Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231623a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3231623a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          B4bofKNgdi7rG2ndUZTvFffxVTc0xlNm0tuB4gkuN5o=
Subject key identifier:   2D:0F:A9:73:8B:28:C3:7C:EB:AF:38:A0:D3:9D:E4:64:24:7D:F7:80
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       7D4E0CBD152F9C53963279E59007991AE697E655
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231623a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 07 Apr 2026 12:35:55 +0000
ROA not before:           Tue 07 Apr 2026 12:30:55 +0000
ROA not after:            Tue 06 Apr 2027 12:35:55 +0000
asID:                     9009
IP address blocks:        2602:ff62:21b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4e:0c:bd:15:2f:9c:53:96:32:79:e5:90:07:99:1a:e6:97:e6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr  7 12:30:55 2026 GMT
            Not After : Apr  6 12:35:55 2027 GMT
        Subject: CN=2D0FA9738B28C37CEBAF38A0D39DE464247DF780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ff:5c:3f:f4:2d:77:b4:c9:0e:c3:01:f2:80:
                    68:c5:e4:1e:62:1e:61:9e:37:60:26:d1:a0:0e:34:
                    2d:54:85:3b:61:7b:d6:95:6f:11:49:e9:1a:53:62:
                    1f:5d:50:14:46:c2:7e:84:8e:85:50:f7:9a:7b:0c:
                    a6:1c:85:27:1b:72:72:d2:15:6d:c3:d7:83:7a:a9:
                    6a:e5:21:27:82:ff:9d:a9:41:97:f1:fa:37:cb:3d:
                    29:76:45:91:c1:34:8b:1c:de:dd:e8:0e:92:0e:b4:
                    a0:3c:64:1b:5e:eb:9d:74:2d:e1:50:17:ab:19:58:
                    8b:2f:06:b7:19:02:8a:6c:05:18:23:1b:76:5d:c6:
                    38:9d:da:57:4f:fb:85:9c:5c:fc:b5:72:de:7d:4b:
                    32:e1:89:f8:c6:b7:bf:28:e8:e0:ec:a4:35:46:4c:
                    ad:dd:e2:eb:89:99:71:a0:47:84:1c:f5:de:f7:c7:
                    10:ca:76:0d:e4:6c:44:ed:b8:5e:e4:a2:1f:fc:41:
                    3e:89:b4:f2:d8:65:c8:70:e9:15:d2:9b:fe:34:b2:
                    7a:d8:5f:dd:3e:d5:48:ab:0e:40:91:c7:a9:eb:05:
                    a8:99:8a:83:c2:c1:1d:27:58:ca:61:08:53:25:ce:
                    76:4a:43:f6:84:48:45:c9:5d:a1:4d:e2:f3:38:84:
                    de:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0F:A9:73:8B:28:C3:7C:EB:AF:38:A0:D3:9D:E4:64:24:7D:F7:80
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231623a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:21b::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:38:1c:e2:2e:6a:4e:76:d8:83:e2:f4:cb:91:52:48:ed:3d:
         3c:92:9c:dd:4b:f5:01:38:2a:1b:be:b3:cc:13:74:1e:36:63:
         86:25:77:ce:5e:ba:5a:3f:97:54:9b:15:25:55:60:26:bd:1a:
         7f:e8:cb:89:b1:f6:51:0a:7e:ec:13:f8:98:a2:9a:59:78:20:
         a1:14:55:51:02:56:1b:b3:4c:9d:23:db:f5:67:72:98:f0:f9:
         ae:b6:d9:08:0d:e9:03:3b:88:e6:f1:66:5a:e2:32:39:92:91:
         2d:4b:5d:c4:0b:46:19:e4:3f:26:fa:34:25:20:71:b0:01:9b:
         f9:c6:ae:18:3a:23:e0:ee:77:e4:85:75:3b:54:e2:61:8f:e9:
         00:d0:e2:f0:29:3d:78:4e:7d:0b:78:10:e0:47:22:a6:52:fc:
         a1:fd:8b:c4:8c:6a:74:b2:af:ca:1d:79:82:19:fd:91:d3:de:
         d8:a7:2d:2c:ab:a2:45:a2:20:6d:78:58:41:f0:3a:ea:9e:4b:
         47:33:db:a7:e6:53:40:57:fa:af:f1:10:50:59:30:10:32:49:
         17:e3:69:40:b8:18:a5:d9:9c:71:8b:b8:bb:45:b9:5a:ff:ba:
         2d:02:2a:59:b3:e8:77:e6:29:aa:e9:41:40:b4:d2:59:36:dc:
         8f:81:d0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:23 2026 by rpki-client