Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138343a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3138343a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          8bpHQE18rQnKcpnzJNZjFqA0yc5AqfJwIAPIRFalw5E=
Subject key identifier:   80:1B:B2:3F:51:52:09:A0:DC:A2:6B:94:4F:48:1F:F7:FB:B2:35:7D
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       33786E347AD729FA976260286BC36730524B8C2D
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138343a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 06 Apr 2026 15:35:55 +0000
ROA not before:           Mon 06 Apr 2026 15:30:55 +0000
ROA not after:            Mon 05 Apr 2027 15:35:55 +0000
asID:                     29802
IP address blocks:        2602:ff62:184::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:78:6e:34:7a:d7:29:fa:97:62:60:28:6b:c3:67:30:52:4b:8c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr  6 15:30:55 2026 GMT
            Not After : Apr  5 15:35:55 2027 GMT
        Subject: CN=801BB23F515209A0DCA26B944F481FF7FBB2357D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2a:10:80:02:06:45:25:64:5e:7e:37:68:11:
                    bc:c1:ed:68:fc:7c:90:44:35:3d:3a:38:43:63:87:
                    5e:53:ca:a6:46:af:d8:6a:cf:9f:11:35:95:63:4f:
                    70:f4:d1:c8:86:c3:b3:19:c8:16:b9:45:86:c3:a3:
                    23:2f:3f:cc:c3:57:95:0a:da:76:5e:57:cc:c5:1d:
                    51:ed:ef:61:70:15:bb:69:d0:6e:31:6d:4d:06:86:
                    bc:b7:52:9c:41:09:00:fd:c6:9e:d9:c8:42:af:31:
                    81:bf:f6:8b:b7:9e:ae:4e:55:d2:dd:64:8f:57:dc:
                    e6:6f:2e:21:94:8d:c3:0b:10:cb:1a:74:a2:01:4c:
                    6c:8d:63:ed:98:9b:ab:0d:68:1f:e9:67:82:ad:04:
                    4d:be:ed:0e:ff:b6:ef:ca:f7:c0:6a:e0:e2:6b:ad:
                    36:25:ce:df:ad:dd:9c:ec:3b:ac:97:86:f0:57:6d:
                    2a:23:c4:1c:14:fd:fd:df:04:8f:7c:89:43:31:cc:
                    34:5d:b5:8d:19:2f:43:d1:25:3f:67:5a:69:c1:3a:
                    58:bd:b2:a5:71:90:72:a5:2a:94:23:d2:dc:09:15:
                    4c:7b:1e:6d:53:b4:2d:3c:0c:7c:74:8d:73:63:9f:
                    89:f4:6a:a6:af:5f:74:84:7f:7b:1d:4e:a9:b3:7a:
                    49:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1B:B2:3F:51:52:09:A0:DC:A2:6B:94:4F:48:1F:F7:FB:B2:35:7D
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138343a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:184::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:bb:55:de:d5:07:65:77:9e:02:db:e5:b7:40:d6:7e:11:ed:
         8e:f9:d6:4c:5c:15:c6:08:f2:93:1b:87:0c:15:fc:fa:bf:8a:
         b6:4b:e3:b2:a2:ca:00:3c:71:86:45:b2:dc:39:cf:23:81:5c:
         df:22:a2:34:ea:f9:e5:70:c5:b9:e2:87:de:fa:03:fa:99:45:
         62:62:4b:6d:89:7a:d3:32:93:03:d3:11:ae:72:50:3b:39:a9:
         4a:b5:34:e2:a2:cb:2d:91:2a:03:d8:7f:b5:f2:d6:34:7a:c8:
         f1:61:8d:e4:f9:83:51:0b:9d:f4:98:78:bc:4c:f8:52:68:9f:
         05:1d:61:2c:d7:af:52:29:7e:7a:5f:13:59:9c:bc:a7:cf:95:
         d6:25:50:47:ca:62:07:29:d1:ce:64:69:9f:31:da:3c:da:da:
         16:08:9f:4e:ec:8e:be:de:b4:c9:f2:a4:fe:ef:ae:48:14:53:
         7b:47:e7:12:8c:5d:4f:ff:07:ae:e0:c5:86:9a:0f:f3:bf:cb:
         90:16:cd:52:e0:08:08:42:54:4a:f5:08:e0:78:6a:c7:f1:2a:
         92:ed:71:73:f7:8b:50:d0:97:ba:10:8a:df:b7:10:0d:fd:b1:
         3e:55:11:a8:c0:a9:8c:c6:1a:9e:1d:33:92:f8:4d:82:74:37:
         f8:2a:0d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:18:40 2026 by rpki-client