Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/323630323a3239313a33653a3a2f34382d3438203d3e20323134303932.roa
File:                     323630323a3239313a33653a3a2f34382d3438203d3e20323134303932.roa (raw, json)
Hash identifier:          ZSGFMabebxpScO0ZnQspguf1Oyy4G6eowJB4RxCDe5o=
Subject key identifier:   C5:A0:95:93:A2:8B:54:FC:8B:49:91:19:1C:F6:EA:16:8C:A0:F1:7E
Certificate issuer:       /CN=0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323
Certificate serial:       231A29DFF02CD7F135AC63C722E1208BFE1F85D3
Authority key identifier: 9C:94:AA:A9:AE:FF:B5:82:9D:3F:7E:80:33:9F:4A:33:EC:AC:54:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/323630323a3239313a33653a3a2f34382d3438203d3e20323134303932.roa
Signing time:             Wed 17 Jun 2026 09:32:57 +0000
ROA not before:           Wed 17 Jun 2026 09:27:57 +0000
ROA not after:            Wed 16 Jun 2027 09:32:57 +0000
asID:                     214092
IP address blocks:        2602:291:3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:1a:29:df:f0:2c:d7:f1:35:ac:63:c7:22:e1:20:8b:fe:1f:85:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323
        Validity
            Not Before: Jun 17 09:27:57 2026 GMT
            Not After : Jun 16 09:32:57 2027 GMT
        Subject: CN=C5A09593A28B54FC8B4991191CF6EA168CA0F17E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8e:08:59:e7:ff:03:e0:30:c3:90:2a:a4:7d:
                    fd:e0:e0:64:64:a8:3e:89:65:e4:e2:79:94:f0:7f:
                    55:3b:93:6d:50:6f:66:37:58:1c:07:e6:fc:0c:97:
                    00:c4:5c:13:36:0a:bb:5b:0d:74:26:44:92:c9:f0:
                    e8:a2:ab:3f:2f:d1:e7:21:27:ca:3f:5f:61:fb:91:
                    76:d4:bc:bb:a0:dd:7f:10:56:d1:1d:53:90:99:6b:
                    c8:14:a7:bb:1f:46:c2:48:0d:be:fc:5d:21:bb:4c:
                    fc:68:3a:ee:b6:5c:ba:76:63:af:ea:01:c0:d1:a8:
                    ba:bd:0c:cd:57:e1:49:95:7a:ae:78:fd:35:50:c8:
                    7f:9b:13:f3:69:74:d2:8f:52:66:30:50:db:5c:ca:
                    15:b7:58:47:9b:66:f5:74:81:92:9c:91:9f:c0:8f:
                    c9:e4:a0:46:ab:b8:87:87:0c:8a:52:b4:62:88:ec:
                    4c:4f:6a:2a:15:a2:27:f4:c9:da:0c:a3:39:77:9d:
                    c0:f8:f9:5a:28:2c:5a:89:be:46:60:24:71:f6:2a:
                    eb:76:e3:0a:54:56:6a:7d:44:a4:d5:65:2b:7f:fc:
                    c1:fd:31:08:69:2d:6a:bf:40:ca:3e:ff:0a:44:f5:
                    e6:0c:ab:77:54:32:42:af:9d:71:6d:84:d5:ba:37:
                    2f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A0:95:93:A2:8B:54:FC:8B:49:91:19:1C:F6:EA:16:8C:A0:F1:7E
            X509v3 Authority Key Identifier:
                keyid:9C:94:AA:A9:AE:FF:B5:82:9D:3F:7E:80:33:9F:4A:33:EC:AC:54:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/323630323a3239313a33653a3a2f34382d3438203d3e20323134303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:291:3e::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:6f:b1:47:0e:3c:8b:b6:bc:35:64:13:25:db:4f:df:7e:61:
         bb:15:c4:20:5a:83:6c:35:7f:c6:0e:3f:3a:b7:c2:25:ae:44:
         40:4c:95:44:eb:69:25:bc:5b:49:ba:17:8b:c6:33:9e:67:e9:
         84:75:05:fe:5f:ac:f2:75:f6:bd:b9:bc:df:63:f9:fb:b6:6f:
         6a:a2:41:e1:76:44:81:b3:88:7a:c9:0b:91:9c:61:c9:5d:96:
         7c:38:2f:2e:60:49:2d:96:d1:07:17:20:6a:93:b6:a2:c7:e9:
         77:11:1a:1f:92:3e:8a:f4:6e:94:95:34:c7:82:89:25:14:6f:
         2f:9e:76:e4:cb:17:5d:e4:a6:00:5d:fd:8e:19:f4:6b:e5:39:
         69:33:54:94:2d:76:ed:12:a9:7c:70:82:e0:25:7d:24:96:39:
         c2:27:ed:9b:dc:b1:ac:7a:5d:00:95:0d:5b:24:9a:d1:ad:c3:
         2e:c6:e8:e1:ef:02:a7:41:81:5e:6e:00:a3:f2:60:93:fa:88:
         c0:03:25:9c:47:00:87:78:bb:46:f4:08:d7:81:e2:c0:bb:d9:
         b5:eb:c3:08:16:9b:ec:e3:46:1f:b3:9a:e6:a4:8e:f3:c0:29:
         e0:56:72:9b:e9:8c:d3:ff:24:f3:59:9d:f7:e6:eb:01:5e:e0:
         a7:9f:fb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:58 2026 by rpki-client