Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3631313a3a2f34382d3438203d3e203630393030.roa
File:                     323630323a663530633a3631313a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          csLyIbV5ZA3fm0lk4CdjNIFM2E6zc4IBVRrye5/FUag=
Subject key identifier:   1C:68:36:F9:81:DF:D6:20:DF:43:7A:13:4C:13:96:EE:76:27:6A:22
Certificate issuer:       /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Certificate serial:       20413069076D7A87E0F4742C71C6C38BE2E2752E
Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3631313a3a2f34382d3438203d3e203630393030.roa
Signing time:             Tue 06 Oct 2026 03:17:20 +0000
ROA not before:           Tue 06 Oct 2026 03:12:20 +0000
ROA not after:            Tue 05 Oct 2027 03:17:20 +0000
asID:                     60900
IP address blocks:        2602:f50c:611::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 18:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:41:30:69:07:6d:7a:87:e0:f4:74:2c:71:c6:c3:8b:e2:e2:75:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
        Validity
            Not Before: Oct  6 03:12:20 2026 GMT
            Not After : Oct  5 03:17:20 2027 GMT
        Subject: CN=1C6836F981DFD620DF437A134C1396EE76276A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cf:cf:5b:0c:c0:16:7b:23:25:ee:6e:8c:b8:
                    63:b2:d0:86:35:17:cf:28:69:1c:c0:34:db:97:d8:
                    8b:12:b7:dd:d8:c0:6c:8f:28:77:bc:b5:7e:4e:c1:
                    2a:5b:53:0c:f2:36:05:87:0f:52:5f:ac:c5:b3:6e:
                    87:43:34:56:2b:8f:a4:5d:c3:b9:11:2b:e2:7b:a9:
                    d8:b5:d1:6c:a5:03:db:40:46:10:e5:77:39:26:4a:
                    d3:ae:af:ac:fd:ef:aa:b3:71:cd:e3:8f:65:71:33:
                    51:cf:3f:51:72:70:a3:11:4b:77:40:fd:3a:2a:f5:
                    e2:cd:01:2f:31:aa:fe:8c:3c:e6:3e:ad:48:31:93:
                    0c:20:e8:30:89:d7:cf:18:38:c2:1b:ed:f9:49:91:
                    ba:1b:6a:18:fa:8c:84:05:65:e4:c2:08:b8:07:a0:
                    9d:7b:d2:22:10:31:fe:69:23:28:0a:35:30:7a:de:
                    5f:a9:a7:c7:70:69:2a:75:c7:b3:fa:1b:f4:37:64:
                    68:e3:96:b4:0d:a6:4b:59:49:11:74:78:ac:63:c3:
                    94:f5:ab:c9:23:c0:50:01:12:cb:bc:40:82:33:de:
                    5b:21:ec:09:71:eb:fd:c8:6f:f8:f9:0a:f7:19:b5:
                    9c:ca:b8:f9:79:e6:8b:c0:96:7f:8c:26:c2:29:ab:
                    cd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:68:36:F9:81:DF:D6:20:DF:43:7A:13:4C:13:96:EE:76:27:6A:22
            X509v3 Authority Key Identifier:
                keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3631313a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f50c:611::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:4e:0b:65:2b:bd:c6:25:22:73:db:96:dd:a8:a9:be:9a:d6:
