Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132393a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132393a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          Gz4Xgb0lxWdiTA0GBzIwNbC+2UNibBUzz0FvWzZHBoE=
Subject key identifier:   06:37:9D:1A:6A:63:A6:AE:A1:59:EA:40:D7:C4:B5:3C:89:29:D1:34
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       493B713893CC574180ECD98B5BBB6C91C30DE7AD
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132393a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 06 Apr 2026 15:35:55 +0000
ROA not before:           Mon 06 Apr 2026 15:30:55 +0000
ROA not after:            Mon 05 Apr 2027 15:35:55 +0000
asID:                     29802
IP address blocks:        2602:ff62:129::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:3b:71:38:93:cc:57:41:80:ec:d9:8b:5b:bb:6c:91:c3:0d:e7:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr  6 15:30:55 2026 GMT
            Not After : Apr  5 15:35:55 2027 GMT
        Subject: CN=06379D1A6A63A6AEA159EA40D7C4B53C8929D134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c8:09:75:91:3d:8f:1d:b4:1b:e1:6c:ac:2f:
                    75:d2:7a:14:dd:55:77:14:49:47:fa:f7:f1:6d:e9:
                    07:20:01:75:7b:df:83:88:2a:1c:28:0f:c5:db:b8:
                    68:9e:87:c9:9e:a9:e2:31:3f:86:8d:c5:ab:fb:9d:
                    14:e6:01:f3:d6:e6:f2:20:a7:0f:9a:32:77:ea:37:
                    cc:5a:1e:60:25:aa:ed:6b:2f:7f:2c:0e:c1:65:c6:
                    d9:2f:4f:e6:d1:ce:2e:70:4e:61:08:25:ea:8d:40:
                    3c:6c:9f:5e:63:67:d7:5b:0f:f1:0c:ca:29:43:ae:
                    cb:0b:86:3c:de:4b:75:e3:11:88:98:d2:ee:1a:f5:
                    77:6c:91:d6:c6:f4:31:c8:ac:9a:f5:c1:0e:6a:b6:
                    5f:7f:5c:4a:5c:da:b1:6f:8e:e3:ee:c6:10:d1:91:
                    a8:77:99:7b:93:d6:c0:4d:bd:b8:12:4c:8b:03:79:
                    c7:35:68:d6:68:bc:5a:1b:f9:a1:c5:9f:6e:05:0c:
                    3d:30:df:44:af:bd:d4:8b:5a:48:e9:fb:dc:3f:b6:
                    fa:7e:d8:95:c7:50:7e:0d:d7:c5:f5:71:5a:23:66:
                    24:e6:13:c5:43:d6:89:c9:5d:75:b7:04:70:70:d0:
                    57:62:fc:e2:5c:fc:d2:b9:49:58:c7:cb:d0:0f:3e:
                    9f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:37:9D:1A:6A:63:A6:AE:A1:59:EA:40:D7:C4:B5:3C:89:29:D1:34
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132393a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:129::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:9a:d5:1a:d1:e1:e2:a3:80:bf:b7:17:09:39:e5:95:a5:8c:
         90:f8:24:e9:a4:ae:bc:6d:06:9f:ef:62:ef:ad:80:15:51:34:
         c3:2d:48:ec:d2:30:e5:41:96:f2:ad:71:56:58:68:f6:5c:f6:
         cf:66:26:e6:ef:99:7d:bb:d8:81:39:fe:12:0d:4d:73:e0:21:
         1f:4d:76:86:55:5f:e7:c5:ff:c0:e4:5a:c5:3c:b6:ed:8a:a6:
         32:df:72:ca:ff:f4:a8:0f:95:97:2e:fd:d0:af:bf:d3:9c:e8:
         6e:b0:14:b8:59:8b:49:48:e5:07:ef:f7:ba:30:39:3a:6c:ca:
         b0:46:aa:dc:cc:ab:ef:1e:ac:e5:0d:13:cd:7a:e5:de:35:a6:
         77:2f:b4:3e:65:99:86:b3:00:f1:9b:2c:72:57:47:d1:1b:f0:
         c9:20:f8:af:81:c3:2b:94:f3:88:d9:07:42:84:f5:56:37:2b:
         d5:45:1c:01:90:56:4f:b1:2a:1c:04:f6:0f:80:18:be:3c:2b:
         a0:54:ac:db:d5:55:c5:31:53:91:9e:14:86:f9:2d:3f:58:08:
         ae:65:6a:60:3f:75:e3:29:9b:51:1c:4c:1b:4f:4f:cb:79:91:
         08:ba:28:ad:c8:18:2a:dd:a3:62:a0:6a:b3:07:82:f1:a8:89:
         83:f7:8d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:18:53 2026 by rpki-client