Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa
File:                     323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa (raw, json)
Hash identifier:          S4KPxB7Fe+++yQO5c3VMV30bwAqrrRqiM1qMaMu2ZuQ=
Subject key identifier:   BC:43:8A:C1:D6:40:81:38:47:3E:C3:BE:A4:51:DC:A0:7F:C5:7F:66
Certificate issuer:       /CN=03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc
Certificate serial:       18477D6D1B04301C81DAD29C87BD868B67AB9991
Authority key identifier: 4B:5C:BC:46:8E:62:44:4A:54:5B:45:83:61:8A:E3:20:40:8A:B0:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa
Signing time:             Sun 14 Jun 2026 23:54:20 +0000
ROA not before:           Sun 14 Jun 2026 23:49:20 +0000
ROA not after:            Sun 13 Jun 2027 23:54:20 +0000
asID:                     214768
IP address blocks:        2602:f761:30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.crl
                          rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 08:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:47:7d:6d:1b:04:30:1c:81:da:d2:9c:87:bd:86:8b:67:ab:99:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc
        Validity
            Not Before: Jun 14 23:49:20 2026 GMT
            Not After : Jun 13 23:54:20 2027 GMT
        Subject: CN=BC438AC1D6408138473EC3BEA451DCA07FC57F66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:ef:b4:92:f0:50:7e:0f:4b:4c:b1:82:eb:
                    57:73:e8:49:05:bb:a2:ce:61:dd:b6:0f:ff:a0:4e:
                    eb:ac:eb:45:03:d7:78:61:85:76:39:36:85:ad:e9:
                    89:3d:29:9f:e9:23:dc:8a:58:68:95:ef:98:0d:40:
                    62:f4:a3:e6:88:a7:a8:3b:33:0f:d4:11:46:4c:b5:
                    6a:8b:f2:98:d5:5e:73:fd:92:2b:cd:3b:c4:42:b2:
                    f6:67:ed:78:95:9f:e1:10:7c:22:75:bc:41:78:31:
                    bb:9b:f4:87:23:48:01:bd:22:83:d5:2e:26:83:72:
                    65:f0:5c:6d:c4:c0:5f:4b:98:d5:f6:5c:9f:d9:44:
                    a1:24:ee:32:82:8a:12:2d:fb:03:5e:c6:8c:74:cf:
                    66:2a:61:da:be:29:a2:de:67:2a:6c:ca:22:99:e6:
                    2c:c9:0a:17:c3:0b:d7:0d:ba:e1:27:5a:e6:4d:a6:
                    69:4c:74:a0:6a:e0:58:bc:3d:6c:ac:ed:36:cd:fb:
                    cc:97:43:58:c3:dc:f8:f9:e5:91:dc:19:59:a5:36:
                    ad:f8:96:2f:69:27:ca:61:76:29:8e:b2:4c:70:f9:
                    f2:5c:fa:91:94:0e:60:16:7b:35:db:60:06:b0:d2:
                    31:0b:36:fd:df:16:c7:4b:6f:0c:ea:02:23:27:ac:
                    c7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:43:8A:C1:D6:40:81:38:47:3E:C3:BE:A4:51:DC:A0:7F:C5:7F:66
            X509v3 Authority Key Identifier:
                keyid:4B:5C:BC:46:8E:62:44:4A:54:5B:45:83:61:8A:E3:20:40:8A:B0:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f761:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         30:e5:1a:92:98:ec:fb:12:d9:35:9b:a4:ba:7d:ed:e7:0c:3c:
         92:f7:16:d0:4a:60:1e:37:e6:a9:76:69:5a:56:b9:d3:aa:af:
         2e:ad:35:f5:91:6e:ba:05:c7:e1:2e:61:36:4c:a9:33:1c:15:
         1b:e1:6b:e0:4a:cc:01:16:1a:52:b3:ba:7c:e7:80:75:29:ef:
         78:21:92:cc:f4:2b:86:f8:ef:a5:59:75:28:7d:c8:54:24:53:
         ef:94:b4:08:7d:62:02:90:73:c1:41:ca:2f:75:b5:c9:d8:18:
         89:c8:08:b4:a7:4e:00:d9:14:4b:b2:e2:15:fc:ce:77:7a:fb:
         b2:df:27:bf:2f:ad:4e:1d:a6:35:1b:b3:6a:d7:ed:15:98:92:
         49:97:28:76:21:c0:b5:8d:4a:67:2d:b9:38:d0:98:73:6e:09:
         6a:0f:30:22:12:aa:a7:27:26:b1:38:99:51:ba:d5:8e:fc:93:
         42:91:f1:b8:93:07:c1:d2:ab:2d:91:19:af:34:52:bb:5e:fd:
         27:ec:ed:5b:16:78:6a:03:1c:e7:23:a4:a3:8f:8a:14:e4:fa:
         b5:a0:be:7b:e2:74:d8:60:0a:8c:68:b2:9d:91:75:f5:60:1e:
         74:02:a3:13:40:62:6b:24:0f:e1:d9:eb:87:bc:8c:22:d8:57:
         f8:04:13:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:03:43 2026 by rpki-client