Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a3131313a3a2f34382d3438203d3e20343033303234.roa
File:                     323630323a663732653a3131313a3a2f34382d3438203d3e20343033303234.roa (raw, json)
Hash identifier:          2QNZ5w4p3K4f4U0hQYx1/HykCiTWCJzk2S5067Ekuhc=
Subject key identifier:   0D:4F:87:CF:75:E9:33:8E:E9:ED:2C:80:EA:AF:64:B2:D3:BC:F4:64
Certificate issuer:       /CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
Certificate serial:       4A4A0B5C970648E749DEFBAE503CBFC254D9AF88
Authority key identifier: 3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a3131313a3a2f34382d3438203d3e20343033303234.roa
Signing time:             Sun 04 Oct 2026 18:57:33 +0000
ROA not before:           Sun 04 Oct 2026 18:52:33 +0000
ROA not after:            Sun 03 Oct 2027 18:57:33 +0000
asID:                     403024
IP address blocks:        2602:f72e:111::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 23:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:4a:0b:5c:97:06:48:e7:49:de:fb:ae:50:3c:bf:c2:54:d9:af:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
        Validity
            Not Before: Oct  4 18:52:33 2026 GMT
            Not After : Oct  3 18:57:33 2027 GMT
        Subject: CN=0D4F87CF75E9338EE9ED2C80EAAF64B2D3BCF464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:20:78:ec:50:a2:09:7b:b5:11:ce:f0:cf:e4:
                    03:ad:c6:ab:53:30:f7:6b:7c:a7:cd:15:00:49:95:
                    ca:d0:ae:dd:93:6b:3d:48:f3:31:a1:ba:56:12:62:
                    7a:05:45:f0:2f:e1:76:5d:6b:9b:12:2f:2c:15:8b:
                    59:20:10:60:ba:3a:5d:79:6b:d2:81:3e:3b:38:25:
                    1d:e0:d5:99:04:e9:1c:fd:4d:50:07:e3:bc:0f:4b:
                    5d:38:c9:fc:21:d2:84:cc:1a:8a:3e:8e:c2:8a:21:
                    37:ec:3a:2d:94:b7:33:e1:ed:20:39:8a:7f:91:12:
                    12:f0:e3:ae:ab:b8:4d:34:84:2d:69:7f:a6:12:37:
                    e5:72:c3:76:18:a2:5b:f9:8e:91:a2:94:a2:c0:bb:
                    4d:c6:72:f8:3a:f3:b1:f3:1b:36:8e:27:3e:21:3d:
                    ff:54:b0:86:93:fc:4e:05:ca:06:37:54:a8:91:f5:
                    a9:54:d2:44:b5:01:ef:13:8b:11:18:63:68:17:8f:
                    dc:3a:ff:88:de:6f:f6:27:f1:02:7b:26:6b:7f:dd:
                    83:81:af:42:64:3f:78:54:d2:6b:74:94:c0:14:9d:
                    80:2c:89:8b:ab:ba:af:4a:b1:7e:63:62:ab:a8:52:
                    83:87:ce:58:5e:4b:f7:d8:59:10:f0:cf:0b:ef:9c:
                    b4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4F:87:CF:75:E9:33:8E:E9:ED:2C:80:EA:AF:64:B2:D3:BC:F4:64
            X509v3 Authority Key Identifier:
                keyid:3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a3131313a3a2f34382d3438203d3e20343033303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:111::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:08:a6:64:e5:71:72:3c:a6:fb:c1:1e:04:42:f6:47:0b:ba:
         0f:0e:a0:2e:4d:40:48:e4:86:75:20:d8:93:55:34:8a:09:ac:
         e8:cf:ac:08:5e:76:21:73:08:92:2a:c3:33:11:68:03:1a:53:
         e6:12:8d:c8:1d:f4:e7:6c:0b:1f:b0:e4:fc:cb:18:8d:40:56:
         b4:e2:95:79:32:b0:f5:89:23:a0:9c:29:11:1d:b1:66:5e:71:
         f0:f6:4d:9c:17:70:18:3b:95:d6:7d:65:5e:3c:23:21:84:e3:
         c2:09:c8:f5:6b:99:0d:cd:ed:ee:62:90:27:a1:40:01:6b:25:
         c5:76:ca:3d:fc:31:cf:3e:66:8b:48:50:72:5e:fd:24:bb:a1:
         8e:2c:d9:51:be:a2:aa:03:d6:da:ff:1c:d0:e8:54:62:65:ff:
         18:9b:82:fd:51:c3:4c:b7:21:26:db:83:c4:6a:2f:b6:85:bc:
         f1:84:81:00:0c:12:bd:da:ce:da:04:d2:e8:b8:ae:fe:bb:45:
         8a:8b:0b:b6:81:11:69:10:dc:75:79:fe:8d:18:6d:f5:ad:15:
         51:52:46:02:7e:ac:55:b4:60:aa:e1:a1:0c:21:15:2e:14:02:
         a3:06:09:79:7d:07:79:8f:ef:9f:30:f9:89:46:e6:32:45:47:
         37:67:d2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 15:26:36 2026 by rpki-client