Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132663a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3132663a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          XDRtqXA935C6jeo7t8isxUF7O3Fq4RZ86yqgAYardWw=
Subject key identifier:   C0:68:2A:CD:CC:B8:70:A4:B5:2A:70:33:DE:5D:33:EF:E4:50:AD:D9
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       6C3D676ED170A12D29098BE4B1FE0BA757219C00
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132663a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 19 May 2026 11:52:41 +0000
ROA not before:           Tue 19 May 2026 11:47:41 +0000
ROA not after:            Tue 18 May 2027 11:52:41 +0000
asID:                     9009
IP address blocks:        2602:ff62:12f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 06:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:3d:67:6e:d1:70:a1:2d:29:09:8b:e4:b1:fe:0b:a7:57:21:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 19 11:47:41 2026 GMT
            Not After : May 18 11:52:41 2027 GMT
        Subject: CN=C0682ACDCCB870A4B52A7033DE5D33EFE450ADD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:64:50:b3:25:40:22:03:16:f6:2b:36:8b:9e:
                    48:81:63:62:90:0a:f6:a6:db:c9:a2:cb:c5:1b:aa:
                    42:79:39:42:9e:7a:a9:d7:b2:66:14:7c:9d:82:6b:
                    e8:0d:a2:e7:31:b7:8b:38:0b:97:7f:cc:90:b3:ca:
                    89:38:70:9d:d0:a0:dc:93:0f:49:9d:46:1c:b1:4d:
                    79:9c:d9:5b:a5:a7:de:8c:47:96:20:36:a5:41:d9:
                    dd:bc:12:d5:9b:26:f0:43:16:2d:e3:a5:cf:68:61:
                    31:a7:aa:9c:6d:64:d3:97:d5:11:45:f7:92:98:48:
                    d7:ae:61:60:64:ee:87:11:d0:00:fd:b5:70:e1:29:
                    82:63:19:99:c3:b1:ab:8b:9e:7d:09:82:68:73:5a:
                    86:3d:8f:b4:b1:91:bc:6a:46:f8:0f:ee:3c:5e:18:
                    b7:f2:23:e3:33:76:53:e5:78:0f:3c:ab:f9:e2:c3:
                    71:f0:90:3c:2f:41:92:ef:25:dc:a3:4e:62:2b:bc:
                    6d:d6:cc:44:0f:55:11:4d:25:38:a0:82:9b:e6:90:
                    61:a3:28:34:b3:69:2f:f6:98:32:21:72:58:8d:81:
                    3e:cd:a8:06:0c:f8:17:05:f0:09:d9:c1:a1:90:78:
                    47:c7:b7:97:fb:15:37:12:79:4e:b6:e5:31:ab:c5:
                    f5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:68:2A:CD:CC:B8:70:A4:B5:2A:70:33:DE:5D:33:EF:E4:50:AD:D9
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132663a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:12f::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:71:72:c5:c3:84:ce:f6:34:15:4b:15:85:57:0b:f5:b9:a7:
         18:d8:79:a9:50:58:97:d6:37:86:82:9f:c1:01:d6:de:0b:6a:
         31:12:a8:f6:4d:fe:66:d2:5e:93:83:e8:2d:df:cb:64:1e:0c:
         d6:6d:40:03:0d:33:2d:5d:68:11:19:3a:5b:1d:b2:75:35:83:
         a3:12:b0:bf:a2:10:3e:c0:b0:83:d9:4b:18:d2:c1:ac:89:91:
         c3:6d:f7:94:52:ad:9b:48:51:46:7d:3f:fc:4f:f0:ab:d2:6e:
         26:b0:f0:87:40:46:7e:32:33:7b:e8:aa:c8:a0:c9:30:51:2d:
         03:0f:15:65:5d:03:d4:0a:1d:57:e3:d2:02:cf:44:17:c9:5f:
         12:47:ba:08:3c:05:81:b1:62:82:8b:e3:7f:52:4d:97:37:2a:
         6a:e4:c7:b0:a9:d8:76:e9:1a:bd:b9:12:e6:5a:bd:d6:9a:f0:
         2a:49:e9:5f:f2:aa:ec:0e:fe:cb:fc:2a:6d:12:19:29:aa:29:
         26:8a:57:e7:49:05:42:1d:67:46:bb:af:3c:4b:9b:0a:1a:b1:
         3c:2a:2a:d2:d0:c3:09:16:39:c4:e4:91:5d:d3:d9:d7:2e:71:
         95:e5:28:7a:f8:45:67:db:5f:65:56:25:4c:8f:d2:a7:17:48:
         3c:e8:24:00
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUbD1nbtFwoS0pCYvksf4Lp1chnAAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjYwNTE5MTE0NzQxWhcNMjcwNTE4MTE1MjQx
WjAzMTEwLwYDVQQDEyhDMDY4MkFDRENDQjg3MEE0QjUyQTcwMzNERTVEMzNFRkU0
NTBBREQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGRQsyVAIgMW
9is2i55IgWNikAr2ptvJosvFG6pCeTlCnnqp17JmFHydgmvoDaLnMbeLOAuXf8yQ
s8qJOHCd0KDckw9JnUYcsU15nNlbpafejEeWIDalQdndvBLVmybwQxYt46XPaGEx
p6qcbWTTl9URRfeSmEjXrmFgZO6HEdAA/bVw4SmCYxmZw7Gri559CYJoc1qGPY+0
sZG8akb4D+48Xhi38iPjM3ZT5XgPPKv54sNx8JA8L0GS7yXco05iK7xt1sxED1UR
TSU4oIKb5pBhoyg0s2kv9pgyIXJYjYE+zagGDPgXBfAJ2cGhkHhHx7eX+xU3EnlO
tuUxq8X1PwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFMBoKs3MuHCktSpwM95dM+/k
UK3ZMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzMjY2M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzkzMDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv9iAS8wDQYJKoZI
hvcNAQELBQADggEBALBxcsXDhM72NBVLFYVXC/W5pxjYealQWJfWN4aCn8EB1t4L
ajESqPZN/mbSXpOD6C3fy2QeDNZtQAMNMy1daBEZOlsdsnU1g6MSsL+iED7AsIPZ
SxjSwayJkcNt95RSrZtIUUZ9P/xP8KvSbiaw8IdARn4yM3voqsigyTBRLQMPFWVd
A9QKHVfj0gLPRBfJXxJHugg8BYGxYoKL439STZc3Kmrkx7Cp2HbpGr25EuZavdaa
8CpJ6V/yquwO/sv8Km0SGSmqKSaKV+dJBUIdZ0a7rzxLmwoasTwqKtLQwwkWOcTk
kV3T2dcucZXlKHr4RWfbX2VWJUyP0qcXSDzoJAA=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:07 2026 by rpki-client