Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132613a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3132613a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          BxfQyyGKs2UleCWjqEcsgAK1+wZ6Vzw6Y2rYkpkCZEs=
Subject key identifier:   2D:59:5D:10:EB:34:10:EA:A9:39:28:0B:70:EE:6E:8F:FE:C5:89:43
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       03F117C824145924797A6B42DEAD65D9CBCE4ACE
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132613a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 19 May 2026 11:52:37 +0000
ROA not before:           Tue 19 May 2026 11:47:37 +0000
ROA not after:            Tue 18 May 2027 11:52:37 +0000
asID:                     9009
IP address blocks:        2602:ff62:12a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 06:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f1:17:c8:24:14:59:24:79:7a:6b:42:de:ad:65:d9:cb:ce:4a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 19 11:47:37 2026 GMT
            Not After : May 18 11:52:37 2027 GMT
        Subject: CN=2D595D10EB3410EAA939280B70EE6E8FFEC58943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:39:a2:e1:89:2f:74:86:1f:57:4a:76:05:
                    76:21:10:0c:98:34:a6:29:0e:54:dc:a7:12:c3:03:
                    ed:89:20:16:aa:21:1c:77:c2:28:79:08:cc:4f:28:
                    88:37:70:bc:28:56:4c:8c:ae:21:55:52:f9:f7:f6:
                    2a:10:6b:3b:24:06:d2:59:b4:dc:d7:06:14:23:a1:
                    49:ab:1e:63:9e:1f:d6:89:26:9b:d4:7f:3a:84:d6:
                    41:9e:ed:50:da:6f:bf:80:d6:ec:18:3a:cd:91:c2:
                    24:9d:af:9e:bb:75:23:c7:5a:8c:62:a3:ec:8b:f1:
                    39:cd:00:f4:e1:67:39:9d:ab:8a:8a:9d:b7:0e:56:
                    cb:fc:6e:7e:e0:de:57:c3:60:66:6e:94:23:3d:52:
                    12:ea:4a:aa:0f:9c:7f:2a:fc:5c:bd:39:0f:14:03:
                    06:5e:17:f9:e1:7e:e9:61:76:ce:84:1e:bf:9d:a8:
                    c4:c6:db:7e:cf:1f:b9:e0:92:7d:74:1a:b8:96:22:
                    71:6c:15:ef:8e:5f:8a:34:43:88:20:ae:27:87:3b:
                    d8:71:ce:50:70:1c:19:eb:b2:e5:16:fd:31:d2:fe:
                    44:4e:55:04:9d:51:d2:07:dd:52:15:ae:31:24:67:
                    77:18:66:d6:18:e6:c4:0c:fb:aa:43:68:43:db:93:
                    ab:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:59:5D:10:EB:34:10:EA:A9:39:28:0B:70:EE:6E:8F:FE:C5:89:43
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132613a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:12a::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:f7:e8:6c:81:11:98:b7:af:f2:de:86:bd:87:24:cc:aa:39:
         22:19:68:0c:c8:0b:11:b1:1b:a4:8c:e8:58:dc:a3:00:b3:cb:
         44:81:8b:2d:3d:91:9a:b3:de:47:86:bb:bc:ef:54:c6:b0:4c:
         4a:85:8b:b1:48:63:fa:aa:96:77:50:7e:93:e2:f4:ea:18:38:
         4f:71:d5:f9:b8:c2:6c:3e:55:60:ae:47:77:d8:fd:70:b9:56:
         03:96:99:39:6a:78:c4:a8:90:3e:88:55:7a:71:23:52:a0:51:
         61:18:de:ab:4a:76:15:2c:a7:27:76:0a:8a:9b:7f:46:0d:cd:
         c9:aa:2d:c6:db:a2:5f:86:a5:8d:de:3e:cc:39:6c:d6:ee:c1:
         46:32:e4:7c:8d:6e:55:15:61:d6:22:80:bf:6b:00:75:69:4d:
         0f:19:f1:d5:c7:e5:2e:0c:eb:e2:d0:12:70:e5:31:8f:b9:34:
         5a:2e:a5:7f:d8:5c:c4:7c:25:8a:a9:6a:25:6a:e6:6e:49:e5:
         da:e4:53:21:04:27:23:f1:01:69:64:5c:8d:75:f1:ce:a5:0f:
         db:d2:f5:00:37:23:8b:18:2a:d1:74:e6:27:e1:5a:4f:65:32:
         06:2e:da:43:0e:1a:f1:65:c5:7a:7c:26:0e:4f:f1:00:32:65:
         56:64:d5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:06 2026 by rpki-client