Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a3830303a3a2f33372d3337203d3e203335363631.roa
File:                     323630323a663732653a3830303a3a2f33372d3337203d3e203335363631.roa (raw, json)
Hash identifier:          2JPx3kpyvGReOeKZfUlnnhApTn3lWeQar2rmKnEsfDM=
Subject key identifier:   03:14:88:DC:48:1A:57:D8:AA:63:82:51:BF:77:50:6C:D9:68:96:01
Certificate issuer:       /CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
Certificate serial:       06FCD1E6272D86FAE23D4990E18AAB288BC4BF82
Authority key identifier: 3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a3830303a3a2f33372d3337203d3e203335363631.roa
Signing time:             Fri 19 Jun 2026 10:59:42 +0000
ROA not before:           Fri 19 Jun 2026 10:54:42 +0000
ROA not after:            Fri 18 Jun 2027 10:59:42 +0000
asID:                     35661
IP address blocks:        2602:f72e:800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 22:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fc:d1:e6:27:2d:86:fa:e2:3d:49:90:e1:8a:ab:28:8b:c4:bf:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1
        Validity
            Not Before: Jun 19 10:54:42 2026 GMT
            Not After : Jun 18 10:59:42 2027 GMT
        Subject: CN=031488DC481A57D8AA638251BF77506CD9689601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:38:99:46:f1:d5:a5:ad:00:61:5e:df:a2:44:
                    88:ea:f5:04:e5:3c:74:d0:c0:4a:22:6e:7c:1b:ad:
                    1e:18:e9:fc:8e:48:48:41:24:0b:9f:fb:db:e9:2f:
                    12:11:39:bd:19:61:04:8e:fa:43:35:55:38:7a:79:
                    8b:0d:ac:69:ad:e7:b3:31:02:0f:cb:ba:5c:1c:76:
                    21:2a:f9:ff:7b:39:47:72:e4:14:00:c2:a6:d7:9e:
                    17:e3:2f:0f:f5:c4:51:76:f9:8e:02:d6:24:76:f7:
                    69:f2:42:cb:78:fc:18:2f:4d:66:f7:ba:12:5a:02:
                    87:49:9b:83:95:c9:ce:6d:cb:fc:13:12:0c:8c:59:
                    d5:bb:cf:f4:0e:34:8b:32:00:b7:d3:8f:dd:17:55:
                    de:4c:2d:e8:c3:b7:a7:c1:37:68:a9:8f:c7:b2:8a:
                    0e:1f:34:06:d5:4f:c8:1d:1d:e9:bb:3a:c2:ca:bf:
                    25:87:10:f4:29:84:ff:e6:21:0d:61:c5:c3:b9:c8:
                    2a:64:0d:44:94:97:e7:7f:af:96:dc:24:9d:da:67:
                    64:35:c3:bc:e5:db:d3:58:22:e6:19:0b:78:c8:77:
                    d4:08:87:bb:bf:2f:41:67:39:13:ab:43:6a:9c:ff:
                    08:d2:4f:3f:f5:4d:a0:69:09:77:05:4f:66:98:9e:
                    bb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:14:88:DC:48:1A:57:D8:AA:63:82:51:BF:77:50:6C:D9:68:96:01
            X509v3 Authority Key Identifier:
                keyid:3A:73:DA:E0:A0:D4:9F:55:A3:3E:35:3A:FB:5A:D2:C0:C7:B5:4A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/3A73DAE0A0D49F55A33E353AFB5AD2C0C7B54AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1cd453a6cba7df416883389708ef3d8204f7abfc1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/6/323630323a663732653a3830303a3a2f33372d3337203d3e203335363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:800::/37

