6NOLLeCQ9OUeFmZv/EmRmvR7/179cX4wnFc=
Subject key identifier:   9C:34:C2:0E:83:8D:F6:7A:03:92:E4:C2:1C:95:BF:6E:57:29:B4:CF
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       37F1A385B9CA7CD344E70C5374CA50EE4A032C90
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132363a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 02 Apr 2026 13:35:55 +0000
ROA not before:           Thu 02 Apr 2026 13:30:55 +0000
ROA not after:            Thu 01 Apr 2027 13:35:55 +0000
asID:                     9009
IP address blocks:        2602:ff62:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f1:a3:85:b9:ca:7c:d3:44:e7:0c:53:74:ca:50:ee:4a:03:2c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr  2 13:30:55 2026 GMT
            Not After : Apr  1 13:35:55 2027 GMT
        Subject: CN=9C34C20E838DF67A0392E4C21C95BF6E5729B4CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:cc:10:0c:ff:60:f0:df:aa:50:9a:70:0d:
                    b6:cd:23:c3:6e:0e:a9:a3:57:d6:4a:65:a3:53:3c:
                    90:06:be:96:53:c4:e0:94:9d:d1:49:cc:c8:63:0c:
                    cf:4e:48:8f:fe:b7:3f:8f:02:bf:00:23:5f:27:72:
                    29:6d:37:82:50:d5:cd:d3:46:55:be:e2:65:5d:21:
                    b7:41:ba:94:dc:a2:02:56:22:ca:db:70:24:38:a2:
                    83:22:88:84:b6:18:7c:a4:d3:27:8f:b3:ca:ff:c0:
                    04:94:8e:2b:24:a1:df:b3:e7:9e:c2:e9:15:d1:ab:
                    4f:df:40:45:10:7a:87:e4:69:14:40:bb:ec:75:61:
                    de:56:88:2e:04:83:2b:f7:e0:bc:3f:b2:2d:92:56:
                    78:59:42:fd:28:3b:25:d7:86:37:e8:7c:17:c5:ed:
                    2b:dd:4d:c3:52:cc:ce:42:5c:c9:4c:aa:d4:29:a9:
                    11:91:b5:b8:0c:fd:8c:20:cc:52:e0:ee:d1:f6:97:
                    8c:fb:18:86:65:a1:6e:da:0a:d5:c5:ca:c2:e9:3f:
                    7f:c0:05:13:98:5d:9a:f7:07:0d:3d:2a:70:4a:67:
                    b2:db:3d:5e:73:c3:75:c9:6e:0d:51:fd:d5:d2:d7:
                    81:65:f0:c9:33:a9:d3:74:0d:f3:59:b2:ad:8a:78:
                    d2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:34:C2:0E:83:8D:F6:7A:03:92:E4:C2:1C:95:BF:6E:57:29:B4:CF
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132363a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:126::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:d6:86:32:f3:b9:83:dd:34:75:22:6e:83:e7:94:4b:13:fb:
         b6:9a:4b:58:84:67:67:62:84:e2:54:94:00:20:bb:77:30:f0:
         4c:45:65:1f:cd:6e:be:31:fd:70:a9:d2:12:25:45:0e:b6:6c:
         96:4e:59:52:3e:77:59:11:06:7d:a0:a9:3e:35:df:53:b0:88:
         70:33:86:ed:0c:be:59:26:79:f7:e7:7e:73:b2:aa:e0:41:14:
         2d:b0:dd:1f:68:52:e1:2f:d1:a4:c0:be:1c:c6:df:b6:ea:2a:
         37:c9:72:bb:89:ae:40:19:15:0c:2b:ec:3f:5e:1d:ab:fe:67:
         14:d5:3d:89:01:b7:ce:2d:e4:cd:84:8a:c6:9f:eb:d5:a2:2a:
         60:a5:e9:92:ac:98:93:a9:2a:da:e6:0d:ca:9a:15:3b:46:75:
         18:c4:42:1f:69:6e:4b:0a:dd:ef:ae:62:b3:65:07:1d:af:f9:
         71:a8:2f:ee:b7:96:dd:a1:4d:14:82:e4:aa:f1:49:0f:ab:e8:
         8f:1f:5c:37:6b:5d:b7:64:73:5d:0c:36:ca:41:dd:ca:b9:be:
         8e:ed:85:13:58:55:c8:14:e2:df:44:1e:e9:99:d8:c6:77:94:
         a4:bf:c7:d8:b2:d3:a7:0c:34:c6:93:82:35:b6:7d:95:e6:3e:
         63:e9:c0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:07 2026 by rpki-client