Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131303a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3131303a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          Era7cWMPZO2J5u+XTj44X1p1Xw0hHlLGSI/59BBRxKI=
Subject key identifier:   E3:8F:9F:59:7A:C7:4B:7D:6B:A8:52:12:F5:C2:1E:D6:A4:19:BC:8A
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       698EB534EB81A37A97760A8C84AC5752C7163573
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131303a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 20 Apr 2026 20:35:59 +0000
ROA not before:           Mon 20 Apr 2026 20:30:59 +0000
ROA not after:            Mon 19 Apr 2027 20:35:59 +0000
asID:                     29802
IP address blocks:        2602:ff62:110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8e:b5:34:eb:81:a3:7a:97:76:0a:8c:84:ac:57:52:c7:16:35:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr 20 20:30:59 2026 GMT
            Not After : Apr 19 20:35:59 2027 GMT
        Subject: CN=E38F9F597AC74B7D6BA85212F5C21ED6A419BC8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:af:9a:01:17:da:bf:54:bc:1c:3c:b5:aa:b3:
                    f6:14:ff:29:50:b2:2a:8d:db:dc:a1:c3:db:c9:cb:
                    92:7a:7b:10:2a:7b:26:d9:fa:26:9e:71:12:cb:fa:
                    82:e3:cb:81:d8:13:52:61:ae:97:5d:fb:d3:48:17:
                    c5:19:28:33:05:f9:a6:5a:b6:67:45:2c:4d:12:13:
                    22:a6:dc:54:ff:f7:b0:98:d9:76:7b:62:5c:37:14:
                    70:0d:c5:7f:03:e5:af:e3:0a:7e:9a:fb:12:b5:e4:
                    18:dc:f5:df:af:19:24:52:4d:b2:1d:45:e3:d5:cb:
                    17:4f:b7:e7:4a:f2:44:dc:98:ec:b4:1f:89:e1:8c:
                    f4:fd:ea:f3:1f:00:e6:2e:54:c8:11:e1:34:92:e5:
                    22:d2:53:73:f0:15:87:0b:2b:17:86:6c:b6:6d:8c:
                    75:5b:10:dc:33:e5:87:7b:d7:ea:de:da:b6:34:16:
                    97:68:7d:57:fb:c2:22:36:85:92:27:44:c9:74:3d:
                    c3:89:18:ae:44:93:61:a5:49:3a:b5:d2:ca:62:f7:
                    2f:b1:f3:06:c6:b5:e0:37:a1:cb:6b:8a:4a:a8:33:
                    7e:ee:3d:ce:af:9b:1d:e7:ea:2d:da:4d:69:11:b1:
                    6a:17:e3:a1:f6:57:7f:f0:42:73:50:d7:3b:a9:02:
                    52:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8F:9F:59:7A:C7:4B:7D:6B:A8:52:12:F5:C2:1E:D6:A4:19:BC:8A
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131303a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:110::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:b5:da:a9:c5:97:d3:4c:d9:03:38:10:63:ce:47:69:c7:16:
         9f:f7:fe:da:0c:df:ef:de:d4:02:bb:40:c2:41:8e:d3:17:d8:
         34:df:49:59:8c:f4:6b:d3:15:61:38:be:bd:7f:69:58:88:7a:
         58:79:df:8e:fa:e1:18:0d:a5:d1:74:37:da:df:15:55:ff:41:
         c9:f6:ca:6c:66:a8:3d:05:a5:db:8e:4f:49:81:a3:d8:a8:ba:
         a5:50:4b:04:6f:ed:d3:50:fb:95:23:62:41:80:1d:70:c4:5a:
         d4:f8:e1:0c:84:bd:60:71:bc:b0:6a:e5:14:c4:e7:59:d9:ff:
         a2:31:fd:bc:73:e5:5c:98:dd:32:0e:df:fa:eb:cf:21:2a:f7:
         ec:44:95:52:6a:10:83:5b:34:b0:31:2d:ac:98:cd:e9:8f:16:
         53:0d:7e:8a:34:48:53:81:8e:81:f6:c7:3d:d2:d4:21:2e:16:
         6f:d9:55:6e:c0:30:01:cd:95:d0:f1:e5:42:2a:e9:47:ab:11:
         0a:eb:05:62:fe:f5:1b:86:19:1f:14:c1:65:a0:af:aa:ce:0a:
         fa:b9:94:22:eb:71:27:be:b8:6f:52:27:9f:ed:92:b2:23:06:
         99:2b:bd:a2:d4:95:bf:94:21:ea:cd:d2:ec:8e:ea:3b:8f:95:
         14:11:77:85
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUaY61NOuBo3qXdgqMhKxXUscWNXMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjYwNDIwMjAzMDU5WhcNMjcwNDE5MjAzNTU5
WjAzMTEwLwYDVQQDEyhFMzhGOUY1OTdBQzc0QjdENkJBODUyMTJGNUMyMUVENkE0
MTlCQzhBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6+aARfav1S8
HDy1qrP2FP8pULIqjdvcocPbycuSensQKnsm2fomnnESy/qC48uB2BNSYa6XXfvT
SBfFGSgzBfmmWrZnRSxNEhMiptxU//ewmNl2e2JcNxRwDcV/A+Wv4wp+mvsSteQY
3PXfrxkkUk2yHUXj1csXT7fnSvJE3JjstB+J4Yz0/erzHwDmLlTIEeE0kuUi0lNz
8BWHCysXhmy2bYx1WxDcM+WHe9fq3tq2NBaXaH1X+8IiNoWSJ0TJdD3DiRiuRJNh
pUk6tdLKYvcvsfMGxrXgN6HLa4pKqDN+7j3Or5sd5+ot2k1pEbFqF+Oh9ld/8EJz
UNc7qQJS2wIDAQABo4ICuzCCArcwHQYDVR0OBBYEFOOPn1l6x0t9a6hSEvXCHtak
GbyKMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzMTMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/2IBEDANBgkq
hkiG9w0BAQsFAAOCAQEARrXaqcWX00zZAzgQY85HaccWn/f+2gzf797UArtAwkGO
0xfYNN9JWYz0a9MVYTi+vX9pWIh6WHnfjvrhGA2l0XQ32t8VVf9ByfbKbGaoPQWl
245PSYGj2Ki6pVBLBG/t01D7lSNiQYAdcMRa1PjhDIS9YHG8sGrlFMTnWdn/ojH9
vHPlXJjdMg7f+uvPISr37ESVUmoQg1s0sDEtrJjN6Y8WUw1+ijRIU4GOgfbHPdLU
IS4Wb9lVbsAwAc2V0PHlQirpR6sRCusFYv71G4YZHxTBZaCvqs4K+rmUIutxJ764
b1Inn+2SsiMGmSu9otSVv5Qh6s3S7I7qO4+VFBF3hQ==
-----END CERTIFICATE-----
Generated at Fri May 1 09:25:57 2026 by rpki-client