Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130653a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3130653a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          EZJSPjMTQnf6YVD3Az6BYUGZwASXrBwD75JBnynyx0I=
Subject key identifier:   CC:D1:1E:28:1F:AA:0F:36:76:8B:42:8B:0B:BE:14:C4:44:71:24:A2
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       2613105EFA56B6C9189D387788C66B56527D4CDC
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130653a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 20 Apr 2026 20:35:59 +0000
ROA not before:           Mon 20 Apr 2026 20:30:59 +0000
ROA not after:            Mon 19 Apr 2027 20:35:59 +0000
asID:                     29802
IP address blocks:        2602:ff62:10e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:13:10:5e:fa:56:b6:c9:18:9d:38:77:88:c6:6b:56:52:7d:4c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr 20 20:30:59 2026 GMT
            Not After : Apr 19 20:35:59 2027 GMT
        Subject: CN=CCD11E281FAA0F36768B428B0BBE14C4447124A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e0:71:1a:b9:19:4a:88:20:d8:17:2b:90:27:
                    9c:14:0e:88:30:49:2c:96:f6:8a:1b:99:42:ae:67:
                    e7:62:02:81:7f:6f:7a:20:d0:50:76:2c:de:79:f8:
                    d8:93:af:70:b5:33:05:ad:a9:ee:64:b6:c4:92:9e:
                    ec:8a:45:ce:fd:48:8c:70:ba:9a:25:ef:b6:08:b2:
                    28:2c:3d:57:dc:40:5b:2f:2f:b5:c9:92:af:21:c9:
                    6f:c9:46:79:37:9e:0d:c6:d9:cf:de:65:e6:52:5b:
                    5a:fa:be:b6:fc:e0:08:ac:bd:94:20:15:15:ba:bd:
                    4d:eb:a2:d8:8e:c6:a3:e8:5e:d2:7f:fc:bd:79:5f:
                    c7:44:6e:e9:95:36:53:1e:95:c5:ca:55:5c:d6:78:
                    9d:53:b7:e9:6e:35:e0:f1:29:06:a5:64:48:cc:3c:
                    cc:00:16:e7:a8:8f:47:a5:8c:12:6e:3d:68:f5:16:
                    b7:e4:d8:b6:cf:dd:9f:d6:75:74:b4:00:0d:a6:3e:
                    a2:f6:2a:ad:2f:33:f2:5b:59:3e:02:ed:3e:60:25:
                    a4:35:be:d2:a9:03:dd:89:37:04:57:cf:b7:f3:cc:
                    6d:98:7b:6e:49:a3:47:f2:3a:ef:33:8d:02:ef:d3:
                    e2:1e:e9:9b:e5:ec:4b:7c:b3:40:f6:86:5a:40:c5:
                    bd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D1:1E:28:1F:AA:0F:36:76:8B:42:8B:0B:BE:14:C4:44:71:24:A2
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130653a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10e::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:9a:40:cb:3d:3b:1c:4e:97:0a:dc:6b:03:a0:5f:fe:95:60:
         e5:20:07:02:ed:f5:d7:70:a3:18:61:25:b9:27:6a:f4:ae:f6:
         31:e2:08:30:06:90:14:a2:e3:e9:f5:26:0a:94:c3:ea:31:2c:
         ab:8e:3c:6f:3d:39:cc:69:b0:9f:cc:5c:84:f3:7b:d4:6b:8a:
         39:87:0d:9b:11:1c:bd:d5:09:18:0e:6c:0a:39:7d:0e:99:cf:
         0e:85:c4:47:0a:ea:5b:57:a1:39:f4:9c:c4:d8:9d:17:64:f7:
         5c:10:bf:f0:47:9c:99:c4:ff:2a:aa:63:33:f9:4d:0c:32:c3:
         32:f2:41:85:c8:38:eb:b6:5e:b5:52:73:48:dd:13:e0:dc:45:
         95:bf:f5:91:eb:bb:82:ee:fd:9d:04:e5:7a:c7:f0:da:00:bf:
         c7:63:f2:50:50:1a:28:5b:cb:77:fd:34:b9:2f:32:ef:d6:86:
         59:82:60:eb:86:ea:4f:62:06:7a:b3:18:d0:ac:4f:39:6a:2b:
         c9:2b:07:b4:96:56:ad:54:2a:1a:91:ba:55:d2:43:b9:ad:de:
         c3:12:ca:44:59:e8:ae:d9:59:ec:70:3d:26:f4:21:33:6e:d4:
         bc:e5:9b:9f:01:fc:d8:a3:5f:1f:c2:d9:71:8d:93:14:84:b2:
         19:81:27:bd
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUJhMQXvpWtskYnTh3iMZrVlJ9TNwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjYwNDIwMjAzMDU5WhcNMjcwNDE5MjAzNTU5
WjAzMTEwLwYDVQQDEyhDQ0QxMUUyODFGQUEwRjM2NzY4QjQyOEIwQkJFMTRDNDQ0
NzEyNEEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OBxGrkZSogg
2BcrkCecFA6IMEkslvaKG5lCrmfnYgKBf296INBQdizeefjYk69wtTMFranuZLbE
kp7sikXO/UiMcLqaJe+2CLIoLD1X3EBbLy+1yZKvIclvyUZ5N54NxtnP3mXmUlta
+r62/OAIrL2UIBUVur1N66LYjsaj6F7Sf/y9eV/HRG7plTZTHpXFylVc1nidU7fp
bjXg8SkGpWRIzDzMABbnqI9HpYwSbj1o9Ra35Ni2z92f1nV0tAANpj6i9iqtLzPy
W1k+Au0+YCWkNb7SqQPdiTcEV8+388xtmHtuSaNH8jrvM40C79PiHumb5exLfLNA
9oZaQMW96wIDAQABo4ICuzCCArcwHQYDVR0OBBYEFMzRHigfqg82dotCiwu+FMRE
cSSiMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzMDY1M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/2IBDjANBgkq
hkiG9w0BAQsFAAOCAQEAD5pAyz07HE6XCtxrA6Bf/pVg5SAHAu3113CjGGEluSdq
9K72MeIIMAaQFKLj6fUmCpTD6jEsq448bz05zGmwn8xchPN71GuKOYcNmxEcvdUJ
GA5sCjl9DpnPDoXERwrqW1ehOfScxNidF2T3XBC/8EecmcT/KqpjM/lNDDLDMvJB
hcg467ZetVJzSN0T4NxFlb/1keu7gu79nQTlesfw2gC/x2PyUFAaKFvLd/00uS8y
79aGWYJg64bqT2IGerMY0KxPOWorySsHtJZWrVQqGpG6VdJDua3ewxLKRFnortlZ
7HA9JvQhM27UvOWbnwH82KNfH8LZcY2TFISyGYEnvQ==
-----END CERTIFICATE-----
Generated at Fri May 1 09:26:17 2026 by rpki-client