Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138353a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3138353a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          qez5LK/SgSkynDHU5F8zVNxFqW7hQe1O4jU296FkWO8=
Subject key identifier:   93:F6:5A:E1:3A:FE:DF:C1:F3:BE:F9:D1:72:42:EA:88:21:58:EF:DE
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       504B048B566C53AD0877EEB334ABF8C0F6BC5D33
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138353a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 06 Apr 2026 15:35:55 +0000
ROA not before:           Mon 06 Apr 2026 15:30:55 +0000
ROA not after:            Mon 05 Apr 2027 15:35:55 +0000
asID:                     29802
IP address blocks:        2602:ff62:185::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4b:04:8b:56:6c:53:ad:08:77:ee:b3:34:ab:f8:c0:f6:bc:5d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr  6 15:30:55 2026 GMT
            Not After : Apr  5 15:35:55 2027 GMT
        Subject: CN=93F65AE13AFEDFC1F3BEF9D17242EA882158EFDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2b:96:31:2e:50:71:41:d8:a4:36:5d:79:1b:
                    0a:ab:da:88:91:76:6a:9a:f4:19:3b:51:51:da:0f:
                    d7:b9:29:71:cd:09:d6:0f:bb:ea:3b:6e:0b:9a:8a:
                    d8:2d:48:1d:07:0d:70:11:92:1d:be:7b:ed:71:01:
                    6e:9f:13:50:d0:3b:67:78:1e:10:9f:1d:5b:f7:04:
                    8f:71:82:f5:04:63:1c:7b:87:d1:79:7a:77:6b:3a:
                    a0:5e:ff:cc:35:df:48:f0:54:5d:b4:19:53:d8:be:
                    54:c4:dc:c8:4b:2e:a7:1f:8d:0d:07:ab:be:b5:7c:
                    de:18:f6:aa:ef:50:a9:c0:f0:29:33:be:2c:71:40:
                    cb:9f:3d:91:43:2b:74:87:97:1f:9f:b9:9f:7b:67:
                    7e:d9:4b:d3:35:d6:fc:96:e3:59:2a:d6:f3:d2:1e:
                    98:4d:4c:40:b3:14:f8:62:d6:75:84:37:39:5c:74:
                    23:ee:58:fe:9f:81:d1:17:09:8d:a6:a9:af:ce:73:
                    1a:ac:34:9c:70:54:28:3b:7a:33:3a:67:23:78:f5:
                    e6:d4:22:02:ba:2e:2e:2e:42:32:64:92:96:2e:a7:
                    c0:af:55:4d:b6:df:94:bd:81:51:2a:4e:e9:3f:30:
                    4b:35:a1:20:9a:76:cd:8d:27:3d:82:f5:cd:d6:aa:
                    9f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F6:5A:E1:3A:FE:DF:C1:F3:BE:F9:D1:72:42:EA:88:21:58:EF:DE
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138353a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:185::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:bc:48:48:38:d7:01:ca:90:f7:40:c2:95:b1:f8:fa:b9:c5:
         15:3f:33:c3:9e:f4:a8:62:e7:42:7d:a7:1d:6c:38:c9:83:e9:
         a4:fc:98:b6:97:b5:9d:58:50:ee:03:bb:d6:e1:1d:83:fa:d4:
         20:b8:0b:1e:cf:61:3e:10:0f:8d:5f:8a:cb:53:82:4c:e7:9a:
         4f:07:9e:c0:6d:98:7d:ba:e3:6a:20:dc:8d:b5:2c:e0:49:28:
         a0:cc:9b:c8:28:3d:3b:73:75:80:23:2c:2d:87:1a:34:31:bb:
         30:44:7a:c2:5b:57:5b:45:5d:44:03:52:72:f3:53:13:16:98:
         ea:34:30:42:8b:68:ae:cf:66:67:b8:8a:ba:0b:02:87:b9:45:
         d3:c9:6f:5e:d3:1d:d9:c9:13:51:6a:3b:0e:ce:94:84:33:d5:
         58:62:34:ec:00:0e:cd:67:d7:86:4d:80:a0:fe:43:15:2e:63:
         55:fc:4e:90:0d:ab:b8:9a:42:b0:65:44:cb:59:c7:ea:8b:04:
         4d:66:bd:0d:bb:31:a9:d6:3a:16:f3:07:90:f4:a7:9b:89:b1:
         f9:66:bd:c5:65:87:7d:2a:eb:58:38:2c:31:ae:cb:f2:35:f4:
         58:13:28:33:98:22:14:46:2b:7e:9a:b3:da:f0:79:c3:ca:e7:
         c8:b0:35:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:34:28 2026 by rpki-client