Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130623a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3130623a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          AH38gM94+7rP8gO5ILnEdnJOT4lcKz2a1TQFfQWdmGI=
Subject key identifier:   6D:34:44:BD:C2:A1:18:67:0D:37:DE:34:64:F6:5B:1E:B9:72:EE:AD
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       216186F074248DCE5774D4FCD89DAA36E5752B05
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130623a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 20 Apr 2026 20:35:59 +0000
ROA not before:           Mon 20 Apr 2026 20:30:59 +0000
ROA not after:            Mon 19 Apr 2027 20:35:59 +0000
asID:                     29802
IP address blocks:        2602:ff62:10b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:61:86:f0:74:24:8d:ce:57:74:d4:fc:d8:9d:aa:36:e5:75:2b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr 20 20:30:59 2026 GMT
            Not After : Apr 19 20:35:59 2027 GMT
        Subject: CN=6D3444BDC2A118670D37DE3464F65B1EB972EEAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bd:35:b4:45:05:cd:55:f0:58:0d:b5:f4:65:
                    2a:b4:4e:ba:a2:80:07:1f:52:c7:a0:cb:e4:84:ec:
                    31:6e:7c:2b:b3:56:a3:d3:8e:62:21:a3:bd:9c:79:
                    ce:5c:0e:a7:24:e8:4c:20:29:0d:63:60:2e:b3:4d:
                    a4:04:1d:7a:c1:71:6c:b8:a8:40:6a:1b:fc:bf:4e:
                    d5:f4:7c:6c:a7:9a:05:dd:c9:0f:30:c2:a0:45:10:
                    4e:05:39:89:b5:dc:30:dc:14:90:52:ca:8e:4b:a3:
                    4e:b1:5a:24:7e:35:b7:44:de:70:cd:1f:a9:97:d8:
                    1b:ce:0e:30:41:d3:74:b4:e2:e9:08:1b:4e:d8:f5:
                    98:8d:94:d5:42:ab:12:a8:33:72:6e:88:bd:fa:13:
                    39:82:d8:7a:91:7b:28:20:73:31:6b:f1:21:16:13:
                    c8:b4:df:38:f9:b4:49:b4:2c:35:a8:5a:23:b9:39:
                    42:e5:01:cb:03:a6:2f:9f:38:a8:db:64:02:0f:fa:
                    45:9b:ab:4e:ad:34:39:bc:26:d2:71:4f:a2:d6:eb:
                    a6:44:ee:c3:2e:b4:a1:d5:a8:27:3e:e0:9c:58:70:
                    24:0b:47:8e:85:86:7d:54:cf:4e:06:4f:5a:a4:06:
                    09:9a:60:0c:a8:32:60:ea:ee:96:6d:15:c0:5d:1b:
                    b3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:34:44:BD:C2:A1:18:67:0D:37:DE:34:64:F6:5B:1E:B9:72:EE:AD
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130623a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10b::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:56:0e:54:45:78:c8:5c:42:3d:10:0a:58:c9:d9:ec:ec:27:
         2d:3c:fb:7e:ac:ac:c8:3d:06:81:93:e9:62:21:8c:a1:1e:8b:
         a3:17:b7:62:56:74:1a:59:2a:03:4d:2e:4f:bf:35:f7:f2:09:
         5e:67:c6:3a:8a:0a:f0:c6:13:56:db:29:e4:fe:73:ab:4b:a4:
         80:89:68:87:b6:0c:d7:0d:08:cc:2c:83:14:f4:7c:08:e9:88:
         29:1d:7c:bf:cd:97:46:f5:e6:e0:57:69:b0:56:36:b4:e4:b9:
         14:67:84:24:6f:0a:1a:20:f7:f7:54:e0:b2:43:c3:f7:a3:d9:
         72:89:f8:df:df:d2:13:87:2f:1b:f8:21:c4:dd:45:ac:d0:7c:
         52:e2:1c:45:a5:a1:26:96:bd:5c:e5:1f:19:e1:38:7f:8c:1d:
         56:d1:ce:7d:a2:4b:26:6f:bf:2a:c4:13:fb:23:f8:6c:2b:7c:
         65:f4:e1:a0:e8:cc:e6:0b:f7:6e:d5:93:9b:00:4a:a9:50:5f:
         fb:f6:a8:02:0d:21:38:cb:d2:25:02:a5:63:b9:7c:30:63:5b:
         0f:ec:40:07:a3:af:96:47:51:a1:b2:56:9f:f6:d7:1e:30:e1:
         7f:3f:6d:73:97:4f:1e:11:1a:5f:4e:45:08:23:30:0e:c0:40:
         a0:40:45:0e
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUIWGG8HQkjc5XdNT82J2qNuV1KwUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjYwNDIwMjAzMDU5WhcNMjcwNDE5MjAzNTU5
WjAzMTEwLwYDVQQDEyg2RDM0NDRCREMyQTExODY3MEQzN0RFMzQ2NEY2NUIxRUI5
NzJFRUFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL01tEUFzVXw
WA219GUqtE66ooAHH1LHoMvkhOwxbnwrs1aj045iIaO9nHnOXA6nJOhMICkNY2Au
s02kBB16wXFsuKhAahv8v07V9Hxsp5oF3ckPMMKgRRBOBTmJtdww3BSQUsqOS6NO
sVokfjW3RN5wzR+pl9gbzg4wQdN0tOLpCBtO2PWYjZTVQqsSqDNyboi9+hM5gth6
kXsoIHMxa/EhFhPItN84+bRJtCw1qFojuTlC5QHLA6Yvnzio22QCD/pFm6tOrTQ5
vCbScU+i1uumRO7DLrSh1agnPuCcWHAkC0eOhYZ9VM9OBk9apAYJmmAMqDJg6u6W
bRXAXRuzyQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFG00RL3CoRhnDTfeNGT2Wx65
cu6tMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzMDYyM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/2IBCzANBgkq
hkiG9w0BAQsFAAOCAQEAVVYOVEV4yFxCPRAKWMnZ7OwnLTz7fqysyD0GgZPpYiGM
oR6Loxe3YlZ0GlkqA00uT7819/IJXmfGOooK8MYTVtsp5P5zq0ukgIloh7YM1w0I
zCyDFPR8COmIKR18v82XRvXm4FdpsFY2tOS5FGeEJG8KGiD391TgskPD96PZcon4
39/SE4cvG/ghxN1FrNB8UuIcRaWhJpa9XOUfGeE4f4wdVtHOfaJLJm+/KsQT+yP4
bCt8ZfThoOjM5gv3btWTmwBKqVBf+/aoAg0hOMvSJQKlY7l8MGNbD+xAB6OvlkdR
obJWn/bXHjDhfz9tc5dPHhEaX05FCCMwDsBAoEBFDg==
-----END CERTIFICATE-----
Generated at Fri May 1 09:26:31 2026 by rpki-client