Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/0/323630323a663532383a313a3a2f34382d3438203d3e203139383936.roa
File:                     323630323a663532383a313a3a2f34382d3438203d3e203139383936.roa (raw, json)
Hash identifier:          lb3PT08VqlLQHXcq7QGItWujC1bZEkS/I158XyeH124=
Subject key identifier:   36:AD:1F:DC:94:0D:89:2C:06:6C:F1:D0:7F:F1:4F:41:F2:3C:E6:CB
Certificate issuer:       /CN=afaf915e629d0fa6be0b10062f97b05c5822e4e3cf536bb67f
Certificate serial:       6FA2188B712A48F305DCB8F6BAE91E1841AF3EAD
Authority key identifier: 67:B3:7B:A6:0D:C4:FD:4A:99:B6:E6:45:F2:94:CB:9C:D8:3C:11:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/66491223-7150-4af9-89c3-d72b60f156fd/afaf915e629d0fa6be0b10062f97b05c5822e4e3cf536bb67f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/0/323630323a663532383a313a3a2f34382d3438203d3e203139383936.roa
Signing time:             Sat 14 Feb 2026 05:25:03 +0000
ROA not before:           Sat 14 Feb 2026 05:20:03 +0000
ROA not after:            Sat 13 Feb 2027 05:25:03 +0000
asID:                     19896
IP address blocks:        2602:f528:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/0/67B37BA60DC4FD4A99B6E645F294CB9CD83C11A9.crl
                          rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/0/67B37BA60DC4FD4A99B6E645F294CB9CD83C11A9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/66491223-7150-4af9-89c3-d72b60f156fd/afaf915e629d0fa6be0b10062f97b05c5822e4e3cf536bb67f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/66491223-7150-4af9-89c3-d72b60f156fd/66491223-7150-4af9-89c3-d72b60f156fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/66491223-7150-4af9-89c3-d72b60f156fd/66491223-7150-4af9-89c3-d72b60f156fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/66491223-7150-4af9-89c3-d72b60f156fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a2:18:8b:71:2a:48:f3:05:dc:b8:f6:ba:e9:1e:18:41:af:3e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afaf915e629d0fa6be0b10062f97b05c5822e4e3cf536bb67f
        Validity
            Not Before: Feb 14 05:20:03 2026 GMT
            Not After : Feb 13 05:25:03 2027 GMT
        Subject: CN=36AD1FDC940D892C066CF1D07FF14F41F23CE6CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:25:77:a2:4a:a3:dd:b6:23:87:bf:e5:88:a9:
                    78:87:ab:76:61:12:12:42:6e:e4:f2:18:24:8d:d1:
                    77:55:03:02:f0:78:c0:88:d0:da:cd:7c:d0:76:42:
                    a5:ff:2a:3a:aa:ad:6c:95:e1:be:87:47:ac:1b:66:
                    85:6e:05:e6:84:90:9b:21:1c:ef:97:7c:1a:2e:9a:
                    4a:2f:73:09:bd:fa:d3:97:ae:f4:67:b5:95:ec:e5:
                    03:28:1f:7c:e5:b4:2d:5f:4b:f6:13:0f:66:b8:87:
                    81:86:02:c7:7d:dc:9b:bc:d9:26:6b:9e:0f:ca:d8:
                    f1:e1:19:e7:71:40:f3:40:64:d0:6a:31:53:d8:7a:
                    43:ae:8e:9f:2b:95:1f:5b:9e:d2:2b:83:66:58:30:
                    f3:b0:3d:ec:f8:d7:1b:86:4c:a8:19:2d:83:9f:9c:
                    40:40:f9:03:d5:84:21:19:cc:04:0c:97:b1:55:53:
                    48:90:b7:82:32:fc:0e:77:44:7c:88:93:3f:a2:3b:
                    62:a4:07:9f:5e:cc:49:9e:59:aa:e7:35:4d:43:80:
                    94:2c:e5:b2:99:24:56:1e:1b:50:51:88:41:19:cd:
                    4b:8d:14:d3:ee:26:d6:75:4f:7a:6a:91:84:3e:ed:
                    f6:d3:fc:61:f2:d6:9a:4d:19:85:a8:a6:4d:c0:48:
                    ee:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AD:1F:DC:94:0D:89:2C:06:6C:F1:D0:7F:F1:4F:41:F2:3C:E6:CB
