Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132623a3a2f34382d3438203d3e203133323133.roa
File:                     323630323a666636323a3132623a3a2f34382d3438203d3e203133323133.roa (raw, json)
Hash identifier:          H1MpXghdrr0dTS3dkk1pLAb7eXe22hy2cbLxiDFqGso=
Subject key identifier:   36:76:C0:9B:CF:63:51:8A:6D:D4:B0:67:F9:49:21:83:7E:3D:45:B7
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       14554F9DCCCD5A3EA6E3B42DFA1A80A16587F221
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132623a3a2f34382d3438203d3e203133323133.roa
Signing time:             Thu 02 Apr 2026 13:35:55 +0000
ROA not before:           Thu 02 Apr 2026 13:30:55 +0000
ROA not after:            Thu 01 Apr 2027 13:35:55 +0000
asID:                     13213
IP address blocks:        2602:ff62:12b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:55:4f:9d:cc:cd:5a:3e:a6:e3:b4:2d:fa:1a:80:a1:65:87:f2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr  2 13:30:55 2026 GMT
            Not After : Apr  1 13:35:55 2027 GMT
        Subject: CN=3676C09BCF63518A6DD4B067F94921837E3D45B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e6:0b:5c:98:e7:ed:19:c0:53:e1:56:10:8c:
                    07:d4:6a:8d:0f:1e:dd:ff:c4:ff:2b:f4:29:1d:09:
                    60:0e:b2:a3:d7:a6:ef:24:b1:ab:7e:88:ce:d1:f9:
                    5f:9f:fc:63:f3:5b:29:1e:c5:ff:b8:b7:86:66:1b:
                    bb:50:20:c4:0f:52:4a:6e:2a:7e:16:f3:21:eb:07:
                    ab:d6:6e:9a:5d:56:fa:fd:c2:e9:d1:35:2b:99:17:
                    2e:3a:50:97:e1:14:7f:86:cc:6e:38:93:58:c6:38:
                    db:b7:ff:c8:95:1d:75:9c:1a:86:f0:69:94:b9:2b:
                    95:1d:6d:6a:7a:ca:86:bc:0b:4e:8d:26:b0:35:3a:
                    61:e9:9c:76:d2:1b:8c:84:05:a0:9b:e2:47:b7:a1:
                    54:73:35:fb:14:bd:86:f1:59:d1:5a:cd:e1:98:74:
                    ae:5d:9f:57:4a:4d:0a:9b:8e:96:77:03:b8:d6:2d:
                    28:71:82:31:c6:d6:d2:29:a2:99:e8:d4:64:7c:cd:
                    64:28:c9:0c:bf:36:b5:c3:dc:85:f3:3f:4b:05:9b:
                    8a:e7:3d:39:75:38:54:c3:a3:ef:e2:ef:75:4a:93:
                    37:fd:0d:88:26:e1:96:52:92:89:45:2d:ee:e2:0e:
                    27:63:88:7b:e5:43:a2:b9:5e:e8:54:2c:a6:e2:82:
                    25:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:76:C0:9B:CF:63:51:8A:6D:D4:B0:67:F9:49:21:83:7E:3D:45:B7
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132623a3a2f34382d3438203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:12b::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:17:2d:2d:eb:ad:1b:35:47:6b:d5:4f:f4:d4:41:c5:56:52:
         f4:27:0d:5a:35:8b:3b:8f:d4:88:d2:2d:5e:a0:0d:93:d5:71:
         59:0f:9c:4c:ff:c6:23:df:24:5e:bb:dc:c3:38:bf:e1:5a:ca:
         df:e4:ff:cb:19:77:01:65:8d:6f:d9:c3:bb:d9:e7:0d:3e:ce:
         c1:26:cf:8d:5d:e2:21:41:11:5e:93:db:76:7d:25:d0:ff:0c:
         d4:68:06:6e:c7:7c:ff:97:8a:e4:03:38:4c:34:70:88:1f:d2:
         fb:d4:57:a4:b5:a1:81:33:23:4d:20:2d:58:76:05:1b:eb:b9:
         2e:f6:c5:bf:b0:59:d4:68:b1:0a:b3:2c:e1:05:f7:dc:d7:00:
         56:28:2c:72:10:a2:d2:3a:b9:78:65:b3:dd:09:6a:1b:72:1e:
         28:91:10:0f:7a:7b:7f:60:50:a0:6d:88:af:8d:97:da:03:8e:
         56:30:01:61:bb:80:10:10:fd:ed:b9:b1:0a:55:a5:97:53:fe:
         ab:be:7f:b7:1d:e9:21:98:44:c6:35:56:4a:70:01:79:74:8e:
         fc:69:f8:a7:02:e7:e7:85:ca:d1:65:5b:c2:be:b7:7e:7b:c5:
         ba:a8:fd:bd:10:08:22:42:2a:29:28:6e:02:27:2f:8b:92:5c:
         3c:ae:b2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:06:06 2026 by rpki-client