Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3231323a3a2f34382d3438203d3e203630393030.roa
File:                     323630323a663530633a3231323a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          B9Nawvs4TTx0nD4QeJ1lb90i1IF+zodPgb2T6hIi+kY=
Subject key identifier:   46:72:3F:E9:69:EB:EB:94:39:6A:94:B8:99:16:12:3A:75:11:A8:36
Certificate issuer:       /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Certificate serial:       247062C3D03087B323FC29B590E1A0BEDAF5BA12
Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3231323a3a2f34382d3438203d3e203630393030.roa
Signing time:             Fri 02 Oct 2026 15:17:19 +0000
ROA not before:           Fri 02 Oct 2026 15:12:19 +0000
ROA not after:            Fri 01 Oct 2027 15:17:19 +0000
asID:                     60900
IP address blocks:        2602:f50c:212::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 18:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:70:62:c3:d0:30:87:b3:23:fc:29:b5:90:e1:a0:be:da:f5:ba:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
        Validity
            Not Before: Oct  2 15:12:19 2026 GMT
            Not After : Oct  1 15:17:19 2027 GMT
        Subject: CN=46723FE969EBEB94396A94B89916123A7511A836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2e:7f:db:27:40:bb:49:c3:c7:ca:5a:f0:c8:
                    65:c4:ae:17:69:73:ae:12:55:8e:8d:ae:39:59:7d:
                    6c:3b:56:c9:7b:26:e8:02:1d:61:96:0f:53:a8:93:
                    94:3a:15:ea:bd:d8:dd:84:88:93:ff:68:a7:be:af:
                    88:3d:e0:85:3e:81:c5:da:74:3e:bc:69:d3:ba:47:
                    91:a5:f1:b5:87:e9:b6:1e:9f:f1:a2:2b:2d:36:41:
                    d1:88:44:a0:d7:cd:1a:a6:40:34:a2:26:08:f4:80:
                    7f:74:34:74:d2:85:39:c8:a0:ca:a8:63:65:04:15:
                    d7:73:fb:cb:05:cc:9b:72:64:1e:7d:f8:37:3f:39:
                    99:e4:26:c4:a1:f7:5d:c4:ed:33:33:f8:b6:13:82:
                    dd:53:f6:84:e6:19:a7:47:3d:12:3a:f4:07:33:9d:
                    77:34:19:ac:8d:03:02:c5:89:70:ff:5d:85:76:0a:
                    c6:07:e2:b5:bb:64:27:27:8e:ab:a2:1b:fa:7a:82:
                    5c:22:11:11:4d:74:50:b3:a1:73:7c:80:c1:62:02:
                    2c:a8:4c:10:bb:64:90:61:5f:ff:f5:b2:8a:1c:1d:
                    37:8a:9c:14:31:73:f0:56:00:b5:1e:a4:be:50:d0:
                    b5:cd:a7:24:83:b3:a9:8a:66:3b:03:04:54:8b:d7:
                    51:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:72:3F:E9:69:EB:EB:94:39:6A:94:B8:99:16:12:3A:75:11:A8:36
            X509v3 Authority Key Identifier:
                keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3231323a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f50c:212::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:51:d5:40:a6:49:6d:bb:cc:63:72:6b:3f:12:27:31:1b:64:
         9c:4e:d7:2f:ea:03:d0:0f:56:0e:03:0f:22:0e:25:e6:57:6d:
         c9:7a:43:7c:20:2e:7f:ca:8c:2d:7f:f5:7b:7c:90:b7:91:3b:
         8f:2c:c5:75:66:b0:e4:1c:db:c1:64:10:c5:92:80:5d:8a:25:
         e9:ef:1b:ad:0a:7f:42:e6:59:46:14:f1:6b:d0:7c:e2:b7:b2:
         7a:a2:36:7d:7d:31:bf:45:56:5b:37:53:08:e6:d5:8c:de:c7:
         1b:45:0f:6c:a1:1a:27:bb:cb:7a:4c:c0:14:a3:ea:45:00:2f:
         61:2d:8d:ed:44:d7:80:01:46:5d:4b:b3:79:a9:1c:c3:0e:21:
         13:61:2d:ef:33:8a:3b:61:1b:45:67:bf:ba:08:f7:39:e9:86:
         57:75:00:5c:f6:e4:02:cb:e9:0f:9e:c6:87:cf:58:82:d6:dd:
         1c:d3:5a:69:98:f1:34:37:fa:43:14:30:a9:5a:a4:37:8a:9f:
         b0:8b:aa:13:94:6d:e7:db:e8:ef:8e:71:c3:b7:71:ad:06:30:
         eb:df:b7:93:29:88:4a:f4:e5:8b:46:e8:27:9e:a2:96:77:37:
         96:3c:81:7a:0f:7e:e1:64:e8:26:e7:f3:62:0c:d6:b1:20:cb:
         8d:3d:4f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:29:05 2026 by rpki-client