Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a6530303a3a2f34302d3430203d3e2033323830.roa
File:                     323630323a666336383a6530303a3a2f34302d3430203d3e2033323830.roa (raw, json)
Hash identifier:          JTQvDjctdIsOlxuV+CXVOrKBy3yWhNR+w8hE8iWMYYo=
Subject key identifier:   29:10:A9:85:28:8F:03:B1:6B:ED:14:4B:36:94:A9:16:80:55:8F:23
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       21375AC577929F5959CEAC52CF4A236FC32094F6
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a6530303a3a2f34302d3430203d3e2033323830.roa
Signing time:             Fri 20 Feb 2026 22:09:56 +0000
ROA not before:           Fri 20 Feb 2026 22:04:56 +0000
ROA not after:            Fri 19 Feb 2027 22:09:56 +0000
asID:                     3280
IP address blocks:        2602:fc68:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 06:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:37:5a:c5:77:92:9f:59:59:ce:ac:52:cf:4a:23:6f:c3:20:94:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Feb 20 22:04:56 2026 GMT
            Not After : Feb 19 22:09:56 2027 GMT
        Subject: CN=2910A985288F03B16BED144B3694A91680558F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:68:96:ed:8a:a4:f8:79:97:31:3f:51:ef:
                    e6:f1:e2:1a:0a:97:f6:92:e7:cd:cd:0c:a8:13:4a:
                    6d:bc:d2:99:63:07:49:5f:94:17:db:0c:35:c4:16:
                    6e:2e:52:c9:3d:cc:a3:16:f9:ef:1c:e4:68:34:dd:
                    db:1c:81:12:18:a9:36:73:70:c1:74:b0:46:7d:bf:
                    c2:5b:65:41:62:e1:7b:20:05:32:c0:77:28:f7:7c:
                    3e:84:36:b2:6c:49:98:d0:30:23:4f:65:09:84:bd:
                    14:4a:b0:c9:11:43:f7:02:2e:8e:54:0c:49:08:5f:
                    9e:4c:8e:87:76:4f:a9:85:9e:0e:3c:77:0a:b3:4d:
                    8e:87:a3:91:49:64:90:2a:c2:cc:12:82:0c:1f:98:
                    88:82:93:bd:f5:a5:ac:23:d4:1b:0a:28:86:1b:64:
                    b4:9a:3a:5c:05:bd:68:6c:80:6d:f6:15:af:49:66:
                    f7:ad:25:d0:03:44:e4:6e:4d:31:1f:5c:f2:0e:03:
                    10:3e:d3:b8:7e:34:dc:7e:21:2d:58:ff:80:6a:d8:
                    d8:63:ce:ef:e3:99:2d:f6:79:a8:1a:3f:05:a6:1e:
                    a6:bb:7a:08:1b:1a:f0:d3:69:db:de:8d:c4:6c:e4:
                    de:f8:d3:f3:a4:ed:52:27:81:4b:56:e2:95:a5:d9:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:10:A9:85:28:8F:03:B1:6B:ED:14:4B:36:94:A9:16:80:55:8F:23
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a6530303a3a2f34302d3430203d3e2033323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc68:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:d9:b9:87:ca:e0:d2:d7:80:5b:7e:42:53:a0:28:d0:f4:28:
