Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132343a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132343a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          1gOHvYGK3DL3K1uRwQaBWuBZeXUqzr+0uUOONVLhIhQ=
Subject key identifier:   2F:6A:E3:C0:78:FC:A9:CE:B5:BD:2A:5E:21:6A:CE:8C:28:1B:37:1A
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       1766BCA555580AD85E2B832C5C9D148FA6E1A896
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132343a3a2f34382d3438203d3e203239383032.roa
Signing time:             Fri 17 Apr 2026 15:35:58 +0000
ROA not before:           Fri 17 Apr 2026 15:30:58 +0000
ROA not after:            Fri 16 Apr 2027 15:35:58 +0000
asID:                     29802
IP address blocks:        2602:ff62:124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:66:bc:a5:55:58:0a:d8:5e:2b:83:2c:5c:9d:14:8f:a6:e1:a8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr 17 15:30:58 2026 GMT
            Not After : Apr 16 15:35:58 2027 GMT
        Subject: CN=2F6AE3C078FCA9CEB5BD2A5E216ACE8C281B371A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:76:b5:4c:cc:59:ef:76:b1:be:37:29:5d:
                    95:af:c1:3b:f5:d1:51:46:3a:e8:06:94:73:13:ef:
                    ae:90:fb:b9:39:78:e4:f3:5f:f8:3c:c5:c1:10:04:
                    29:6a:85:a9:1d:fa:b0:00:29:70:8b:62:99:e7:42:
                    c5:9e:70:15:d8:d4:78:73:5d:c6:d5:07:4a:0f:f2:
                    8e:9d:ef:f4:37:28:e3:52:3c:a7:08:29:b7:69:13:
                    cf:d7:cb:8a:03:68:69:e5:29:c3:55:2c:aa:8b:33:
                    99:1d:2c:4d:79:bb:d3:be:65:85:51:17:36:c0:a9:
                    b3:e2:e3:5b:3f:cd:ef:f9:5a:70:28:ec:3a:46:45:
                    68:67:35:95:4e:0b:57:25:21:2a:f9:ed:ff:61:8e:
                    be:d8:90:bf:16:72:8a:23:a3:d0:41:09:84:d6:43:
                    dc:d4:99:b6:9d:5b:95:46:59:2f:84:44:25:55:17:
                    f6:53:93:3d:3d:c8:f0:0a:e7:5d:b2:87:b6:98:2f:
                    29:26:f8:6c:fc:0f:cb:13:76:32:e0:9b:fa:73:52:
                    45:2a:17:7d:90:b4:76:87:b1:5c:14:27:29:62:a4:
                    c8:34:83:87:e8:3c:16:c5:f6:37:28:9c:86:ab:07:
                    1c:ae:b1:7f:73:46:70:8a:35:06:67:d3:50:4c:1c:
                    cb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6A:E3:C0:78:FC:A9:CE:B5:BD:2A:5E:21:6A:CE:8C:28:1B:37:1A
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132343a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:124::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:c3:61:b8:6e:de:05:74:1c:c8:b2:24:27:66:9d:a7:ff:46:
         a5:a0:75:33:3d:68:0d:ad:e1:2c:7b:09:bd:18:a6:bb:6e:b1:
         14:02:37:05:94:2c:78:30:a7:f3:56:16:ad:4b:dd:f4:d3:c1:
         55:cd:8d:72:40:d0:bf:76:2d:bd:3f:65:3c:93:9d:26:98:04:
         d3:34:f5:4c:1d:9b:53:05:bb:b5:b7:b1:20:b7:f1:de:8d:9c:
         b4:38:e9:87:20:0e:4d:2e:7b:32:b9:d4:de:8c:c8:bd:05:8e:
         b1:23:ad:20:2a:f1:b3:55:d6:2a:ac:1e:91:74:6c:bb:5e:47:
         2f:d1:c3:2a:6d:64:c6:0e:fe:1b:d8:3a:69:b3:75:ea:a2:4e:
         10:b3:7f:fe:67:db:d7:92:a9:13:42:48:e0:5c:55:81:5e:02:
         7b:47:43:fe:db:09:8f:79:0a:39:77:a5:f4:67:7a:5b:c8:a7:
         93:f9:ba:3e:72:ef:26:68:01:02:cd:fc:50:a4:7a:c0:2d:b3:
         1a:3e:f4:7e:3e:66:d5:a7:fc:55:33:4f:81:2c:96:ad:5f:d4:
         38:c0:66:28:d9:63:99:b9:7d:dc:5b:e9:48:87:78:f2:43:a0:
         ac:ee:63:59:ac:2b:55:1e:6f:3b:22:d5:83:64:46:2a:6d:ca:
         7d:0f:bd:9f
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUF2a8pVVYCtheK4MsXJ0Uj6bhqJYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjYwNDE3MTUzMDU4WhcNMjcwNDE2MTUzNTU4
WjAzMTEwLwYDVQQDEygyRjZBRTNDMDc4RkNBOUNFQjVCRDJBNUUyMTZBQ0U4QzI4
MUIzNzFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/d2tUzMWe92
sb43KV2Vr8E79dFRRjroBpRzE++ukPu5OXjk81/4PMXBEAQpaoWpHfqwAClwi2KZ
50LFnnAV2NR4c13G1QdKD/KOne/0NyjjUjynCCm3aRPP18uKA2hp5SnDVSyqizOZ
HSxNebvTvmWFURc2wKmz4uNbP83v+VpwKOw6RkVoZzWVTgtXJSEq+e3/YY6+2JC/
FnKKI6PQQQmE1kPc1Jm2nVuVRlkvhEQlVRf2U5M9PcjwCuddsoe2mC8pJvhs/A/L
E3Yy4Jv6c1JFKhd9kLR2h7FcFCcpYqTINIOH6DwWxfY3KJyGqwccrrF/c0ZwijUG
Z9NQTBzLMQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFC9q48B4/KnOtb0qXiFqzowo
GzcaMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzMjM0M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/2IBJDANBgkq
hkiG9w0BAQsFAAOCAQEANsNhuG7eBXQcyLIkJ2adp/9GpaB1Mz1oDa3hLHsJvRim
u26xFAI3BZQseDCn81YWrUvd9NPBVc2NckDQv3YtvT9lPJOdJpgE0zT1TB2bUwW7
tbexILfx3o2ctDjphyAOTS57MrnU3ozIvQWOsSOtICrxs1XWKqwekXRsu15HL9HD
Km1kxg7+G9g6abN16qJOELN//mfb15KpE0JI4FxVgV4Ce0dD/tsJj3kKOXel9Gd6
W8ink/m6PnLvJmgBAs38UKR6wC2zGj70fj5m1af8VTNPgSyWrV/UOMBmKNljmbl9
3FvpSId48kOgrO5jWawrVR5vOyLVg2RGKm3KfQ+9nw==
-----END CERTIFICATE-----
Generated at Fri May 1 09:26:18 2026 by rpki-client