Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231333a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3231333a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          WvN+mh7d04HA8YlVXpYN4iG/bgdTifqbbvqCt4ZWBLo=
Subject key identifier:   85:DC:88:C5:E7:CF:9E:E5:B4:35:CA:9A:D3:DE:54:D7:F6:63:BA:20
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       791E531271A2F1DCFC9AAD416F65679A4D21E579
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231333a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 07 Apr 2026 12:35:55 +0000
ROA not before:           Tue 07 Apr 2026 12:30:55 +0000
ROA not after:            Tue 06 Apr 2027 12:35:55 +0000
asID:                     9009
IP address blocks:        2602:ff62:213::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:1e:53:12:71:a2:f1:dc:fc:9a:ad:41:6f:65:67:9a:4d:21:e5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr  7 12:30:55 2026 GMT
            Not After : Apr  6 12:35:55 2027 GMT
        Subject: CN=85DC88C5E7CF9EE5B435CA9AD3DE54D7F663BA20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:72:db:ed:37:f3:a3:85:ca:58:2b:12:fb:36:
                    95:e4:dd:23:96:c2:36:6f:f4:bc:82:ac:ca:5d:e0:
                    a1:73:b9:9c:ac:17:74:e5:d2:14:16:15:22:6c:1c:
                    fb:4a:9e:78:26:59:fc:d5:3b:fa:11:11:e2:52:45:
                    ca:00:60:e7:9c:80:95:6f:1f:75:80:3e:4b:44:01:
                    1c:b6:4b:bc:98:f3:0f:79:43:5a:23:c1:2e:d3:b7:
                    85:de:05:a3:ab:90:f1:06:19:d0:42:2c:16:57:83:
                    d2:6b:6b:72:be:21:79:1c:8d:c6:3a:22:b5:d3:30:
                    05:3e:98:83:df:ae:f7:fc:c6:f8:42:b9:5b:f4:8c:
                    fb:86:0e:3f:2d:f5:fa:fa:5c:bd:aa:ed:9d:5e:8e:
                    5e:3f:e2:0e:b9:46:4e:b1:68:0d:11:be:84:34:83:
                    d8:a3:b2:fa:14:8c:59:fe:b3:78:c0:30:a8:78:ea:
                    49:13:6e:fe:5f:98:b7:59:32:a7:c7:0d:9a:66:14:
                    93:67:1e:4e:67:c9:39:70:d8:6c:78:c5:5e:d0:ab:
                    1c:bc:8a:57:c6:70:9b:10:22:00:6e:a6:d7:b3:ba:
                    96:58:08:95:29:2f:08:7e:1c:a8:f4:ba:3c:82:b0:
                    db:15:e0:36:a9:2c:dd:32:8a:49:4c:24:a6:00:ce:
                    5f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DC:88:C5:E7:CF:9E:E5:B4:35:CA:9A:D3:DE:54:D7:F6:63:BA:20
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231333a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:213::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:be:0a:8b:d7:e5:20:49:55:68:94:9a:ca:2e:f7:3d:16:d7:
         06:13:cb:ae:05:0c:96:2d:8c:07:a8:e8:ad:17:24:36:07:8e:
         76:56:11:25:cc:41:55:5b:18:65:c3:29:c0:39:a5:25:48:40:
         34:62:c2:1b:dc:ce:87:9f:02:bf:af:ba:f9:e5:38:38:41:14:
         91:0b:20:1d:80:b2:91:54:dc:c1:1b:aa:d2:2c:1f:b0:7e:e5:
         5c:87:f0:8c:d9:03:55:49:c0:46:3a:f6:03:9a:53:82:cb:81:
         6a:eb:5d:32:f2:cd:3d:3f:f5:ef:51:4b:6d:fb:75:07:49:1c:
         c2:cf:e9:50:19:c8:53:8c:d0:86:cf:0c:5b:93:36:92:67:d1:
         1d:87:a8:42:fd:24:53:52:64:cf:51:11:26:e0:32:85:7d:09:
         1e:85:63:eb:49:02:b8:2b:cf:90:be:eb:d5:da:18:c9:73:6b:
         1b:92:0e:d6:55:b1:97:f5:8f:40:a5:05:89:9c:df:57:f9:2c:
         df:d6:d7:3d:fb:cb:bb:eb:c3:92:0a:8d:5c:35:8a:75:c2:ea:
         8e:5b:39:7d:f8:0e:47:f2:27:ea:a9:a6:7a:2f:59:b3:5b:d0:
         89:ad:9c:1c:27:69:5a:f6:a1:0c:13:a0:0e:b7:c4:55:ba:9e:
         b1:c3:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:09 2026 by rpki-client