Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a653a3a2f34382d3438203d3e2036303739.roa
File:                     323630323a666636323a653a3a2f34382d3438203d3e2036303739.roa (raw, json)
Hash identifier:          uJ5S8gvbd4jtYcG4OWdujg2ZfDzXjN+wWLB56OUXwPw=
Subject key identifier:   3E:7A:82:4E:F5:03:30:30:E8:F2:72:CA:A3:12:E5:AB:78:F6:CF:71
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       899E463CE215502A349B04CBE91EE1521AF2CD
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a653a3a2f34382d3438203d3e2036303739.roa
Signing time:             Thu 26 Feb 2026 13:30:52 +0000
ROA not before:           Thu 26 Feb 2026 13:25:52 +0000
ROA not after:            Thu 25 Feb 2027 13:30:52 +0000
asID:                     6079
IP address blocks:        2602:ff62:e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 05:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            89:9e:46:3c:e2:15:50:2a:34:9b:04:cb:e9:1e:e1:52:1a:f2:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Feb 26 13:25:52 2026 GMT
            Not After : Feb 25 13:30:52 2027 GMT
        Subject: CN=3E7A824EF5033030E8F272CAA312E5AB78F6CF71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9d:e4:62:b5:6f:ae:02:72:9c:29:ea:39:e0:
                    d3:3f:9e:ee:5f:16:a6:a0:65:ff:38:90:93:bb:90:
                    02:e0:d1:d8:d5:ce:fe:0c:7b:a5:2d:5d:d6:99:f0:
                    15:f9:06:ea:6c:4a:c6:82:02:6f:22:91:dc:e7:dd:
                    82:97:7d:3e:b2:92:73:d5:96:bc:d5:1c:1a:92:a2:
                    58:ae:38:31:5e:e7:12:17:7b:9c:da:87:4d:4c:21:
                    2a:20:d3:48:3d:a5:c9:34:e5:bf:f8:a6:ce:59:54:
                    c0:37:a8:14:da:59:cf:1c:88:f1:eb:9b:59:a5:74:
                    e6:c5:39:34:fa:e1:c2:74:55:13:d2:2c:b9:26:f9:
                    70:70:c7:06:d0:6b:af:f3:95:e0:62:b6:e1:f4:91:
                    f0:a9:04:6a:c6:1c:0c:04:08:b4:40:21:0e:e2:f3:
                    10:00:81:50:20:dc:65:e0:17:f3:fe:79:a9:bf:57:
                    1b:ce:5c:22:bd:b6:22:92:5e:f6:4c:f1:5e:f0:6e:
                    43:c5:7e:fa:ab:bc:19:9f:06:bb:f4:77:d4:bc:fb:
                    87:75:f9:41:d4:08:4c:b2:39:7c:13:de:50:76:a8:
                    ef:02:7d:57:eb:b6:2c:7c:8b:83:af:c1:6b:81:04:
                    d6:41:59:11:33:16:9c:1c:ce:d0:1f:4f:1a:19:f9:
                    1a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7A:82:4E:F5:03:30:30:E8:F2:72:CA:A3:12:E5:AB:78:F6:CF:71
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a653a3a2f34382d3438203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:e::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:d5:3f:6a:6c:6d:c9:48:9f:c7:40:ce:9d:47:6e:72:0b:76:
         a7:e9:e1:5d:85:7b:d4:a1:06:25:d7:24:17:94:86:7a:8e:46:
         e5:b2:3d:56:35:2a:30:46:5e:69:5e:07:4f:6a:ab:08:b1:8a:
         84:67:a1:fb:1a:0e:68:65:1d:60:18:04:3f:1f:3a:de:3b:5f:
         f2:aa:f4:7a:a4:c6:e6:c6:0a:d9:40:78:b9:e7:4c:de:ec:26:
         e0:20:a3:4d:18:8c:98:cc:d0:e8:39:77:02:bb:3a:7d:5e:2e:
         f8:ab:3a:60:9d:21:84:0d:82:43:5c:d8:3a:a8:05:da:55:89:
         62:03:81:70:c0:cb:e9:54:55:94:0f:58:a1:45:e0:eb:c1:14:
         c7:65:5a:97:f0:23:91:35:23:ba:5c:e4:22:b0:a5:fe:fb:a6:
         28:b7:d2:16:b9:bc:9d:52:b0:aa:03:ce:1d:ba:09:4b:b4:e6:
         92:cf:2f:cb:74:1b:ee:e2:d6:0f:6c:16:d1:8d:ec:66:ab:42:
         48:40:28:bb:3e:0c:05:e6:7b:d5:2c:d6:f3:d6:58:0a:00:46:
         ca:6c:ab:0d:63:74:2f:59:1c:9f:34:29:2e:ac:c7:e0:3e:80:
         71:c9:a8:93:4e:e1:82:34:b0:cb:ef:06:51:2b:49:2c:32:b6:
         b2:1a:df:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:08:14 2026 by rpki-client