Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a643a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a643a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          lLLngGEO13lhwrL8LWvCszwiwT1pz0DDN22F6pUKWtA=
Subject key identifier:   3B:F4:78:44:0C:08:B0:EA:62:F9:39:3C:B6:E1:51:7A:CE:96:9D:65
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       70B3684FDF4A5D544AA309B579531780EAF74C10
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a643a3a2f34382d3438203d3e2039303039.roa
Signing time:             Mon 23 Feb 2026 14:46:15 +0000
ROA not before:           Mon 23 Feb 2026 14:41:15 +0000
ROA not after:            Mon 22 Feb 2027 14:46:15 +0000
asID:                     9009
IP address blocks:        2602:ff62:d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 11:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b3:68:4f:df:4a:5d:54:4a:a3:09:b5:79:53:17:80:ea:f7:4c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Feb 23 14:41:15 2026 GMT
            Not After : Feb 22 14:46:15 2027 GMT
        Subject: CN=3BF478440C08B0EA62F9393CB6E1517ACE969D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:8f:31:30:39:d0:05:07:af:64:34:f5:62:
                    da:57:59:da:ca:1e:8e:62:68:ea:40:1b:5b:41:c5:
                    82:f0:f7:da:51:cf:8a:c7:af:e3:24:01:1e:b8:47:
                    1a:51:e1:82:49:9c:bc:c3:ed:0f:52:3a:48:f8:99:
                    ef:86:f2:a5:02:4e:59:fc:ed:10:31:f0:54:71:da:
                    8c:3a:93:13:70:8f:1f:59:16:64:b4:be:ae:ed:5d:
                    a6:43:94:59:90:b5:74:50:39:4b:a7:a4:f9:47:82:
                    6f:86:b1:18:4a:00:cc:3b:a4:d7:78:97:d1:ee:74:
                    96:9d:1e:99:a3:77:c9:cb:36:72:c8:ea:54:f3:96:
                    3b:8d:af:56:2b:a5:ff:4d:fd:34:07:c2:f4:ae:9b:
                    86:6f:af:c1:bb:0f:9a:4c:1a:41:23:c6:77:e5:ca:
                    81:02:f6:7e:84:78:96:79:c1:e5:9b:81:c5:b6:9b:
                    d6:77:ea:f2:b6:e6:c6:36:a2:1b:b1:6a:45:c7:a5:
                    67:8c:27:c5:d1:af:10:73:aa:36:25:3e:1f:c4:46:
                    66:ce:a6:de:3a:c5:b7:f8:69:2e:a3:cc:c8:7c:64:
                    2c:9b:e3:30:5b:57:90:a9:f1:3d:e0:65:ec:6a:b3:
                    60:5b:ab:59:0e:7a:41:b3:a2:b2:6d:e2:11:ec:66:
                    1a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F4:78:44:0C:08:B0:EA:62:F9:39:3C:B6:E1:51:7A:CE:96:9D:65
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a643a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:36:e8:03:98:6d:fc:b4:fb:7a:0f:74:51:49:1f:ee:27:73:
         7a:b5:bd:59:47:5b:fe:97:53:42:00:4d:63:72:fd:de:3f:97:
         1e:66:3e:a8:73:17:a1:3d:eb:01:00:5d:9b:26:c1:d7:0f:b0:
         14:23:93:1f:b5:d4:b0:24:ba:2a:56:81:1d:31:2b:7a:30:f0:
         e4:2b:65:99:0d:17:67:10:00:e4:32:f0:8c:9e:9b:91:af:fc:
         28:ef:d1:55:c1:a7:77:e1:76:55:89:8a:8c:ef:38:86:99:5b:
         ba:8a:b6:41:ee:4f:02:fe:a0:76:6e:d2:e5:16:c8:77:a2:77:
         c3:c4:20:b3:0d:4c:99:ba:57:15:39:71:24:44:eb:cf:a3:5c:
         8d:cb:b7:8c:44:ab:12:c8:6e:6e:48:fc:d7:9c:2c:c8:b2:21:
         d9:30:3c:b3:66:b4:9a:e5:08:63:ae:e7:bf:41:68:c5:7a:7f:
         cf:20:a7:72:17:f3:33:99:ae:dc:9e:13:93:7e:06:e1:18:d3:
         84:38:5f:6c:41:2e:82:4a:03:b9:24:38:ba:16:6a:cd:a1:99:
         8a:28:eb:43:ce:00:4a:d8:f5:c9:66:8a:d4:ad:ac:6e:88:4c:
         6d:76:a7:42:ca:d7:17:d1:45:aa:7a:b4:1b:c1:b4:7e:a9:47:
         90:d1:78:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:05:56 2026 by rpki-client