Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132393a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3132393a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          g29nGTHEaQ+ckYkmu/hsey1v/g7BR+4Mw9rM2xhz240=
Subject key identifier:   E2:20:F5:95:00:D9:C9:BD:50:BF:59:CD:30:DE:75:19:66:C0:31:F5
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       0C394AA227F163ABFC6EF29088D20E45BC5B482D
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132393a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 19 May 2026 11:52:36 +0000
ROA not before:           Tue 19 May 2026 11:47:36 +0000
ROA not after:            Tue 18 May 2027 11:52:36 +0000
asID:                     9009
IP address blocks:        2602:ff62:129::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 06:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:39:4a:a2:27:f1:63:ab:fc:6e:f2:90:88:d2:0e:45:bc:5b:48:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 19 11:47:36 2026 GMT
            Not After : May 18 11:52:36 2027 GMT
        Subject: CN=E220F59500D9C9BD50BF59CD30DE751966C031F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f1:06:a8:3f:41:6d:45:28:d7:10:80:77:61:
                    2e:24:ec:e7:c3:18:27:1d:3e:68:47:8b:ad:3e:ca:
                    da:7a:74:2f:f8:47:74:24:a5:58:5d:bd:de:ef:f9:
                    b0:ad:49:33:e0:58:99:ff:03:40:b3:4f:fe:e0:6e:
                    76:96:41:f8:0e:41:7c:52:df:5f:1d:69:b7:49:c1:
                    4c:1e:81:3f:4c:c7:4f:dc:ce:da:ea:d1:6e:e3:76:
                    2b:ae:2f:1c:25:16:b6:cd:97:cd:46:7d:69:8f:38:
                    3b:70:c3:f2:d6:f8:76:a0:d4:6a:2e:4e:50:ba:29:
                    78:b7:e0:f7:81:64:63:c8:48:70:b9:8c:be:21:2c:
                    2e:5a:cf:d2:19:81:30:3c:f8:b4:42:7d:55:a9:6a:
                    60:32:f3:50:f5:a7:e9:67:60:0b:0d:e3:55:b1:7e:
                    a9:43:3d:81:cf:10:63:20:da:a6:58:41:3a:10:0e:
                    af:0c:c9:be:b5:94:0c:78:7c:9f:c2:0d:17:bf:07:
                    54:54:dd:8e:85:35:35:60:c3:59:37:52:e8:4d:04:
                    d2:07:9c:2f:d5:1c:6d:7c:50:8c:48:22:8a:5d:f7:
                    00:74:d7:4c:4b:05:3b:95:01:8c:8f:a1:b5:4e:b7:
                    74:b8:b3:e7:73:68:14:4a:4f:f0:77:76:98:35:82:
                    60:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:20:F5:95:00:D9:C9:BD:50:BF:59:CD:30:DE:75:19:66:C0:31:F5
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132393a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:129::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:8f:56:59:8a:24:96:05:2e:e8:b4:f9:bd:96:20:5f:86:84:
         97:b9:72:b7:15:73:e8:0e:7e:5a:2f:fd:60:76:a3:38:4a:53:
         61:ae:61:35:a1:0e:dd:e7:d1:de:39:3b:64:69:59:99:e6:05:
         d2:43:45:4c:33:48:1b:a7:4e:d8:8c:e9:74:17:c4:51:0f:72:
         80:59:0c:bd:1d:f1:9d:94:c6:92:d5:66:ad:c2:ff:0f:9f:d4:
         0b:ec:dc:ec:8a:56:e1:30:4f:f4:15:c5:1f:d8:65:9d:af:33:
         68:b8:44:5b:f8:c6:ef:f4:3f:39:6a:f3:4f:ed:c0:db:2a:5c:
         41:87:f8:4f:46:a2:88:8c:b4:1c:f6:7f:b9:96:54:4b:40:62:
         2c:f2:01:f1:a1:22:ad:68:f9:2f:ad:af:af:6c:1e:7b:82:b2:
         34:d5:b3:ac:81:fd:e4:36:b2:97:1d:4b:f4:41:45:86:93:cb:
         9c:40:5c:86:1e:54:51:3d:e4:79:a5:b1:ff:f0:b6:09:7f:5d:
         f8:3e:62:7b:f9:57:43:54:10:69:68:5a:d5:4f:76:df:bc:87:
         25:58:c3:ba:56:f4:bd:d2:38:ea:df:9a:d7:5c:70:64:9f:7c:
         df:f7:fb:13:6b:5e:fd:45:b4:8a:94:e5:37:bf:b8:d0:61:62:
         10:ed:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:09 2026 by rpki-client