Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3231313a3a2f34382d3438203d3e203630393030.roa
File:                     323630323a663530633a3231313a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          dhhFLrSgEodcegvDXkCR1aOUFC0zGoUoszuWiAF4vI4=
Subject key identifier:   96:87:D7:8B:5B:99:77:78:D2:35:46:54:C7:3B:5B:F8:E9:AB:9C:F3
Certificate issuer:       /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Certificate serial:       7FE66BD656AB0598AE272AFA9FDFFB55264BC6BE
Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3231313a3a2f34382d3438203d3e203630393030.roa
Signing time:             Sat 03 Oct 2026 20:17:20 +0000
ROA not before:           Sat 03 Oct 2026 20:12:20 +0000
ROA not after:            Sat 02 Oct 2027 20:17:20 +0000
asID:                     60900
IP address blocks:        2602:f50c:211::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 18:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e6:6b:d6:56:ab:05:98:ae:27:2a:fa:9f:df:fb:55:26:4b:c6:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
        Validity
            Not Before: Oct  3 20:12:20 2026 GMT
            Not After : Oct  2 20:17:20 2027 GMT
        Subject: CN=9687D78B5B997778D2354654C73B5BF8E9AB9CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a5:84:96:73:cd:95:5f:bc:f5:24:5c:6a:b1:
                    08:b4:a4:69:03:75:97:ad:ec:a0:30:58:0b:1c:ae:
                    7a:d7:f6:df:5d:7a:2e:4f:a2:3a:60:25:59:37:5f:
                    df:c0:9f:bb:82:02:cf:7e:f0:2e:e5:af:ec:b3:c2:
                    da:d3:6c:66:38:17:42:6d:ee:40:9d:86:e2:8f:48:
                    ca:31:ad:6c:a4:b8:e1:5a:c4:b6:f8:23:16:9f:c7:
                    a4:1e:e0:48:5c:00:98:a9:24:53:fb:5c:24:b7:92:
                    01:4b:68:21:17:b7:d2:b7:5f:7a:ca:5e:a7:db:70:
                    de:7f:b9:ee:44:e2:d6:db:22:6d:d6:48:3c:8a:ba:
                    94:8e:78:81:4a:91:a0:cf:3c:0c:6e:7a:19:1a:95:
                    02:15:2d:7f:00:f2:7e:a6:74:2f:cf:17:4c:a0:88:
                    f2:84:13:f4:1f:2c:44:e0:22:10:b9:3e:47:b3:c0:
                    90:94:34:4c:13:03:a3:53:22:38:48:33:84:23:dc:
                    94:05:27:1e:ef:b6:0c:f7:af:7a:b0:79:83:d7:b1:
                    f5:cc:85:1d:9f:4d:9b:cc:b1:8b:ca:34:0d:77:8e:
                    72:2f:b7:cb:46:93:72:3b:4c:db:be:08:f7:84:1c:
                    e5:c4:23:20:b8:48:26:7b:f4:5b:91:7c:d5:28:de:
                    15:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:87:D7:8B:5B:99:77:78:D2:35:46:54:C7:3B:5B:F8:E9:AB:9C:F3
            X509v3 Authority Key Identifier:
                keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3231313a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f50c:211::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:69:c7:aa:72:ec:52:98:fb:53:fa:a1:2a:41:16:43:fe:80:
         3e:bb:29:2f:48:b2:d1:35:c9:ea:e5:cd:56:c5:fe:74:51:7c:
         c8:e2:9b:94:93:57:11:ca:7e:ad:e4:12:b8:fa:d6:b7:af:28:
         d4:a9:12:a0:1f:1d:f3:dd:2c:70:b5:aa:73:6b:8a:ee:cd:3e:
         5e:b0:d6:4c:1e:18:c5:f6:20:f7:77:69:b4:34:a7:c6:c6:e9:
         a6:55:8d:35:85:35:ce:35:8b:c7:8e:92:22:5f:d4:41:63:cc:
         cf:7c:25:0c:82:b3:47:be:03:ef:b4:90:bc:f6:ec:bf:b0:40:
         32:1d:a4:32:fc:e4:cc:bf:fa:5c:29:8a:d5:f9:54:09:9a:50:
         18:cf:72:14:cc:c9:8e:04:a6:e7:00:fa:e7:63:78:26:64:bb:
         ff:e5:7a:9b:e7:ba:30:cd:6a:7c:2b:3c:d1:aa:46:10:ea:a7:
         f0:9a:cd:fd:95:3e:9e:72:4e:a3:b9:5d:58:89:c4:cd:79:f9:
         bf:4b:d1:86:38:22:5e:2b:5d:a7:e5:61:13:10:d0:6c:03:17:
         52:1f:cf:c0:ab:6d:4b:22:8b:b6:89:fe:43:60:b5:50:2e:2b:
         38:05:0c:41:5c:6c:5f:d9:69:3f:8c:a5:2f:81:0e:e2:45:40:
         7c:3a:b8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:29:27 2026 by rpki-client