Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132383a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132383a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          aAzITTvzGp2/6PnYiUfekexGyb5rRtWUBAUyrVVQHIA=
Subject key identifier:   55:F2:98:A5:56:56:C3:EA:03:03:1F:70:5B:71:72:D8:A6:1F:9E:55
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       148146DA52E52864E163CA7461DF2AFEA574610B
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132383a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 06 Apr 2026 14:35:55 +0000
ROA not before:           Mon 06 Apr 2026 14:30:55 +0000
ROA not after:            Mon 05 Apr 2027 14:35:55 +0000
asID:                     29802
IP address blocks:        2602:ff62:128::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:81:46:da:52:e5:28:64:e1:63:ca:74:61:df:2a:fe:a5:74:61:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr  6 14:30:55 2026 GMT
            Not After : Apr  5 14:35:55 2027 GMT
        Subject: CN=55F298A55656C3EA03031F705B7172D8A61F9E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:ac:a5:ae:13:4f:a7:d2:83:64:89:5c:1f:
                    2a:53:d7:b6:ea:60:06:c4:fb:48:89:80:db:d6:71:
                    d9:28:b7:38:bd:a8:88:29:0d:da:0d:d5:53:4a:4b:
                    4e:cf:ed:96:39:32:51:30:15:09:d4:76:2b:cf:a2:
                    e2:3b:79:ab:92:10:b5:60:bc:cc:61:a9:48:cb:1b:
                    25:01:bb:84:ee:cd:74:81:58:c6:2e:d3:30:f7:59:
                    ff:79:38:a0:a8:10:f1:f7:e9:f9:8e:fe:6d:28:96:
                    3c:87:e8:2a:36:93:ce:c3:af:16:e5:35:c7:b0:10:
                    d3:24:f5:80:b5:a7:60:59:13:41:e6:ac:e9:ae:12:
                    54:71:fe:dd:e4:77:0d:21:70:4b:96:3d:a2:ff:4f:
                    b9:4d:fd:16:4e:87:fd:8d:d8:34:59:84:cb:33:d6:
                    c9:4a:23:0c:88:9e:ae:69:f2:6b:e7:72:7b:ff:b5:
                    d3:0b:14:49:4b:d6:ff:49:58:de:53:f7:7d:b5:a8:
                    d3:f1:9b:f1:f4:cb:be:61:66:37:fe:ad:2f:bf:b0:
                    4f:a2:6d:e4:4d:69:ac:f4:45:37:e4:8b:8b:12:c9:
                    34:55:91:26:0c:b8:ed:ba:13:fc:b2:d0:f7:d3:9f:
                    3a:24:c1:89:b9:cf:11:9f:26:72:6c:4a:7f:22:f7:
                    40:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F2:98:A5:56:56:C3:EA:03:03:1F:70:5B:71:72:D8:A6:1F:9E:55
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132383a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:128::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:9f:33:72:80:6c:a1:2a:8a:6a:ad:6d:97:31:74:39:62:66:
         a7:4e:ca:47:44:59:34:2b:70:91:8c:d0:8e:d7:74:7e:06:1e:
         85:de:2c:15:e6:40:21:9b:30:06:8c:41:a0:5b:7f:2c:34:42:
         dd:11:93:33:86:7f:c2:cf:4d:9b:08:08:8b:5a:3a:5e:55:07:
         fa:d6:40:6a:2b:0a:f7:01:90:61:f1:4f:36:d3:f5:d2:0d:35:
         3b:65:22:78:08:cd:b9:63:57:93:17:84:8a:8a:d6:fb:09:e9:
         b6:5e:97:dc:ef:88:89:d8:2d:82:35:c8:e1:8f:97:51:2f:cb:
         ea:e7:8b:c7:d5:52:b1:cb:8f:7e:85:3f:75:c6:38:77:a4:32:
         0f:1d:8e:6d:e4:13:40:38:03:f4:f2:e4:82:b7:bc:01:e9:7a:
         56:f6:61:d9:41:4c:8a:70:4a:96:24:c2:31:d3:28:65:07:3b:
         9b:b4:6c:bf:63:ac:5a:6b:6d:5c:34:ae:d6:20:ec:3d:d9:11:
         fc:64:55:88:f5:df:5d:fb:03:bf:20:6d:35:b9:00:96:e7:83:
         02:32:50:3d:2e:54:ab:42:23:36:f2:c3:88:5d:b2:eb:03:c7:
         b0:98:f8:4c:42:60:f7:6f:4a:aa:e7:c9:1e:e6:03:c7:67:dc:
         69:fa:43:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:18:53 2026 by rpki-client