Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131313a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3131313a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          B1ZX3FV81x8Efmxj29gnYM2Vu5jYeEOm5vnuevsS7aY=
Subject key identifier:   DE:7F:E3:4F:B4:40:37:29:92:F2:0C:AE:33:B3:00:85:D6:4D:54:B7
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       648862FBB6DE53935EE450672EA75263325ED3F2
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131313a3a2f34382d3438203d3e203239383032.roa
Signing time:             Fri 17 Apr 2026 15:35:58 +0000
ROA not before:           Fri 17 Apr 2026 15:30:58 +0000
ROA not after:            Fri 16 Apr 2027 15:35:58 +0000
asID:                     29802
IP address blocks:        2602:ff62:111::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:88:62:fb:b6:de:53:93:5e:e4:50:67:2e:a7:52:63:32:5e:d3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr 17 15:30:58 2026 GMT
            Not After : Apr 16 15:35:58 2027 GMT
        Subject: CN=DE7FE34FB440372992F20CAE33B30085D64D54B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:b9:4b:ad:05:32:20:33:85:75:cb:aa:dd:
                    72:a1:d9:98:9b:ca:c8:39:46:a4:1e:6a:37:7d:d8:
                    78:3e:dd:5f:6b:c0:14:2b:3c:16:b5:fc:a6:5f:f0:
                    35:77:85:e6:d4:ec:73:3e:97:76:7c:d7:66:5a:c6:
                    1b:42:80:15:9d:e5:33:52:04:97:20:98:52:83:de:
                    67:1a:db:12:eb:51:f2:d5:21:97:cb:c8:46:26:20:
                    0b:e5:35:5d:16:c0:ae:96:61:12:58:17:31:26:31:
                    57:4a:d0:3d:48:fd:2a:e3:91:bc:42:cf:68:a6:8d:
                    33:af:8e:61:2a:71:d8:79:a5:45:22:1d:28:eb:38:
                    a3:34:8f:02:a0:4f:a5:8b:3c:06:43:c4:fe:1d:f1:
                    8c:4e:c7:a1:b6:5b:45:f4:b8:d8:47:9d:07:dc:60:
                    1a:29:81:23:86:1d:cb:a9:33:1e:32:d6:62:94:c6:
                    45:bd:ac:f2:77:04:d8:b7:a9:47:f2:5e:15:4c:73:
                    2b:d5:67:b0:16:4d:fa:68:1a:05:b2:e8:e3:5f:ed:
                    6a:65:31:06:76:18:cc:0d:0b:57:88:83:66:5b:51:
                    22:22:cb:ed:3e:80:0a:13:13:7c:00:94:f9:c2:22:
                    ff:42:0e:47:54:a3:de:82:01:a9:5e:5c:de:62:a3:
                    61:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7F:E3:4F:B4:40:37:29:92:F2:0C:AE:33:B3:00:85:D6:4D:54:B7
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131313a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:111::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:b5:53:4e:1f:fb:eb:a0:99:ae:c6:3a:5b:2b:e9:55:fa:86:
         a1:ed:14:46:48:09:bb:2a:86:9e:3b:0a:05:6d:29:09:15:6b:
         68:40:dc:6a:1e:52:22:61:c9:f5:cf:02:1c:40:80:e8:b4:de:
         36:aa:c2:b5:61:4f:a1:0f:10:da:82:cb:cd:1e:fe:dd:2b:d3:
         9b:f4:7f:12:af:a7:2a:a2:66:ee:d8:48:11:ea:2f:d8:eb:1e:
         36:55:02:7c:8f:43:54:cf:20:f5:cd:d1:3c:7f:96:27:3e:2c:
         b4:4f:ec:c7:17:bd:90:13:71:ed:46:f8:17:db:97:3b:aa:27:
         08:28:0f:70:81:e3:45:34:ce:37:1a:b6:35:3d:fe:49:10:2a:
         e7:e4:dd:d2:88:48:d5:ea:40:3d:5b:ef:2c:00:ce:20:51:11:
         ad:b9:a9:64:03:c4:96:63:0f:d0:61:4c:0a:e0:43:6c:f9:ef:
         64:63:25:80:8a:49:60:c1:5f:2a:08:7c:1a:d5:16:67:f9:b7:
         9b:98:12:6d:ce:aa:f4:81:6a:fd:ff:0a:0f:69:44:67:39:13:
         ff:bf:3e:e0:ac:38:c7:ef:a5:43:8a:aa:83:e4:02:2e:66:dc:
         74:45:d1:75:4c:01:72:eb:c5:c0:10:75:2f:66:33:5d:e4:2d:
         1f:a1:a8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 09:26:14 2026 by rpki-client