Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a32343a3a2f34382d3438203d3e20343033303234.roa
File:                     323630323a663732653a32343a3a2f34382d3438203d3e20343033303234.roa (raw, json)
Hash identifier:          jWtivmwnGP9MxVtNZ2uL4JiB7Y8AaRn2erHCQVkX6ms=
Subject key identifier:   B0:4E:D7:9E:BA:27:46:D9:B8:1C:09:6C:F4:E0:2F:21:40:CD:09:BF
Certificate issuer:       /CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
Certificate serial:       7C9FEA843A7AD9A4DAD192CA37B6B02E8EAFF8AC
Authority key identifier: 3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a32343a3a2f34382d3438203d3e20343033303234.roa
Signing time:             Thu 29 Oct 2026 20:55:24 +0000
ROA not before:           Thu 29 Oct 2026 20:50:24 +0000
ROA not after:            Thu 28 Oct 2027 20:55:24 +0000
asID:                     403024
IP address blocks:        2602:f72e:24::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 10:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9f:ea:84:3a:7a:d9:a4:da:d1:92:ca:37:b6:b0:2e:8e:af:f8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
        Validity
            Not Before: Oct 29 20:50:24 2026 GMT
            Not After : Oct 28 20:55:24 2027 GMT
        Subject: CN=B04ED79EBA2746D9B81C096CF4E02F2140CD09BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:3e:bf:ee:c7:01:d5:fd:ad:d8:48:f1:c7:
                    60:55:52:20:50:23:cf:d2:80:e4:34:ca:aa:81:d4:
                    f4:93:f8:38:19:6b:e9:d7:49:84:a9:c6:ce:d4:b0:
                    c6:13:a5:2d:4d:f7:9e:29:37:3d:b0:9d:3f:82:ee:
                    d3:62:65:88:fc:2b:5d:3b:6e:4a:ca:7c:83:cb:f4:
                    ad:7b:22:38:ea:f0:06:e5:89:01:fb:22:cd:f3:f3:
                    8d:2a:b3:62:7f:bf:e2:9d:ed:36:ad:bf:11:8e:98:
                    0a:ea:58:c1:e0:98:2d:86:92:01:09:44:65:48:88:
                    db:e1:d6:e3:ee:9b:35:fb:79:a7:67:ed:53:12:9d:
                    0c:fe:24:85:b3:e5:04:3f:5d:5b:54:52:aa:98:e1:
                    1e:28:75:00:7f:76:32:71:94:df:87:84:ee:a0:19:
                    a9:53:8e:16:b7:d5:5c:f8:14:39:3f:e7:21:23:37:
                    5a:eb:2e:3e:28:ed:3d:08:a9:2e:13:b5:be:c9:82:
                    a4:b8:79:5b:15:e8:aa:33:57:b3:87:3b:7e:10:bc:
                    c2:6d:c3:72:97:10:12:5d:fa:3d:3f:15:47:f3:f4:
                    22:90:73:20:b0:d1:1d:bb:b8:48:8b:74:bd:0f:6d:
                    38:4d:7d:14:95:57:c5:a2:a0:a9:f8:64:b6:da:0b:
                    7a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4E:D7:9E:BA:27:46:D9:B8:1C:09:6C:F4:E0:2F:21:40:CD:09:BF
            X509v3 Authority Key Identifier:
                keyid:3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a32343a3a2f34382d3438203d3e20343033303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:24::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:0c:fa:19:2a:91:0e:b6:94:e5:af:f2:62:f0:a8:c8:2c:72:
         42:59:6e:95:fe:d7:cc:a8:90:88:61:b4:dd:9f:c2:32:d8:85:
         29:ff:73:75:73:b0:28:43:db:d5:ca:e9:4c:ab:02:11:69:13:
         24:47:ce:bf:44:9a:e7:de:45:67:30:f5:be:2a:f6:b7:ec:fa:
         3d:e3:24:77:11:af:89:79:fb:c2:04:d7:23:f4:1b:52:d1:83:
         34:fd:76:92:f3:91:e7:c6:73:12:08:13:4e:b0:35:52:37:0f:
         1a:bb:40:5f:4c:0b:a0:10:5a:28:bb:f9:fd:5a:ba:c6:45:20:
         3b:b3:50:69:3c:d8:ed:8e:a5:a4:5a:79:2b:55:e6:68:ce:20:
         95:ac:da:ac:23:2c:41:cf:30:64:69:43:ef:e6:67:77:cd:46:
         5c:ba:1f:89:4d:b3:7f:16:80:8c:99:bd:1c:f1:05:19:75:dd:
         21:e4:1e:7a:fc:78:25:13:74:ab:ae:63:df:36:64:4e:43:15:
         c8:18:25:5d:60:b1:76:88:d4:c0:18:be:b7:80:53:ef:a5:e7:
         79:34:75:50:40:04:f2:3d:cc:16:16:8a:52:fb:80:0c:be:f6:
         1d:53:d1:ab:88:55:84:5f:a2:e5:65:aa:2c:4d:a0:30:5c:a2:
         91:dd:96:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:09:07 2026 by rpki-client