Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a34323a3a2f34382d3438203d3e203136393039.roa
File:                     323630323a663738613a34323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          do8ILQozbkkYgYroQ/7jcDcVI9UR/o+V6pRShrJgh0c=
Subject key identifier:   C2:0C:79:CD:CC:5D:DA:1B:F4:34:99:DB:B6:45:FE:A0:BB:FE:8A:8A
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       5E0D76160BBEBBC96FD00FF20452C25A563BA5A2
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a34323a3a2f34382d3438203d3e203136393039.roa
Signing time:             Tue 07 Apr 2026 19:06:14 +0000
ROA not before:           Tue 07 Apr 2026 19:01:14 +0000
ROA not after:            Tue 06 Apr 2027 19:06:14 +0000
asID:                     16909
IP address blocks:        2602:f78a:42::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0d:76:16:0b:be:bb:c9:6f:d0:0f:f2:04:52:c2:5a:56:3b:a5:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Apr  7 19:01:14 2026 GMT
            Not After : Apr  6 19:06:14 2027 GMT
        Subject: CN=C20C79CDCC5DDA1BF43499DBB645FEA0BBFE8A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:86:46:cd:02:10:7f:50:61:0e:c1:2a:28:38:
                    23:79:01:ef:02:66:09:00:4c:20:47:63:d1:db:96:
                    4c:11:6c:1f:ee:e5:d3:b5:ad:17:66:39:0e:0b:f0:
                    8a:18:36:4e:93:e9:bf:e7:a1:32:d7:38:35:23:9d:
                    8c:c5:09:68:1a:f2:ae:06:0f:5c:9f:55:a7:ee:16:
                    36:2c:d8:ef:07:b3:65:4d:71:31:2a:25:44:34:f7:
                    2c:f6:82:a7:23:4d:ca:36:25:87:84:c7:26:40:a8:
                    3e:36:b3:17:0e:7b:20:0f:2f:df:f6:b0:5f:ea:a6:
                    24:6f:a2:88:4a:70:1c:ec:e9:09:be:ec:da:40:8a:
                    79:0e:07:61:0d:f4:f2:92:b3:0b:3f:d5:7a:c0:03:
                    64:b5:e6:ec:4e:30:be:56:87:e5:00:82:85:09:79:
                    2c:99:e2:63:2a:6a:5a:1a:7b:fe:20:1b:47:e3:a5:
                    b5:c9:0b:12:aa:b7:15:c2:d1:da:70:5f:15:79:66:
                    87:85:07:6b:c1:32:65:48:d6:ec:b3:a6:60:57:cf:
                    26:f5:6f:f4:76:a2:68:0d:e7:ad:ee:fc:a8:97:cf:
                    44:e1:9b:e6:30:f9:df:27:6b:ab:91:63:00:0a:82:
                    f5:40:b5:26:27:ed:c2:be:9b:a1:33:b2:e9:d3:53:
                    ea:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0C:79:CD:CC:5D:DA:1B:F4:34:99:DB:B6:45:FE:A0:BB:FE:8A:8A
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a34323a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:42::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:1b:46:36:8e:86:55:23:48:2a:f6:6e:e7:e5:9c:3b:10:31:
         82:35:03:05:91:2d:2d:b5:d3:9c:e4:18:4c:84:37:3b:aa:c1:
         b6:59:a2:70:e9:11:66:2e:3e:8a:58:b5:8a:63:6f:6f:51:50:
         2b:ac:1c:41:64:3f:db:1f:ca:b0:5e:ec:2e:c9:75:11:4a:fa:
         38:0b:e6:e5:01:7e:a1:7f:03:0f:c7:e2:49:4d:6f:68:c2:af:
         fa:4d:25:d6:40:ab:f7:c3:bf:7c:38:fe:ba:07:ca:33:8a:1f:
         f3:61:d1:38:14:c9:be:c6:5d:16:4d:a8:2a:c2:91:a2:e4:39:
         03:eb:9b:dc:aa:74:f2:9e:4e:de:31:aa:0f:f1:b9:66:28:07:
         e6:4f:84:7e:a9:f2:34:8e:22:c5:02:d0:10:fb:12:91:53:fc:
         e1:e9:d6:8b:db:ac:4e:14:81:6f:d3:d7:93:20:45:39:31:49:
         9d:f5:cc:4b:4f:aa:b1:a4:6b:0a:ae:9a:10:2a:3d:ff:8a:e3:
         ec:08:ed:8d:5f:d7:b1:2e:32:3f:73:ec:a5:95:54:40:f5:9e:
         8f:01:be:3c:8f:90:cc:c1:18:22:6b:89:24:da:c8:7d:2a:11:
         3a:71:85:9a:2c:bc:36:04:ca:be:d2:30:3b:6a:77:12:a8:59:
         b1:b1:b9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:20:57 2026 by rpki-client