Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130633a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3130633a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          WsrPrc9jl+mmOfmKLKQVOeOnuilXROox9XxisjJXfw4=
Subject key identifier:   61:28:06:70:0C:58:1E:B5:7F:E2:51:24:CF:0D:97:70:67:BE:0A:42
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       1C06589748C936DC615B81D36E9012FACD0C22D7
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130633a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 20 Apr 2026 20:35:59 +0000
ROA not before:           Mon 20 Apr 2026 20:30:59 +0000
ROA not after:            Mon 19 Apr 2027 20:35:59 +0000
asID:                     29802
IP address blocks:        2602:ff62:10c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:06:58:97:48:c9:36:dc:61:5b:81:d3:6e:90:12:fa:cd:0c:22:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr 20 20:30:59 2026 GMT
            Not After : Apr 19 20:35:59 2027 GMT
        Subject: CN=612806700C581EB57FE25124CF0D977067BE0A42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f5:c6:bb:3c:21:99:58:62:24:e7:bb:7b:5d:
                    0f:ac:38:a9:c9:22:48:80:47:a3:e4:1a:2a:cb:3f:
                    e7:09:25:76:46:3b:82:6d:57:eb:65:95:6f:57:ae:
                    b0:99:ca:d3:6b:57:b0:54:02:2d:17:cc:fb:f1:8b:
                    0b:7b:df:8d:01:bb:a3:3c:e9:28:72:91:b8:88:93:
                    22:3e:73:c5:06:60:67:ea:8a:5d:33:da:2b:a4:ca:
                    41:70:9a:27:e4:71:f1:9d:71:8f:c3:69:75:fd:36:
                    91:4e:1a:a5:bc:0a:9f:5b:c5:d4:93:ab:29:d6:f7:
                    b9:d1:56:70:c3:ef:10:9d:19:9a:17:9e:9d:2d:b3:
                    56:31:dd:69:a7:78:13:b3:47:5f:a0:e0:f8:af:19:
                    b8:4f:5f:d4:d5:f8:8a:65:16:42:db:1d:61:db:9b:
                    a7:9f:0c:c0:62:22:26:68:d8:58:2f:4f:f1:8e:57:
                    98:09:2b:df:93:7c:4e:f6:04:0b:5b:d6:55:c4:7f:
                    ee:29:9a:32:92:5e:e6:26:5b:cd:ba:4a:d6:6b:52:
                    d0:12:06:14:26:47:e9:03:aa:d4:b1:15:fe:a1:d5:
                    73:b7:1f:53:7c:5c:8f:27:2c:13:88:b4:96:7f:c2:
                    d9:fd:50:d4:5c:0a:a3:21:57:79:d6:67:4c:40:1a:
                    d9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:28:06:70:0C:58:1E:B5:7F:E2:51:24:CF:0D:97:70:67:BE:0A:42
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130633a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10c::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:5b:bc:1b:36:99:53:16:1c:d0:d5:ee:b8:ef:1c:6d:37:bc:
         53:9b:bb:58:6c:d0:3d:ca:5a:b3:0b:37:ad:f9:11:b7:83:93:
         ee:0b:04:48:9a:4c:7e:7f:b3:70:d6:b8:a8:e2:bc:ed:fe:04:
         dc:0c:a8:2e:22:c5:84:09:14:e1:11:4c:1d:da:cb:7c:b7:8f:
         24:e8:ec:c5:3e:12:e6:0e:f8:2c:08:9d:3c:56:84:2e:d2:ff:
         35:6b:80:31:7d:c2:52:41:dc:e3:8f:f9:ec:55:79:aa:c0:b9:
         e4:31:4e:e3:ae:ab:bf:61:8d:9f:bc:e7:a1:3f:15:fb:1e:7c:
         33:e6:78:62:ad:80:e4:9d:22:f7:42:17:94:ac:cb:e1:ce:7d:
         81:ad:2a:2e:bd:55:1d:f9:cb:b3:88:f8:83:ff:12:06:cf:70:
         fa:ed:e1:2f:f0:2b:b7:0c:c7:68:b1:9a:15:e9:5e:3e:ce:f5:
         a8:0a:c1:c6:18:b6:f0:55:84:24:b1:a6:be:87:2b:53:86:b5:
         04:f7:f6:30:8a:14:95:d1:4f:dd:da:84:30:39:2c:a0:6e:61:
         08:ac:4d:54:26:0c:a3:da:df:5d:1c:50:33:08:5d:25:4d:cc:
         59:d8:fa:07:0a:60:0d:61:a2:c5:24:35:95:fd:c0:d7:e9:6f:
         56:50:02:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 09:26:16 2026 by rpki-client