Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61343a3a2f34382d3438203d3e20323135313436.roa
File:                     323630323a663962613a61343a3a2f34382d3438203d3e20323135313436.roa (raw, json)
Hash identifier:          fkCca6zHKrxsXtyulMlDcjR8O1IabwTZgZ127c8nbdA=
Subject key identifier:   76:28:8B:95:AC:D0:ED:15:F4:E4:82:F4:B4:ED:61:B0:85:40:62:59
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       1A6CD51A13CA22F5F97587B0EB35D6895C6954F8
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61343a3a2f34382d3438203d3e20323135313436.roa
Signing time:             Wed 17 Jun 2026 09:32:56 +0000
ROA not before:           Wed 17 Jun 2026 09:27:56 +0000
ROA not after:            Wed 16 Jun 2027 09:32:56 +0000
asID:                     215146
IP address blocks:        2602:f9ba:a4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Jun 2026 09:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:6c:d5:1a:13:ca:22:f5:f9:75:87:b0:eb:35:d6:89:5c:69:54:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jun 17 09:27:56 2026 GMT
            Not After : Jun 16 09:32:56 2027 GMT
        Subject: CN=76288B95ACD0ED15F4E482F4B4ED61B085406259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:67:46:64:87:6f:b4:d2:d2:66:62:e1:da:fa:
                    28:3b:0b:f0:3e:3a:ed:33:fa:a1:ab:07:03:e4:e2:
                    21:80:05:77:53:24:ee:fc:58:fe:c2:61:e7:86:29:
                    bb:e5:23:28:28:12:01:a3:11:d9:70:6d:c0:11:0e:
                    89:fe:4d:12:39:59:0c:ea:c2:eb:71:65:dc:69:34:
                    13:df:6f:fd:f8:bf:71:3a:d4:69:43:71:6a:02:79:
                    9b:0c:23:d7:70:18:b7:40:85:b9:f0:ee:8b:2c:52:
                    cd:37:94:76:ab:f6:6c:bb:15:af:aa:ce:18:cf:8b:
                    15:53:ce:79:05:b2:e1:45:32:1b:b3:db:8d:8f:c2:
                    f7:6d:cc:b4:18:af:50:94:af:1b:f1:c3:81:03:25:
                    7b:94:08:ee:2e:4e:da:c5:c0:29:5a:d6:db:ce:57:
                    6d:c4:db:48:a0:8e:91:3d:cc:e1:e0:8e:f4:13:10:
                    0b:04:95:d3:6c:af:60:6c:28:3c:f2:31:7a:0c:2a:
                    cf:d3:9d:04:81:10:b7:ac:1d:8a:97:22:b0:6a:9d:
                    1a:dd:70:a0:ca:41:d2:0a:57:0e:94:58:f7:02:7c:
                    0b:e4:5f:3d:1a:f8:5d:d7:95:f2:07:24:d3:a7:d8:
                    14:9a:33:00:b2:f9:b0:c3:ea:ac:98:03:71:71:b9:
                    fe:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:28:8B:95:AC:D0:ED:15:F4:E4:82:F4:B4:ED:61:B0:85:40:62:59
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61343a3a2f34382d3438203d3e20323135313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:a4::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:00:5d:50:dc:d0:90:77:51:33:e0:55:b5:54:6b:18:e8:3b:
         d4:33:e5:7a:14:74:21:91:c2:d9:59:b2:06:bc:39:4f:65:e9:
         65:fa:37:4e:d3:c6:b2:db:a6:6a:0a:67:03:2f:50:7f:63:32:
         7c:91:ac:1c:7c:2d:4d:40:d0:df:94:48:5f:0d:51:fa:e9:0d:
         59:5b:7d:b7:11:5e:d7:e5:b8:09:a6:d8:eb:90:fc:b8:c6:25:
         bb:f7:39:74:af:91:0e:9d:6d:37:5d:30:72:5a:72:6f:8a:86:
         8f:56:e3:42:91:97:07:de:d8:7b:30:12:40:da:9a:c7:e6:01:
         df:31:66:72:8c:ab:90:5d:49:ff:7d:7e:35:48:54:39:98:cc:
         c6:0a:58:5a:1c:4e:33:d7:62:cc:cb:4d:e9:f6:45:e7:cc:9d:
         1e:1c:88:0e:eb:9e:88:1d:8c:d9:d4:83:de:19:db:48:bd:58:
         1b:80:59:34:ab:88:8e:70:25:72:68:45:f4:1e:ae:15:89:3f:
         0f:50:e9:7d:74:dc:d7:c2:1a:1e:a8:8e:84:65:7d:56:f8:61:
         88:4d:72:a5:f3:77:bb:de:49:55:a7:9d:31:0a:be:38:95:fb:
         26:5c:d2:fc:c2:98:96:37:79:4f:15:89:5a:07:98:c5:f4:ac:
         ef:4c:9f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 17:27:04 2026 by rpki-client