         0d:73:a3:40:df:ff:ef:8c:c0:54:a7:a5:0d:40:bb:f0:3c:d6:
         c5:b5:11:ff:3f:a4:b1:88:4a:5b:3b:a6:7d:96:7a:1c:fe:f7:
         96:e6:01:04:fa:65:aa:15:c7:44:58:87:04:30:00:07:09:33:
         4f:87:37:26:71:42:e9:4d:55:e5:2e:04:6e:40:fa:0b:e1:96:
         84:80:f1:0e:a5:5e:e2:f5:9c:96:e4:98:a3:d4:7a:a1:dc:13:
         b7:e9:68:ee:82:54:cb:91:fd:94:38:20:5d:00:2d:67:76:85:
         f5:00:7d:b0:e4:c0:97:90:83:a8:1d:bc:0f:42:b6:3e:48:5b:
         e5:15:f3:c3:5b:52:34:55:a1:fc:52:c0:98:16:bc:d2:58:f4:
         c6:51:51:e1:f9:35:6e:f4:fb:33:b0:d0:15:87:a9:90:c0:f1:
         d0:d5:a5:1f:2f:74:23:98:d9:4f:b2:af:1d:8c:a9:fe:d4:05:
         30:64:7b:ea:93:70:74:55:a5:76:13:c1:d5:e8:6c:0d:53:9e:
         82:ee:ab:b3:56:7d:8e:f2:06:03:7f:18:c0:cd:1e:c6:d3:e8:
         c1:00:43:36:d8:ee:c5:12:93:f8:1e:3a:79:d0:99:4c:a3:4b:
         17:3e:26:be
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUITdaxXeSn1lZzqxSz0ojb8MglPYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDk4NWVhNTBkZjU0ZTc5NWE0YmUxNGFkNTE4OGE4ZTUy
ODczNzg3MDM5YmI2YjI3YjIwHhcNMjYwMjIwMjIwNDU2WhcNMjcwMjE5MjIwOTU2
WjAzMTEwLwYDVQQDEygyOTEwQTk4NTI4OEYwM0IxNkJFRDE0NEIzNjk0QTkxNjgw
NTU4RjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5tolu2KpPh5
lzE/Ue/m8eIaCpf2kufNzQyoE0ptvNKZYwdJX5QX2ww1xBZuLlLJPcyjFvnvHORo
NN3bHIESGKk2c3DBdLBGfb/CW2VBYuF7IAUywHco93w+hDaybEmY0DAjT2UJhL0U
SrDJEUP3Ai6OVAxJCF+eTI6Hdk+phZ4OPHcKs02Oh6ORSWSQKsLMEoIMH5iIgpO9
9aWsI9QbCiiGG2S0mjpcBb1obIBt9hWvSWb3rSXQA0Tkbk0xH1zyDgMQPtO4fjTc
fiEtWP+AatjYY87v45kt9nmoGj8Fph6mu3oIGxrw02nb3o3EbOTe+NPzpO1SJ4FL
VuKVpdlG4wIDAQABo4ICuDCCArQwHQYDVR0OBBYEFCkQqYUojwOxa+0USzaUqRaA
VY8jMB8GA1UdIwQYMBaAFBjAkk0jHaMBlRYLJe7mMn60Awb4MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMzYzVjNWY2YjViLzAv
MThDMDkyNEQyMzFEQTMwMTk1MTYwQjI1RUVFNjMyN0VCNDAzMDZGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzcyMjViNDE1LThhZTAtNDUyMy1iMzdmLTc0ZWQ3ODA2NzZhYS8wOTg1
ZWE1MGRmNTRlNzk1YTRiZTE0YWQ1MTg4YThlNTI4NzM3ODcwMzliYjZiMjdiMi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MTcz
M2M1YzVmNmI1Yi8wLzMyMzYzMDMyM2E2NjYzMzYzODNhNjUzMDMwM2EzYTJmMzQz
MDJkMzQzMDIwM2QzZTIwMzMzMjM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAmAvxoDjANBgkqhkiG
9w0BAQsFAAOCAQEAGtm5h8rg0teAW35CU6Ao0PQoDXOjQN//74zAVKelDUC78DzW
xbUR/z+ksYhKWzumfZZ6HP73luYBBPplqhXHRFiHBDAABwkzT4c3JnFC6U1V5S4E
bkD6C+GWhIDxDqVe4vWcluSYo9R6odwTt+lo7oJUy5H9lDggXQAtZ3aF9QB9sOTA
l5CDqB28D0K2Pkhb5RXzw1tSNFWh/FLAmBa80lj0xlFR4fk1bvT7M7DQFYepkMDx
0NWlHy90I5jZT7KvHYyp/tQFMGR76pNwdFWldhPB1ehsDVOegu6rs1Z9jvIGA38Y
wM0extPowQBDNtjuxRKT+B46edCZTKNLFz4mvg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:28 2026 by rpki-client