Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61333a3a2f34382d3438203d3e203630393030.roa
File:                     323630323a663962613a61333a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          sEkbXRNcfD37gFXWeFxhtTDcmRfB/YuzDx6HoroIp0Q=
Subject key identifier:   FC:4A:80:46:93:61:BE:83:01:F9:33:BA:27:E3:F6:B0:24:DE:C3:56
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       5BB05E3C0C6DC951F202EAD12789E4374C9AD020
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61333a3a2f34382d3438203d3e203630393030.roa
Signing time:             Wed 17 Jun 2026 09:32:55 +0000
ROA not before:           Wed 17 Jun 2026 09:27:55 +0000
ROA not after:            Wed 16 Jun 2027 09:32:55 +0000
asID:                     60900
IP address blocks:        2602:f9ba:a3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Jun 2026 09:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b0:5e:3c:0c:6d:c9:51:f2:02:ea:d1:27:89:e4:37:4c:9a:d0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jun 17 09:27:55 2026 GMT
            Not After : Jun 16 09:32:55 2027 GMT
        Subject: CN=FC4A80469361BE8301F933BA27E3F6B024DEC356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cf:a1:8d:71:bc:e6:4b:6e:b5:ae:23:31:e3:
                    7f:dc:cd:5e:a3:00:28:d4:ad:48:73:b0:dc:e2:7e:
                    df:27:a0:65:2f:94:89:6e:b6:08:07:da:4d:5a:03:
                    88:80:e2:b5:4b:15:c7:d7:37:8d:c3:5f:45:bd:41:
                    24:48:f3:5e:7b:3e:eb:34:c7:a9:a0:b4:44:53:c0:
                    0a:57:1e:46:5c:13:07:05:c2:1a:c1:63:74:ba:7f:
                    33:ff:bb:aa:6f:d4:25:db:80:0c:64:38:3a:67:29:
                    b3:cf:c2:58:bb:74:4e:ea:af:7f:bc:20:cb:b9:48:
                    86:b7:90:85:a5:e2:4d:af:4b:6c:9f:c8:75:56:d7:
                    6b:bb:89:96:1e:f2:6d:85:82:79:59:39:f8:5a:b5:
                    84:0e:6f:24:2c:00:24:68:b6:96:2d:b8:7f:62:2e:
                    dc:40:09:a0:24:2a:aa:4d:b6:c9:e8:8b:0f:37:57:
                    ac:97:d8:df:7b:cc:7f:d3:ae:f9:46:df:21:01:09:
                    9a:41:75:cb:04:98:4e:4f:34:0f:f2:f9:5d:9c:8b:
                    02:f1:39:b3:04:68:e4:0c:12:76:ce:20:72:87:0f:
                    81:28:16:88:48:5f:89:80:19:37:ae:6b:4c:7d:83:
                    20:55:63:98:81:80:9c:8b:14:0c:fc:5c:58:4b:ce:
                    e6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4A:80:46:93:61:BE:83:01:F9:33:BA:27:E3:F6:B0:24:DE:C3:56
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61333a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:a3::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:2c:31:62:24:15:9c:eb:b2:8f:3e:9a:57:e8:1d:5c:e0:6b:
         fa:25:7a:69:ac:57:38:42:bd:98:4f:2f:45:dd:46:98:a9:6b:
         d2:1c:7b:a8:27:f7:37:06:d2:55:95:59:cb:34:82:1c:65:82:
         22:d1:bb:0b:77:63:f4:70:c8:dc:ef:f9:2d:d0:50:54:d8:3a:
         2d:19:3a:45:44:2c:81:35:93:a8:8a:e1:6c:bc:dc:19:ad:9e:
         56:43:d3:cd:92:a3:27:b3:81:c0:6f:fc:1e:71:49:02:6d:bd:
         e6:1a:c2:ad:0d:be:5a:24:62:82:06:83:17:3a:22:d4:28:bc:
         ff:2a:6c:c8:c0:d5:c3:15:e8:41:d0:62:0b:26:cc:e4:4b:7b:
         81:d0:73:81:9a:04:5d:a1:6f:b9:b2:82:dc:68:65:f2:62:39:
         e3:c2:74:1d:95:4d:3f:d0:a4:a6:fa:c0:1e:80:af:1e:91:22:
         68:b7:b5:4c:e2:dc:5b:76:6f:e0:92:fa:f7:3c:d5:47:28:87:
         0d:00:cb:33:4b:48:12:48:66:09:38:e4:0f:1e:35:39:d6:34:
         77:0b:c1:84:d5:64:c1:b4:03:37:aa:57:68:69:ad:01:5c:c7:
         9b:f8:c0:e1:53:61:f6:60:de:5d:2d:37:5d:10:7d:43:24:c4:
         d0:92:31:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 17:26:06 2026 by rpki-client