Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132353a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132353a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          HFXNgu9dQpFyK091gvBLLp1xm5+EHshrw7PVDDIaxLQ=
Subject key identifier:   6E:8F:51:89:BD:15:DB:F3:79:4D:98:CB:90:08:3C:06:B6:53:64:C7
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       6C830F591A9133216502AF7C12F7C13B71BD29C0
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132353a3a2f34382d3438203d3e203239383032.roa
Signing time:             Fri 17 Apr 2026 15:35:58 +0000
ROA not before:           Fri 17 Apr 2026 15:30:58 +0000
ROA not after:            Fri 16 Apr 2027 15:35:58 +0000
asID:                     29802
IP address blocks:        2602:ff62:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:83:0f:59:1a:91:33:21:65:02:af:7c:12:f7:c1:3b:71:bd:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Apr 17 15:30:58 2026 GMT
            Not After : Apr 16 15:35:58 2027 GMT
        Subject: CN=6E8F5189BD15DBF3794D98CB90083C06B65364C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4c:41:41:1b:a3:88:11:ad:7b:b9:5f:af:6f:
                    b7:21:c8:68:d4:e8:47:fe:5c:8e:e9:59:21:bb:5e:
                    f7:31:44:62:d3:85:c6:34:e3:d3:04:f9:04:80:9a:
                    48:a1:03:bd:0d:54:5a:fc:a7:20:13:27:e2:e5:dd:
                    4d:c0:df:b2:22:14:d2:c7:60:34:5f:9e:0e:0e:38:
                    b5:f2:02:49:29:06:a8:45:e2:da:ed:69:03:f0:e1:
                    fa:f1:51:54:5d:e7:11:b5:e7:fa:3a:d0:3b:ba:f4:
                    77:d5:09:bf:c3:72:15:ed:c1:0c:72:4f:b2:f6:3f:
                    30:5d:73:a4:1a:63:4d:d2:19:2a:0f:bb:64:f2:d8:
                    1b:02:ff:5a:e7:75:60:4a:df:09:c4:30:5e:77:5d:
                    88:26:d0:ca:6f:4f:31:d7:06:60:b0:85:7e:dd:bd:
                    a3:d5:e1:93:0e:27:35:12:52:39:3c:d2:21:c6:32:
                    a8:ef:c0:b6:67:07:f3:d5:fd:32:32:5d:ba:8f:b0:
                    39:38:ec:8f:45:b5:d0:78:fc:b6:d1:e5:a1:fe:8d:
                    a2:4f:43:63:52:cd:90:cb:29:03:dc:eb:17:3f:b6:
                    32:b5:f8:82:05:d2:23:55:5c:dc:b2:68:42:ba:32:
                    4b:1c:10:5e:04:9c:66:1e:ca:03:e6:27:8c:b1:0a:
                    f9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8F:51:89:BD:15:DB:F3:79:4D:98:CB:90:08:3C:06:B6:53:64:C7
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132353a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:125::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:bc:d2:75:28:1f:e2:c8:88:82:97:7c:45:ee:46:da:a5:45:
         cf:41:3c:e1:5c:e6:1f:8d:78:aa:05:36:e9:03:f4:25:cc:8d:
         8a:67:ba:e6:15:fc:f3:fc:2d:42:11:c8:a5:6e:50:74:73:f3:
         bc:b6:2b:45:6c:74:ae:b8:a0:17:74:a3:c9:92:97:25:69:b5:
         85:26:f2:6d:de:70:4b:47:2b:f1:a8:1c:ba:8a:5f:d5:6c:41:
         5e:e4:13:fc:13:02:0c:b8:fe:c8:a6:de:14:84:b9:1b:2e:4b:
         1c:04:d5:d6:d1:16:9b:49:6d:1f:17:61:01:04:be:0a:2e:bb:
         de:21:5d:cd:f7:2a:56:e7:1e:d5:9f:6e:27:56:38:a1:b7:4a:
         7d:01:a4:cc:db:fe:f5:5f:bf:05:4e:3c:2b:b9:da:85:99:95:
         e5:a5:05:31:60:f3:17:e9:52:bd:b4:ed:45:e9:69:e1:de:a2:
         12:3e:4a:8a:a3:f9:c0:28:a5:ba:5f:68:69:ed:22:d1:21:16:
         a0:21:78:07:b9:0d:c0:e0:a7:d7:7d:7b:0f:5a:27:f8:94:0c:
         63:27:b8:da:a8:47:9e:07:fa:87:a2:10:4c:1c:64:5b:3c:e0:
         0c:4d:bf:a9:48:d0:01:22:76:56:e4:25:a9:9e:8b:71:6a:39:
         72:4f:bf:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 09:26:17 2026 by rpki-client