Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a373a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a373a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          TtL0YRewp+zjrPk15UQ9mh0MTSULnhD5wELa7aHVs6o=
Subject key identifier:   E4:72:1E:38:22:81:1A:4B:6A:AD:BC:75:30:52:5C:96:04:D6:02:F1
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       2EB0A76BD92088D683C2FBC706245C13717E418D
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a373a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 11 Jun 2026 14:36:06 +0000
ROA not before:           Thu 11 Jun 2026 14:31:06 +0000
ROA not after:            Thu 10 Jun 2027 14:36:06 +0000
asID:                     9009
IP address blocks:        2602:ff62:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b0:a7:6b:d9:20:88:d6:83:c2:fb:c7:06:24:5c:13:71:7e:41:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun 11 14:31:06 2026 GMT
            Not After : Jun 10 14:36:06 2027 GMT
        Subject: CN=E4721E3822811A4B6AADBC7530525C9604D602F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f9:6d:2d:8e:1c:d0:f5:7d:5a:64:5a:8c:31:
                    b2:03:32:ab:59:8d:31:24:95:b6:3c:93:62:b9:a7:
                    6b:65:d1:00:30:4f:6d:1e:69:fd:65:db:36:73:3e:
                    24:57:70:37:7c:c7:dd:2b:73:1d:97:71:86:4a:94:
                    c2:41:2b:ee:fa:c8:c5:1f:62:f0:9c:73:ae:8a:f8:
                    6d:5b:33:46:3d:9b:81:f1:e1:19:47:d2:0b:5b:55:
                    33:ac:29:12:47:38:4a:99:53:17:d5:f9:41:1c:2b:
                    cd:ea:e9:7e:09:fb:71:55:08:bd:80:d1:12:cd:fa:
                    e6:8a:4a:44:a1:3e:d2:c2:8f:bd:dd:40:b6:f2:bf:
                    34:d7:e5:8e:46:55:6d:40:b4:7e:84:5e:c8:ec:10:
                    5b:8b:29:31:13:04:b0:f6:f2:ba:d0:38:d2:43:98:
                    a8:5e:f9:56:db:39:18:70:fe:b9:eb:77:67:8f:50:
                    40:dc:c1:d8:38:6d:d6:48:37:48:da:de:ef:5c:fa:
                    8c:c5:ad:14:b1:9c:bd:ec:aa:39:99:82:7c:4b:a6:
                    3a:f1:23:82:7f:5c:d9:38:b3:05:f9:ad:06:58:ff:
                    1b:6d:ec:62:79:d2:90:c6:69:03:ac:95:99:20:fd:
                    02:3b:f8:bf:3d:c5:24:4d:f9:21:17:2d:7f:01:cd:
                    40:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:72:1E:38:22:81:1A:4B:6A:AD:BC:75:30:52:5C:96:04:D6:02:F1
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a373a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:ba:d9:b8:59:17:94:d3:fd:96:6a:d8:ec:23:cd:e3:cf:aa:
         dd:7a:e1:ca:40:99:b9:9e:b9:f3:3a:dc:76:29:ca:f9:49:b2:
         85:f4:18:84:f3:b7:70:7d:3b:af:f6:2f:7e:a3:90:f9:3a:e3:
         d2:8b:af:52:8a:20:4b:1a:16:e3:37:3a:08:15:d3:0a:3c:dd:
         d9:b8:c2:8f:11:7a:16:d1:54:b4:43:e9:09:29:b7:6d:1a:ef:
         45:05:e5:e8:6c:34:11:a9:07:17:aa:e3:8b:53:8b:2d:77:dc:
         02:c5:42:da:4a:e0:43:51:a2:b5:57:49:df:c7:ae:4b:30:1d:
         e5:27:0f:02:5a:42:f6:f0:ee:d7:14:4b:3c:b3:74:1b:ae:3c:
         b1:37:a4:4d:2f:79:ea:b4:a2:02:9d:a7:07:ab:2e:b7:0c:e8:
         27:da:a4:19:0b:be:ac:34:44:84:2f:1c:48:18:f3:87:ae:d6:
         72:de:3f:06:c1:ae:aa:07:7c:8c:ce:9f:83:2c:69:49:e9:52:
         5c:bb:98:1b:2a:81:38:4a:b7:89:ae:9a:fa:0d:91:3a:d3:8d:
         42:86:d1:b7:52:32:cf:1b:f3:a6:10:52:00:cc:c7:d7:ec:5f:
         c2:85:70:f6:f7:58:55:16:67:30:8c:d1:c4:64:e6:ed:cb:09:
         af:1d:47:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:11:57 2026 by rpki-client