            X509v3 Authority Key Identifier:
                keyid:67:B3:7B:A6:0D:C4:FD:4A:99:B6:E6:45:F2:94:CB:9C:D8:3C:11:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/0/67B37BA60DC4FD4A99B6E645F294CB9CD83C11A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/66491223-7150-4af9-89c3-d72b60f156fd/afaf915e629d0fa6be0b10062f97b05c5822e4e3cf536bb67f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/0/323630323a663532383a313a3a2f34382d3438203d3e203139383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f528:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:fc:55:67:ad:4d:58:33:6c:98:e1:ff:f3:5d:1c:31:1c:6f:
         e6:be:4d:63:16:cb:18:3b:65:e6:df:91:f0:f8:8f:9f:09:02:
         c3:29:84:69:e0:06:4a:0b:79:6b:2a:2e:54:4c:e8:fc:47:0b:
         2f:a8:5c:dc:98:bf:f7:a8:9b:5c:32:67:c0:0c:8b:91:51:e9:
         b5:cd:e8:08:86:e9:c4:eb:04:ff:ca:c9:a6:02:72:bc:31:7a:
         51:6a:f1:cb:c2:10:11:1a:8d:fa:6d:3b:18:d1:76:f5:f5:0c:
         37:7b:00:ef:da:2d:55:71:82:8c:ca:17:2e:81:ba:4a:2e:10:
         3f:97:38:d7:8e:3c:9b:48:2a:03:d4:ae:5f:2a:43:de:03:67:
         2e:c9:49:ca:c5:2e:22:30:10:4f:13:20:16:41:d4:d7:73:df:
         4c:00:76:7c:87:c1:16:1a:bd:3f:4a:98:e3:fe:48:87:1a:7b:
         83:1d:b9:7c:ae:55:ca:3b:b3:9b:5e:8d:c8:ca:c2:9e:bf:ab:
         62:6c:b3:29:f3:81:29:1d:8c:39:56:d4:0b:32:7e:93:e9:15:
         a2:5a:f4:32:1d:ac:58:3d:a8:c2:22:68:cd:ba:a2:df:11:f8:
         ce:4c:d9:60:62:07:a3:70:fc:50:e9:b6:4a:06:00:e6:4c:96:
         06:02:6c:fb
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUb6IYi3EqSPMF3Lj2uukeGEGvPq0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWZhZjkxNWU2MjlkMGZhNmJlMGIxMDA2MmY5N2IwNWM1
ODIyZTRlM2NmNTM2YmI2N2YwHhcNMjYwMjE0MDUyMDAzWhcNMjcwMjEzMDUyNTAz
WjAzMTEwLwYDVQQDEygzNkFEMUZEQzk0MEQ4OTJDMDY2Q0YxRDA3RkYxNEY0MUYy
M0NFNkNCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyV3okqj3bYj
h7/liKl4h6t2YRISQm7k8hgkjdF3VQMC8HjAiNDazXzQdkKl/yo6qq1sleG+h0es
G2aFbgXmhJCbIRzvl3waLppKL3MJvfrTl670Z7WV7OUDKB985bQtX0v2Ew9muIeB
hgLHfdybvNkma54Pytjx4RnncUDzQGTQajFT2HpDro6fK5UfW57SK4NmWDDzsD3s
+NcbhkyoGS2Dn5xAQPkD1YQhGcwEDJexVVNIkLeCMvwOd0R8iJM/ojtipAefXsxJ
nlmq5zVNQ4CULOWymSRWHhtQUYhBGc1LjRTT7ibWdU96apGEPu320/xh8taaTRmF
qKZNwEjuYwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFDatH9yUDYksBmzx0H/xT0Hy
PObLMB8GA1UdIwQYMBaAFGeze6YNxP1KmbbmRfKUy5zYPBGpMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2NlYTViMzQ4NGMyYjQ1MGZiMjc3M2IxYjk4MWY1MDg3LzAv
NjdCMzdCQTYwREM0RkQ0QTk5QjZFNjQ1RjI5NENCOUNEODNDMTFBOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDll
ZjFiNGUyLzY2NDkxMjIzLTcxNTAtNGFmOS04OWMzLWQ3MmI2MGYxNTZmZC9hZmFm
OTE1ZTYyOWQwZmE2YmUwYjEwMDYyZjk3YjA1YzU4MjJlNGUzY2Y1MzZiYjY3Zi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jZWE1YjM0ODRjMmI0NTBmYjI3NzNi
MWI5ODFmNTA4Ny8wLzMyMzYzMDMyM2E2NjM1MzIzODNhMzEzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMTM5MzgzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1KAABMA0GCSqGSIb3
DQEBCwUAA4IBAQCi/FVnrU1YM2yY4f/zXRwxHG/mvk1jFssYO2Xm35Hw+I+fCQLD
KYRp4AZKC3lrKi5UTOj8RwsvqFzcmL/3qJtcMmfADIuRUem1zegIhunE6wT/ysmm
AnK8MXpRavHLwhARGo36bTsY0Xb19Qw3ewDv2i1VcYKMyhcugbpKLhA/lzjXjjyb
SCoD1K5fKkPeA2cuyUnKxS4iMBBPEyAWQdTXc99MAHZ8h8EWGr0/Spjj/kiHGnuD
Hbl8rlXKO7ObXo3IysKev6tibLMp84EpHYw5VtQLMn6T6RWiWvQyHaxYPajCImjN
uqLfEfjOTNlgYgejcPxQ6bZKBgDmTJYGAmz7
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:15 2026 by rpki-client