Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/323630323a663736313a35303a3a2f34342d3434203d3e20333937373330.roa
File:                     323630323a663736313a35303a3a2f34342d3434203d3e20333937373330.roa (raw, json)
Hash identifier:          p/Ls+KlYt7J1lEXfRtId4nzQNr3TAxIQEYzGD4veKiE=
Subject key identifier:   0B:CC:9F:81:09:1A:53:DE:48:F2:60:E4:C5:A7:35:29:B5:4D:E1:E2
Certificate issuer:       /CN=03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc
Certificate serial:       011C701B6F9F4832F6CD6865EE4B8C7B819CD523
Authority key identifier: 4B:5C:BC:46:8E:62:44:4A:54:5B:45:83:61:8A:E3:20:40:8A:B0:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/323630323a663736313a35303a3a2f34342d3434203d3e20333937373330.roa
Signing time:             Sun 14 Jun 2026 23:54:19 +0000
ROA not before:           Sun 14 Jun 2026 23:49:19 +0000
ROA not after:            Sun 13 Jun 2027 23:54:19 +0000
asID:                     397730
IP address blocks:        2602:f761:50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.crl
                          rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 08:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1c:70:1b:6f:9f:48:32:f6:cd:68:65:ee:4b:8c:7b:81:9c:d5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc
        Validity
            Not Before: Jun 14 23:49:19 2026 GMT
            Not After : Jun 13 23:54:19 2027 GMT
        Subject: CN=0BCC9F81091A53DE48F260E4C5A73529B54DE1E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2c:24:a6:65:5a:d9:ee:b1:0e:2c:b0:ed:0c:
                    60:aa:20:0e:ac:29:5e:0a:66:a5:09:6f:3e:2b:d0:
                    7b:93:2c:53:6c:c1:b5:b8:2c:11:b6:07:b7:39:2f:
                    2f:f0:16:bf:b6:0f:08:4d:17:d9:17:33:fb:de:47:
                    1d:2f:7c:db:d5:d5:45:03:e5:73:12:24:7d:70:2f:
                    90:c7:34:59:22:a4:28:2e:09:b9:67:15:02:07:7e:
                    01:63:ac:b9:04:2f:8d:56:51:58:9e:1c:71:c9:5b:
                    ed:c7:ad:b5:bb:d9:1f:dc:02:be:08:76:64:1b:89:
                    27:5a:18:4c:f6:c5:4e:91:fa:06:23:90:92:86:45:
                    c8:0c:55:b6:1e:af:b6:a0:a1:00:c8:53:d2:6a:41:
                    cb:de:6c:ca:c3:e8:42:7f:83:a0:4e:eb:ae:ea:a0:
                    6f:31:11:e1:08:75:ee:ee:1e:e2:04:d5:60:71:f0:
                    c2:6c:bb:cd:8d:8e:d8:8f:84:11:e7:36:6a:e7:c1:
                    95:fe:de:cd:34:97:cc:4c:96:04:f2:f6:a9:9b:54:
                    ef:84:6a:d5:96:15:05:dd:63:e3:b2:fe:96:bd:b1:
                    45:77:af:80:b4:be:64:82:fa:ed:bb:e7:14:83:cd:
                    15:43:23:ee:07:e3:00:39:12:b5:71:88:fd:73:60:
                    42:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CC:9F:81:09:1A:53:DE:48:F2:60:E4:C5:A7:35:29:B5:4D:E1:E2
            X509v3 Authority Key Identifier:
                keyid:4B:5C:BC:46:8E:62:44:4A:54:5B:45:83:61:8A:E3:20:40:8A:B0:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/323630323a663736313a35303a3a2f34342d3434203d3e20333937373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f761:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         98:be:49:3a:4c:19:e4:46:31:d2:5b:b3:89:6b:33:ca:07:c5:
         0e:56:cb:f6:f0:75:61:ac:47:e1:1d:4b:e9:9d:45:c7:e0:de:
         d1:27:c5:5e:cc:2f:68:cb:57:98:6a:af:05:bc:1e:94:b1:2b:
         aa:71:92:ca:43:d4:fc:18:69:d3:91:e1:8c:b6:c6:99:d5:ea:
         f8:30:b8:df:3f:43:32:63:07:e2:fe:9c:95:48:17:6d:8a:d5:
         2f:10:b7:2f:8e:45:e5:40:3d:29:72:4f:06:c0:55:88:96:1b:
         07:5b:95:04:df:04:d1:76:69:d2:7d:a2:48:81:c5:2d:92:7e:
         7a:6c:59:bb:e2:a7:43:ae:aa:77:78:0e:88:28:2d:15:f5:68:
         d9:e4:a6:35:2d:58:b7:f9:0a:76:78:87:22:d1:f9:8e:bf:fe:
         ce:65:99:30:7a:e4:a2:cc:33:9b:61:e5:e7:d5:02:85:46:31:
         51:d4:c5:b4:23:df:59:f0:2f:99:08:23:31:09:20:8b:ab:89:
         6c:14:af:91:88:63:18:17:35:bd:00:17:91:39:50:b3:c3:41:
         b1:02:fc:29:33:1e:58:26:b3:5c:82:44:80:bd:f1:a8:6d:4a:
         14:a6:5e:78:cf:af:d5:ec:40:4b:fc:3d:4e:09:6e:6f:32:72:
         0d:ca:9d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:31:04 2026 by rpki-client