Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130383a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3130383a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          kf2tcpjLRzQmDtfRFOnbSVVg2LOsrylFKw2gPJRbduQ=
Subject key identifier:   A5:C0:03:0F:D1:B2:93:D0:FF:AC:5E:C0:12:0A:A0:6C:0D:9E:0C:E3
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       6806E1E4370B18CE5F39E4ADC12477817FB2FD82
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130383a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 20 Apr 2026 20:35:59 +0000
ROA not before:           Mon 20 Apr 2026 20:30:59 +0000
ROA not after:            Mon 19 Apr 2027 20:35:59 +0000
asID:                     29802
IP address blocks:        2602:ff62:108::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:06:e1:e4:37:0b:18:ce:5f:39:e4:ad:c1:24:77:81:7f:b2:fd:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr 20 20:30:59 2026 GMT
            Not After : Apr 19 20:35:59 2027 GMT
        Subject: CN=A5C0030FD1B293D0FFAC5EC0120AA06C0D9E0CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f6:93:b3:8e:14:72:a9:01:07:3d:f5:9c:39:
                    4f:b5:77:8d:e9:e9:33:42:fc:27:39:0e:25:7d:5c:
                    39:d4:9b:65:21:7b:46:c2:f8:21:5f:e7:41:8c:8f:
                    85:e4:17:ee:ce:27:6d:d4:3d:fe:16:c4:d8:fc:39:
                    20:6a:62:e7:5d:7f:18:b5:53:bb:d3:a7:b1:d2:9e:
                    a4:1a:58:10:ec:98:ff:78:92:e3:16:93:e5:56:ba:
                    56:73:82:cb:d2:4e:45:c3:cc:2f:55:79:11:14:e3:
                    10:f4:c9:8f:e3:cf:80:2d:22:c4:8a:88:49:cd:80:
                    f7:60:17:e7:1f:58:d5:3a:f6:a6:ed:ef:9f:19:24:
                    70:f6:d6:6a:e5:7a:b7:2b:d2:4c:b1:0a:b9:97:9f:
                    85:8a:76:1e:e4:ed:a1:40:a1:50:bd:14:21:a8:36:
                    88:02:6a:48:34:84:b1:13:62:59:0e:35:1a:12:eb:
                    db:f1:19:bc:57:c9:13:ea:88:90:04:18:34:e1:22:
                    85:ae:83:54:d5:89:dc:b4:2e:84:c4:05:c9:d1:91:
                    f9:e3:b9:4e:6a:ae:57:15:4e:d2:ea:47:46:e8:aa:
                    fe:d2:af:d1:09:e3:15:64:d1:79:12:a1:a9:f3:eb:
                    4b:86:a4:9a:2a:87:73:b0:98:a6:5a:71:fb:27:e2:
                    6a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C0:03:0F:D1:B2:93:D0:FF:AC:5E:C0:12:0A:A0:6C:0D:9E:0C:E3
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130383a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:108::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:82:a3:cc:27:62:c7:c7:74:08:92:f5:b4:9d:20:38:b0:eb:
         b1:2d:cb:84:58:b0:3c:a5:1a:64:b6:d0:da:ad:5c:1c:80:a3:
         43:0a:fc:c8:fc:a1:e9:12:19:22:b5:5d:5c:d2:44:7c:05:ad:
         02:19:95:52:6b:57:64:df:a2:3a:c4:c8:21:df:b8:2a:02:01:
         4b:81:d2:82:bb:a3:5d:06:86:d2:7f:f8:ac:11:89:a2:a0:da:
         f0:c0:e3:ee:8e:1c:e9:81:c2:cd:e5:65:54:5c:81:fb:4c:af:
         17:90:6e:02:d6:2f:1d:f0:e4:4e:da:ea:7c:24:87:c8:39:fb:
         ca:64:90:8e:26:85:eb:f7:05:88:dc:0e:f6:22:ae:e6:da:7f:
         5e:f7:dd:23:76:2a:79:6a:f6:45:83:20:df:d3:ce:8f:a3:1a:
         6a:1b:db:90:22:30:e0:e5:17:bc:af:b2:f7:62:79:11:c0:4c:
         a3:d4:09:f9:ae:09:a5:b8:32:46:83:a3:b2:9f:73:de:c5:0a:
         74:d9:a5:41:04:8c:16:9c:93:e1:db:bc:72:26:59:4a:33:9a:
         a5:a8:61:ed:b1:03:7d:6d:4f:56:45:82:0c:a4:ac:b8:fd:8d:
         a8:d7:32:8b:87:21:ac:d0:78:44:c2:e8:72:57:db:7b:85:3b:
         f6:55:ce:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 09:26:28 2026 by rpki-client