Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231353a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3231353a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          LEhlP1BTlWClYekdxN/3q/dSYNflp+B63to6EmIjUv4=
Subject key identifier:   06:B4:7A:E9:2B:5A:41:55:42:19:41:18:E2:81:CA:22:67:81:6F:F4
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       5A7523BF27D776344765C237AB78C39666EB88A0
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231353a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 07 Apr 2026 12:35:55 +0000
ROA not before:           Tue 07 Apr 2026 12:30:55 +0000
ROA not after:            Tue 06 Apr 2027 12:35:55 +0000
asID:                     9009
IP address blocks:        2602:ff62:215::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:75:23:bf:27:d7:76:34:47:65:c2:37:ab:78:c3:96:66:eb:88:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr  7 12:30:55 2026 GMT
            Not After : Apr  6 12:35:55 2027 GMT
        Subject: CN=06B47AE92B5A415542194118E281CA2267816FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:6c:1a:29:4c:3b:bc:4b:30:da:cc:fb:9f:
                    75:18:b1:c9:25:95:64:8a:b8:19:77:10:95:e1:0e:
                    f2:9c:45:b1:d4:1d:82:88:2f:1a:60:30:2f:54:3a:
                    38:5d:0f:a5:c0:ae:dd:ba:3c:bc:90:32:3f:89:47:
                    3e:b3:70:40:90:e3:98:38:58:29:f7:4e:c9:71:99:
                    7b:8a:78:ed:26:6b:42:02:27:be:c7:c4:cb:03:49:
                    25:c2:e8:d3:66:87:53:e4:96:18:ba:f4:36:c7:94:
                    b2:af:f7:a3:77:a4:ae:91:ae:f0:c1:6d:45:50:16:
                    7f:94:b4:0a:9c:ee:70:2f:b9:9f:5b:45:9b:ca:60:
                    ac:1c:f9:96:13:d8:f2:2f:de:a9:1c:92:21:74:76:
                    90:7b:b0:bd:9b:05:b3:92:77:da:71:78:4d:45:e7:
                    ef:c1:fa:ea:a1:32:e9:2d:7a:26:fd:fd:ca:e5:c6:
                    60:67:73:dc:d3:76:8a:ae:03:f5:6d:b9:e4:2d:a4:
                    32:25:ea:db:83:d9:66:ba:39:e3:56:6a:1e:3c:e1:
                    ec:69:ed:da:b2:fb:79:aa:47:a1:3f:10:2f:dd:b2:
                    50:7a:92:e8:74:53:4f:17:f3:0b:23:bb:5c:62:e3:
                    ab:4b:95:65:a2:a4:31:f5:50:0a:95:32:31:7b:76:
                    f6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B4:7A:E9:2B:5A:41:55:42:19:41:18:E2:81:CA:22:67:81:6F:F4
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231353a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:215::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:05:0f:a6:47:57:1e:c8:b1:36:e4:a7:6f:64:c0:79:68:be:
         d4:9f:28:fd:8d:63:15:52:36:15:72:12:e6:59:bf:43:4a:92:
         35:e3:a3:22:7b:13:2e:a6:dc:fa:bd:35:63:ef:8e:88:7a:c5:
         fc:90:bc:4b:3c:01:7c:23:c2:e9:b2:56:9c:8d:11:cc:3c:99:
         f0:7f:f5:00:10:ea:35:ae:03:d0:b2:2d:6e:1a:5c:02:ea:45:
         74:79:8d:e8:90:79:79:91:1b:04:97:c6:c5:4c:e3:d9:c1:1b:
         03:3d:08:03:ec:6f:76:19:dc:fe:86:e1:71:bf:be:e0:3e:1e:
         78:4d:3a:ee:95:b7:ee:98:34:7a:2a:45:d5:03:52:14:10:00:
         81:04:96:c0:42:d6:da:93:62:b2:2c:4e:ba:1a:22:3b:19:e6:
         02:54:ea:cc:29:48:e9:75:dc:75:c6:dd:88:56:32:b6:fe:f8:
         c8:88:2b:cf:37:62:b6:2e:9f:b2:37:3b:a5:b1:03:fe:44:70:
         30:ea:b1:30:e1:61:15:31:0d:2c:92:74:d0:1d:0a:2e:ad:5e:
         9a:88:bd:1b:bc:48:01:33:04:1e:31:c6:2d:87:6a:da:fb:64:
         26:d9:20:6d:bb:85:05:de:8c:b0:e2:22:3a:fb:f8:21:11:ae:
         70:44:d3:f7
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUWnUjvyfXdjRHZcI3q3jDlmbriKAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjYwNDA3MTIzMDU1WhcNMjcwNDA2MTIzNTU1
WjAzMTEwLwYDVQQDEygwNkI0N0FFOTJCNUE0MTU1NDIxOTQxMThFMjgxQ0EyMjY3
ODE2RkY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+1sGilMO7xL
MNrM+591GLHJJZVkirgZdxCV4Q7ynEWx1B2CiC8aYDAvVDo4XQ+lwK7dujy8kDI/
iUc+s3BAkOOYOFgp907JcZl7injtJmtCAie+x8TLA0klwujTZodT5JYYuvQ2x5Sy
r/ejd6Suka7wwW1FUBZ/lLQKnO5wL7mfW0WbymCsHPmWE9jyL96pHJIhdHaQe7C9
mwWzknfacXhNRefvwfrqoTLpLXom/f3K5cZgZ3Pc03aKrgP1bbnkLaQyJerbg9lm
ujnjVmoePOHsae3asvt5qkehPxAv3bJQepLodFNPF/MLI7tcYuOrS5VloqQx9VAK
lTIxe3b24wIDAQABo4ICuTCCArUwHQYDVR0OBBYEFAa0eukrWkFVQhlBGOKByiJn
gW/0MB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzIzMTM1M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzkzMDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv9iAhUwDQYJKoZI
hvcNAQELBQADggEBACUFD6ZHVx7IsTbkp29kwHlovtSfKP2NYxVSNhVyEuZZv0NK
kjXjoyJ7Ey6m3Pq9NWPvjoh6xfyQvEs8AXwjwumyVpyNEcw8mfB/9QAQ6jWuA9Cy
LW4aXALqRXR5jeiQeXmRGwSXxsVM49nBGwM9CAPsb3YZ3P6G4XG/vuA+HnhNOu6V
t+6YNHoqRdUDUhQQAIEElsBC1tqTYrIsTroaIjsZ5gJU6swpSOl13HXG3YhWMrb+
+MiIK883YrYun7I3O6WxA/5EcDDqsTDhYRUxDSySdNAdCi6tXpqIvRu8SAEzBB4x
xi2Hatr7ZCbZIG27hQXejLDiIjr7+CERrnBE0/c=
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:20 2026 by rpki-client