         9c:e8:aa:ad:90:22:ac:53:80:85:7a:7e:fa:ef:54:f9:6d:7e:
         9c:c8:ca:92:ec:13:6a:68:13:d1:1c:8f:9a:db:cb:b3:52:5e:
         41:50:d3:4e:45:ea:99:94:6a:65:c1:35:60:e7:b8:e4:a3:0f:
         ea:2e:17:fb:f3:8b:99:cc:6e:39:01:5d:1e:d2:5f:19:35:6a:
         ad:6f:27:a4:ca:8b:a1:16:65:05:e0:4f:13:f7:60:ac:1b:32:
         8c:0f:7e:44:36:6b:25:d4:54:f6:0b:8e:ab:25:18:6c:62:09:
         0e:c7:ba:b1:86:a0:ea:e4:cc:ca:8f:71:fc:ce:cc:93:9d:74:
         5f:b2:d9:19:94:1d:26:7b:eb:02:1e:8f:d7:a7:b4:d9:d6:ea:
         ac:8e:78:36:96:32:98:3e:54:c2:ce:4e:f9:a8:65:1c:e9:78:
         c6:07:46:e2:46:24:a5:24:61:1f:6e:67:8e:d6:05:bd:fa:2f:
         ee:77:80:b9:cf:8b:b7:ca:f8:66:39:03:e2:91:9c:c7:17:36:
         8e:2a:ba:f7:ec:1d:4c:58:db:68:64:b6:c6:8f:2f:7b:a7:85:
         b3:bf:e6:04:f3:bc:0d:6d:fc:18:96:74:5c:83:f1:a3:9e:80:
         b8:e3:47:c8
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUIEEwaQdteofg9HQsccbDi+LidS4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmVjZmRmZGJkYjU2ZDNmYmZhMjYxYmIyODdiZjBjNDE4
NTU3MmQwYzIxYjY0ZTFmNzQwHhcNMjYxMDA2MDMxMjIwWhcNMjcxMDA1MDMxNzIw
WjAzMTEwLwYDVQQDEygxQzY4MzZGOTgxREZENjIwREY0MzdBMTM0QzEzOTZFRTc2
Mjc2QTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6c/PWwzAFnsj
Je5ujLhjstCGNRfPKGkcwDTbl9iLErfd2MBsjyh3vLV+TsEqW1MM8jYFhw9SX6zF
s26HQzRWK4+kXcO5ESvie6nYtdFspQPbQEYQ5Xc5JkrTrq+s/e+qs3HN449lcTNR
zz9RcnCjEUt3QP06KvXizQEvMar+jDzmPq1IMZMMIOgwidfPGDjCG+35SZG6G2oY
+oyEBWXkwgi4B6Cde9IiEDH+aSMoCjUwet5fqafHcGkqdcez+hv0N2Ro45a0DaZL
WUkRdHisY8OU9avJI8BQARLLvECCM95bIewJcev9yG/4+Qr3GbWcyrj5eeaLwJZ/
jCbCKavNxwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFBxoNvmB39Yg30N6E0wTlu52
J2oiMB8GA1UdIwQYMBaAFHW/F2dWTXxExb05X2pqIZDS3dcIMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2NhMmIxMmFmYzQyODQzZGJhZTRiMDVjZjM2MGQ5NTJkLzAv
NzVCRjE3Njc1NjREN0M0NEM1QkQzOTVGNkE2QTIxOTBEMkRERDcwOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDll
ZjFiNGUyL2M0MTU2NDRhLWE1YTQtNDg0OS1hYmE5LTE5ODA4NmZkMTU0ZC9mZWNm
ZGZkYmRiNTZkM2ZiZmEyNjFiYjI4N2JmMGM0MTg1NTcyZDBjMjFiNjRlMWY3NC5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jYTJiMTJhZmM0Mjg0M2RiYWU0YjA1
Y2YzNjBkOTUyZC8wLzMyMzYzMDMyM2E2NjM1MzA2MzNhMzYzMTMxM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzYzMDM5MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC9QwGETANBgkq
hkiG9w0BAQsFAAOCAQEAkU4LZSu9xiUic9uW3aipvprWnOiqrZAirFOAhXp++u9U
+W1+nMjKkuwTamgT0RyPmtvLs1JeQVDTTkXqmZRqZcE1YOe45KMP6i4X+/OLmcxu
OQFdHtJfGTVqrW8npMqLoRZlBeBPE/dgrBsyjA9+RDZrJdRU9guOqyUYbGIJDse6
sYag6uTMyo9x/M7Mk510X7LZGZQdJnvrAh6P16e02dbqrI54NpYymD5Uws5O+ahl
HOl4xgdG4kYkpSRhH25njtYFvfov7neAuc+Lt8r4ZjkD4pGcxxc2jiq69+wdTFjb
aGS2xo8ve6eFs7/mBPO8DW38GJZ0XIPxo56AuONHyA==
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:25:57 2026 by rpki-client