Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231613a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3231613a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          Fd5QzulVhMwjscL3hyL88hH2Y/nyamv/nqKCHNJHoIs=
Subject key identifier:   6D:9C:3E:9E:BB:DD:7C:97:FA:1C:3C:5F:70:92:CE:E8:BE:17:24:F5
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       14E6636B1AF991E83D3F8A0B9329C664945CE82B
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231613a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 07 Apr 2026 12:35:56 +0000
ROA not before:           Tue 07 Apr 2026 12:30:56 +0000
ROA not after:            Tue 06 Apr 2027 12:35:56 +0000
asID:                     9009
IP address blocks:        2602:ff62:21a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e6:63:6b:1a:f9:91:e8:3d:3f:8a:0b:93:29:c6:64:94:5c:e8:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr  7 12:30:56 2026 GMT
            Not After : Apr  6 12:35:56 2027 GMT
        Subject: CN=6D9C3E9EBBDD7C97FA1C3C5F7092CEE8BE1724F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bf:ab:34:b8:e8:94:0f:a4:4b:b9:ea:53:12:
                    dc:57:a6:09:6b:2c:61:80:e9:9e:20:67:0e:6b:45:
                    49:ec:e6:a2:5b:8f:fb:8f:69:b4:9d:36:df:ee:67:
                    f1:c4:4c:cc:f8:b8:cb:03:4a:4d:f2:2d:2b:de:be:
                    91:bd:ee:4e:dd:5b:e8:f8:8a:0d:05:32:16:66:be:
                    df:9a:b1:52:13:05:4a:21:44:6e:51:52:4e:59:ab:
                    7c:0a:ab:bf:93:b9:25:28:ee:60:77:55:4b:82:86:
                    7c:56:39:de:ed:00:01:2f:ac:99:3b:6b:61:8a:b7:
                    b1:f2:f4:51:4d:ec:2f:09:70:eb:04:ab:d6:c5:74:
                    74:e7:ba:d6:7e:97:0d:89:1a:8c:c0:df:5e:db:a7:
                    7e:38:72:a1:b7:6d:ed:45:b0:d3:76:5d:29:53:a4:
                    7c:1c:50:bd:2a:09:95:3e:80:d0:d4:47:4c:c2:d7:
                    ce:9b:83:4b:49:1f:ea:3d:80:88:5e:74:57:ab:94:
                    7d:d4:0f:db:eb:37:0b:c0:53:87:5b:34:b6:0f:44:
                    0a:07:ee:77:1f:ea:20:72:e2:aa:4b:70:c5:84:f2:
                    5a:2e:bd:55:c4:1b:4e:a5:6d:df:94:aa:03:e4:5a:
                    5d:26:a4:5a:72:c2:d9:c8:32:08:a4:21:33:6b:19:
                    01:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9C:3E:9E:BB:DD:7C:97:FA:1C:3C:5F:70:92:CE:E8:BE:17:24:F5
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231613a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:21a::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:cd:cc:31:e7:45:8b:21:7e:b2:ba:11:9a:6d:44:0f:9f:12:
         a4:96:e0:df:31:f0:d3:3f:12:fc:a0:f6:d9:cc:d9:61:6f:d9:
         da:72:d9:a9:da:12:30:41:58:9a:06:cc:46:26:13:93:d5:b4:
         ac:24:9b:bb:e1:69:cb:0b:b0:57:f0:69:5c:22:ad:6c:35:54:
         f8:bf:2f:7c:52:91:11:7e:0a:f1:b7:55:5e:c3:88:5a:72:63:
         ba:a9:2c:87:78:bc:16:b0:14:9f:d3:b9:94:d4:24:5d:22:7d:
         39:df:51:6a:aa:ce:8a:3f:23:e7:0c:a1:8e:69:60:2b:9d:13:
         84:ff:16:62:b0:2b:c4:95:e1:aa:b3:79:58:3a:5b:63:50:86:
         60:26:b8:af:69:60:fe:08:f3:69:ee:b0:d2:73:d7:cc:ae:52:
         ed:a6:df:03:1c:f7:85:ac:a4:53:77:37:d6:9e:4d:1d:b3:5b:
         3b:13:48:e5:11:98:11:02:68:d6:b0:a8:9f:27:c3:c8:12:6b:
         3a:84:1a:30:f1:38:b7:37:8b:f8:11:87:eb:00:8c:0f:02:c3:
         d8:12:f2:cb:5d:a4:42:c7:52:81:38:77:22:e4:4e:3d:23:6f:
         2d:57:05:54:a2:11:ea:5f:56:d4:a4:0d:0c:28:80:d1:b2:92:
         c7:44:c4:9d
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUFOZjaxr5keg9P4oLkynGZJRc6CswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjYwNDA3MTIzMDU2WhcNMjcwNDA2MTIzNTU2
WjAzMTEwLwYDVQQDEyg2RDlDM0U5RUJCREQ3Qzk3RkExQzNDNUY3MDkyQ0VFOEJF
MTcyNEY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr+rNLjolA+k
S7nqUxLcV6YJayxhgOmeIGcOa0VJ7OaiW4/7j2m0nTbf7mfxxEzM+LjLA0pN8i0r
3r6Rve5O3Vvo+IoNBTIWZr7fmrFSEwVKIURuUVJOWat8Cqu/k7klKO5gd1VLgoZ8
Vjne7QABL6yZO2thirex8vRRTewvCXDrBKvWxXR057rWfpcNiRqMwN9e26d+OHKh
t23tRbDTdl0pU6R8HFC9KgmVPoDQ1EdMwtfOm4NLSR/qPYCIXnRXq5R91A/b6zcL
wFOHWzS2D0QKB+53H+ogcuKqS3DFhPJaLr1VxBtOpW3flKoD5FpdJqRacsLZyDII
pCEzaxkBTwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFG2cPp673XyX+hw8X3CSzui+
FyT1MB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzIzMTYxM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzkzMDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv9iAhowDQYJKoZI
hvcNAQELBQADggEBACXNzDHnRYshfrK6EZptRA+fEqSW4N8x8NM/Evyg9tnM2WFv
2dpy2anaEjBBWJoGzEYmE5PVtKwkm7vhacsLsFfwaVwirWw1VPi/L3xSkRF+CvG3
VV7DiFpyY7qpLId4vBawFJ/TuZTUJF0ifTnfUWqqzoo/I+cMoY5pYCudE4T/FmKw
K8SV4aqzeVg6W2NQhmAmuK9pYP4I82nusNJz18yuUu2m3wMc94WspFN3N9aeTR2z
WzsTSOURmBECaNawqJ8nw8gSazqEGjDxOLc3i/gRh+sAjA8Cw9gS8stdpELHUoE4
dyLkTj0jby1XBVSiEepfVtSkDQwogNGyksdExJ0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:19 2026 by rpki-client