Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231363a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3231363a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          GIu0cvxtlvZOwx0w280pNUuN+CVub9pM5vOI2CtiFu8=
Subject key identifier:   15:B1:EC:20:05:91:DB:9A:25:E1:2E:57:88:8A:D6:08:C2:F8:C5:67
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       4C372E9782EF1F0DA6D3A93CA8E0E1EA9D5B1F6A
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231363a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 07 Apr 2026 12:35:55 +0000
ROA not before:           Tue 07 Apr 2026 12:30:55 +0000
ROA not after:            Tue 06 Apr 2027 12:35:55 +0000
asID:                     9009
IP address blocks:        2602:ff62:216::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:37:2e:97:82:ef:1f:0d:a6:d3:a9:3c:a8:e0:e1:ea:9d:5b:1f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr  7 12:30:55 2026 GMT
            Not After : Apr  6 12:35:55 2027 GMT
        Subject: CN=15B1EC200591DB9A25E12E57888AD608C2F8C567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:02:05:97:5d:f6:58:7a:33:1e:d7:a6:ef:d7:
                    67:67:13:1e:cb:0a:7a:db:fa:fc:60:68:ec:54:4e:
                    a9:6e:45:58:07:e9:f5:fc:14:78:3b:3a:8f:2f:27:
                    7c:a7:6b:61:55:31:80:f8:7b:9e:1d:1e:cb:40:b9:
                    ce:2b:27:7a:16:83:cc:f5:ae:a3:ea:bc:6e:3d:29:
                    91:70:c5:b0:8b:e8:e7:e9:e9:9c:2b:b3:24:a6:65:
                    11:66:4e:f7:d7:45:f5:62:17:93:16:ae:30:e8:93:
                    ec:af:70:68:a9:45:f2:89:cf:e1:e3:b0:e7:b5:44:
                    06:76:b2:d6:57:e5:e6:0e:ac:ee:65:26:6f:54:46:
                    7c:9e:f4:0e:a4:d8:a9:31:64:af:08:9a:86:78:22:
                    41:84:6f:49:08:80:6a:2a:bd:fb:bf:d6:96:15:b0:
                    86:ce:73:aa:4c:03:4f:58:5e:15:f3:b7:55:95:85:
                    98:d7:9b:24:ee:77:64:a8:55:0b:a6:9b:59:69:88:
                    ea:55:37:74:ae:45:b8:4e:fa:a9:9a:38:fe:f2:ac:
                    c8:8b:68:7a:4a:63:4c:76:0f:ca:d5:36:64:a9:8e:
                    9b:cc:fd:99:d0:90:0c:51:67:21:6d:3c:aa:18:10:
                    03:b6:28:94:79:07:4b:0f:cc:66:d7:11:f9:d7:f1:
                    cc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B1:EC:20:05:91:DB:9A:25:E1:2E:57:88:8A:D6:08:C2:F8:C5:67
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231363a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:216::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:e3:84:3e:ae:44:5f:38:b3:c8:e6:cd:6c:8f:8b:60:19:db:
         ee:6f:6b:25:17:47:d1:07:f7:c1:d1:19:65:66:27:d1:d6:23:
         87:eb:33:ff:83:a6:bc:34:18:06:1a:66:c2:2f:80:73:22:10:
         79:5e:39:fe:92:4e:ad:06:b3:09:4a:35:e2:9d:f6:fe:04:7b:
         74:1a:36:4e:ba:7e:12:ee:61:a4:6d:57:6d:75:5d:f9:9b:c7:
         f2:66:9a:79:65:96:10:ef:a1:63:b1:d5:a4:ac:5f:ea:4d:7d:
         a8:00:1e:3b:c4:0d:ed:ef:96:a2:4b:15:bf:38:af:c7:df:f6:
         ae:37:ed:2c:c4:ac:ab:da:39:9e:27:dc:ef:2e:35:a9:c8:e1:
         9c:03:39:69:7b:a2:27:81:e3:94:40:c0:5e:0e:d1:c0:82:d1:
         99:8d:21:d0:7f:a1:26:2e:95:c6:18:c1:aa:ce:15:32:39:ec:
         40:ce:bd:39:10:21:a5:0e:a3:90:03:97:e5:39:a4:9c:27:97:
         10:24:61:2f:e0:3d:ff:c4:5f:df:80:25:d3:57:3e:87:ab:1c:
         68:fe:3e:76:e8:2f:68:d5:c3:21:93:fe:e9:62:68:81:37:d2:
         26:90:53:0b:db:96:03:af:0d:fe:a0:4d:9c:bc:07:f1:8e:f9:
         1f:60:13:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:19 2026 by rpki-client