Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132383a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3132383a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          l0bzr7gcS/HlOh4JFHmvdgEZ3a7l2iuRnjRlYxBZ3rA=
Subject key identifier:   80:7F:9D:32:AC:29:0C:5F:EE:BA:D2:A5:3F:84:EB:35:6F:01:F7:05
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       37DD9C8B076E9BC7EDB65632E43512546F50A5FF
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132383a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 19 May 2026 11:52:35 +0000
ROA not before:           Tue 19 May 2026 11:47:35 +0000
ROA not after:            Tue 18 May 2027 11:52:35 +0000
asID:                     9009
IP address blocks:        2602:ff62:128::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 06:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:dd:9c:8b:07:6e:9b:c7:ed:b6:56:32:e4:35:12:54:6f:50:a5:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 19 11:47:35 2026 GMT
            Not After : May 18 11:52:35 2027 GMT
        Subject: CN=807F9D32AC290C5FEEBAD2A53F84EB356F01F705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:55:3f:8c:2f:b2:8d:8b:e1:ba:5c:3f:f0:bc:
                    ca:a8:b3:30:3d:21:de:e3:96:8a:fa:4a:e5:45:4e:
                    c1:aa:26:3e:df:30:73:c3:ad:8b:1a:c0:38:f0:ce:
                    57:63:79:95:41:9e:76:9c:6e:e0:a4:c9:5e:8e:d4:
                    99:51:22:b0:5a:10:68:c4:93:df:1f:dd:38:1b:81:
                    50:94:c2:aa:cb:38:af:7a:d4:90:25:85:e0:4a:0c:
                    c2:73:33:76:62:97:72:c9:e5:83:52:ae:48:6b:1d:
                    3b:eb:09:46:a3:cc:b6:18:a1:ad:01:56:36:d1:f3:
                    e6:27:dd:18:cf:ff:1f:32:0f:2b:ff:b1:45:79:ca:
                    b0:ef:cf:4d:ce:e8:95:59:b4:5e:59:99:2b:47:57:
                    63:b9:11:7a:03:48:89:a9:99:5b:b2:46:a1:8d:0f:
                    27:7e:f4:e8:db:41:2d:a2:5e:18:de:5d:91:d7:03:
                    a9:cc:04:94:93:9f:5c:8f:38:17:c2:a7:68:2f:9b:
                    16:85:60:32:0c:d5:de:29:d6:cc:d7:76:c1:f8:04:
                    93:59:71:46:1c:a4:72:c9:6d:41:e8:d5:1f:e6:1a:
                    37:ce:27:cf:c7:72:54:d3:eb:ba:97:6e:cc:c4:fc:
                    72:e3:69:be:16:17:c4:ca:6a:63:2e:67:33:8f:39:
                    23:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7F:9D:32:AC:29:0C:5F:EE:BA:D2:A5:3F:84:EB:35:6F:01:F7:05
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132383a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:128::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:a4:2e:f1:55:26:0d:77:a0:bc:7d:ae:62:76:da:ca:a0:89:
         e6:71:8c:14:33:b0:92:ec:3c:88:7f:f0:b2:ae:08:0e:c6:3b:
         07:95:ea:ab:ff:c3:cd:2a:a4:87:41:b1:1e:2b:e0:82:35:36:
         9b:8b:bb:d5:88:4e:3b:43:5c:91:c2:d2:82:89:ab:a4:bb:fb:
         4e:36:81:83:4e:5e:b7:87:7e:de:e1:8f:58:c3:5f:b5:12:f9:
         2e:0e:59:19:0d:4b:1f:5c:95:50:4a:1c:39:dd:4c:07:2d:a7:
         3d:4a:c7:a8:72:d9:92:a2:7d:0e:62:1f:fe:9e:cd:ce:0f:11:
         c3:cd:2c:45:cb:6a:99:74:b3:b8:a2:3e:f3:f4:c2:a4:59:38:
         07:38:66:0e:37:17:a8:ab:42:9e:f7:e2:4b:2d:5d:d0:35:7b:
         e2:9b:64:c3:2f:a0:00:62:f6:1b:5e:80:8e:8c:47:9c:72:08:
         5f:3e:ce:38:44:6c:fe:4f:77:96:ed:2f:50:74:70:1b:25:bb:
         c0:3d:44:f9:a9:18:a9:5f:d6:b0:e4:4b:13:ff:a2:e6:ca:1b:
         18:7d:b7:13:f1:29:31:28:67:2b:84:76:dc:b0:61:e4:b6:20:
         ed:79:4d:da:76:fd:e3:7e:23:bf:89:7d:d4:57:f9:bd:ce:8b:
         4a:96:7f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:09 2026 by rpki-client