    Signature Algorithm: sha256WithRSAEncryption
         3d:f2:c5:3c:05:be:e9:bf:99:10:d9:dc:c1:f2:90:57:bb:42:
         25:98:e4:35:7a:da:6a:26:30:16:e1:cd:25:aa:c9:b2:26:18:
         c2:bc:8e:de:64:73:e0:0a:0a:4c:7e:f4:d2:01:55:0e:f9:4d:
         5d:f4:72:82:f6:83:a2:b3:e9:11:cb:90:6c:64:d1:7d:de:d7:
         fc:dc:c7:9c:0f:02:b8:4d:0f:6b:33:f1:29:90:14:8e:4a:81:
         a3:62:fd:8c:da:45:be:d7:f7:2f:e9:41:2d:95:2d:bd:44:16:
         43:af:aa:f3:dd:94:b4:04:dd:00:b9:16:75:52:b9:17:84:99:
         d6:30:73:8e:09:6f:2d:69:03:53:1f:07:c3:8e:44:cb:ad:eb:
         d7:14:4b:35:e3:a0:1e:31:15:9d:e6:e2:de:14:1d:df:81:86:
         e3:94:2e:31:c6:b7:fc:77:db:3e:45:99:bf:18:93:89:2c:a7:
         93:17:23:56:31:20:c9:f2:06:2a:89:23:d1:5a:27:97:83:8f:
         fe:f4:fd:75:ba:a0:db:9e:84:b9:1c:19:b0:36:91:7e:0d:a4:
         cd:22:b5:f9:38:87:41:8e:f2:1e:dd:fe:e4:f4:d8:2f:3b:ee:
         68:86:a6:8b:ad:56:2e:f1:b4:60:93:8b:7b:0f:09:01:0e:6b:
         8f:14:f9:dc
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUBvzR5icthvriPUmQ4YqrKIvEv4IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzY5ZGJjMmVjMWNkNDUzYTZjYmE3ZGY0MTY4ODMzODk3
MDhlZjNkODIwNGY3YWJmYzEwHhcNMjYwNjE5MTA1NDQyWhcNMjcwNjE4MTA1OTQy
WjAzMTEwLwYDVQQDEygwMzE0ODhEQzQ4MUE1N0Q4QUE2MzgyNTFCRjc3NTA2Q0Q5
Njg5NjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ziZRvHVpa0A
YV7fokSI6vUE5Tx00MBKIm58G60eGOn8jkhIQSQLn/vb6S8SETm9GWEEjvpDNVU4
enmLDaxpreezMQIPy7pcHHYhKvn/ezlHcuQUAMKm154X4y8P9cRRdvmOAtYkdvdp
8kLLePwYL01m97oSWgKHSZuDlcnObcv8ExIMjFnVu8/0DjSLMgC304/dF1XeTC3o
w7enwTdoqY/HsooOHzQG1U/IHR3puzrCyr8lhxD0KYT/5iENYcXDucgqZA1ElJfn
f6+W3CSd2mdkNcO85dvTWCLmGQt4yHfUCIe7vy9BZzkTq0NqnP8I0k8/9U2gaQl3
BU9mmJ67QwIDAQABo4ICujCCArYwHQYDVR0OBBYEFAMUiNxIGlfYqmOCUb93UGzZ
aJYBMB8GA1UdIwQYMBaAFDpz2uCg1J9Voz41Ovta0sDHtUrsMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUzZjgyMGY1LzYv
M0E3M0RBRTBBMEQ0OUY1NUEzM0UzNTNBRkI1QUQyQzBDN0I1NEFFQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzY2MzNmLTM0M2QtNGFjMy1hOTM2LTk4OTU4ZTU2MzBlNi8zNjlk
YmMyZWMxY2Q0NTNhNmNiYTdkZjQxNjg4MzM4OTcwOGVmM2Q4MjA0ZjdhYmZjMS5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVk
MzA1M2Y4MjBmNS82LzMyMzYzMDMyM2E2NjM3MzI2NTNhMzgzMDMwM2EzYTJmMzMz
NzJkMzMzNzIwM2QzZTIwMzMzNTM2MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAyYC9y4IMA0GCSqG
SIb3DQEBCwUAA4IBAQA98sU8Bb7pv5kQ2dzB8pBXu0IlmOQ1etpqJjAW4c0lqsmy
JhjCvI7eZHPgCgpMfvTSAVUO+U1d9HKC9oOis+kRy5BsZNF93tf83MecDwK4TQ9r
M/EpkBSOSoGjYv2M2kW+1/cv6UEtlS29RBZDr6rz3ZS0BN0AuRZ1UrkXhJnWMHOO
CW8taQNTHwfDjkTLrevXFEs146AeMRWd5uLeFB3fgYbjlC4xxrf8d9s+RZm/GJOJ
LKeTFyNWMSDJ8gYqiSPRWieXg4/+9P11uqDbnoS5HBmwNpF+DaTNIrX5OIdBjvIe
3f7k9NgvO+5ohqaLrVYu8bRgk4t7DwkBDmuPFPnc
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:02:30 2026 by rpki-client