Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132633a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132633a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          5f6AghiFHLu+7LUHzNAc70SqmPWn03QH/XVAzOfksS4=
Subject key identifier:   03:8A:54:7D:97:BF:11:BC:D3:88:8A:D3:81:33:73:34:D0:E6:1A:72
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       2CAD05B6549105B5904778F2A3467C8AEE91E0F6
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132633a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 06 Apr 2026 15:35:55 +0000
ROA not before:           Mon 06 Apr 2026 15:30:55 +0000
ROA not after:            Mon 05 Apr 2027 15:35:55 +0000
asID:                     29802
IP address blocks:        2602:ff62:12c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ad:05:b6:54:91:05:b5:90:47:78:f2:a3:46:7c:8a:ee:91:e0:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr  6 15:30:55 2026 GMT
            Not After : Apr  5 15:35:55 2027 GMT
        Subject: CN=038A547D97BF11BCD3888AD381337334D0E61A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:63:e4:92:07:4d:2b:3e:cc:1d:e9:60:b2:
                    76:b3:5b:67:65:fe:46:ba:f7:23:78:5d:91:92:c5:
                    23:f2:19:63:69:ae:5c:e8:8e:42:d5:19:a0:3d:ba:
                    ea:c7:15:29:89:0d:ab:6a:f6:aa:75:db:fe:e2:b7:
                    27:f5:6b:51:b0:3d:9d:0d:74:9b:fa:bb:80:29:89:
                    55:53:22:79:b4:a2:70:f6:80:ef:1b:75:e8:c8:ab:
                    08:4a:18:7d:9c:10:09:1d:e9:07:0d:d2:d1:fd:e7:
                    c4:b1:4e:47:d6:0b:03:94:90:89:46:b8:a5:4f:b0:
                    cd:80:26:65:16:fe:e7:45:51:02:89:06:26:63:a0:
                    2f:1f:dd:35:ca:d0:f2:0a:95:2a:59:9c:0a:ff:5c:
                    41:35:a6:35:7e:a8:70:a9:02:ef:92:d0:f6:7f:90:
                    2a:a6:7e:44:8b:67:c4:b0:13:6a:ac:bf:b9:25:63:
                    8b:af:a3:9a:9d:e5:d8:ca:85:c8:12:dc:e9:b3:a8:
                    fc:20:82:a1:ce:1e:a9:fc:a8:3d:3e:f9:6e:b0:00:
                    42:32:57:d0:68:c4:a0:c4:ed:04:d9:31:4d:21:e3:
                    ee:3b:da:94:8a:ba:4e:99:cd:62:a5:fc:ae:fd:d4:
                    26:5f:49:91:93:d9:28:a9:b7:ca:37:a7:fb:35:63:
                    f0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8A:54:7D:97:BF:11:BC:D3:88:8A:D3:81:33:73:34:D0:E6:1A:72
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132633a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:12c::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:ea:82:f1:81:4c:b4:16:1a:2d:17:8f:c5:10:fc:6b:27:a9:
         40:65:34:b4:5b:80:90:f7:b7:9f:6b:f7:1f:81:02:b7:ef:5a:
         e7:e9:66:14:62:7c:91:68:f6:95:4f:52:b3:52:e1:8a:ce:1d:
         58:c6:16:57:61:3a:50:85:a5:40:ea:ec:44:b9:70:de:1c:d0:
         6e:b4:c2:d1:5f:ea:a1:98:f5:6e:0d:98:9c:c0:f7:0c:38:04:
         e0:17:ea:9a:ed:59:47:11:34:98:82:b3:f5:a9:53:fb:80:60:
         73:25:ae:d4:c7:7d:19:31:fb:a9:cf:d1:2e:7e:c2:17:67:c6:
         2a:3f:5d:78:f6:ef:1f:f1:12:02:6f:4a:e1:0e:1b:be:87:7c:
         a7:69:c7:68:c7:f4:eb:61:11:ec:66:b8:b6:27:89:08:e7:12:
         83:9f:92:d2:24:25:b3:cb:66:a8:84:51:c5:8d:f7:b5:e0:91:
         53:76:55:c8:89:e9:f4:e5:af:24:ca:21:da:7e:f8:4b:a4:b9:
         18:ce:41:10:48:88:0e:48:99:fc:8a:8c:e2:63:d9:a0:a4:cf:
         d8:6c:d4:1c:25:93:9c:29:ec:c8:d7:8d:23:66:ad:29:67:83:
         7a:d3:78:2c:20:19:cd:2d:54:cc:f3:fc:5d:a5:e4:8a:65:cb:
         fe:1e:67:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:50:24 2026 by rpki-client