Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61383a3a2f34382d3438203d3e20313337393038.roa
File:                     323630323a663962613a61383a3a2f34382d3438203d3e20313337393038.roa (raw, json)
Hash identifier:          03+tdAWe3+IcE2DxaHbeJBB6Xqo7fOykgbkVZcBZ6b8=
Subject key identifier:   97:7E:E4:62:AF:12:AA:8B:03:A2:35:EB:8B:29:75:05:DF:C0:5E:BE
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       65F3B47FB4A6ABB0B717F13C2F4ECAB336FB89FB
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61383a3a2f34382d3438203d3e20313337393038.roa
Signing time:             Wed 17 Jun 2026 09:32:55 +0000
ROA not before:           Wed 17 Jun 2026 09:27:55 +0000
ROA not after:            Wed 16 Jun 2027 09:32:55 +0000
asID:                     137908
IP address blocks:        2602:f9ba:a8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Jun 2026 09:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f3:b4:7f:b4:a6:ab:b0:b7:17:f1:3c:2f:4e:ca:b3:36:fb:89:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jun 17 09:27:55 2026 GMT
            Not After : Jun 16 09:32:55 2027 GMT
        Subject: CN=977EE462AF12AA8B03A235EB8B297505DFC05EBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dd:97:68:46:d9:bf:8b:10:1d:02:4d:cf:a9:
                    a7:e6:1c:41:b2:3d:68:f0:3f:b4:57:e7:7e:d5:af:
                    b4:0b:b4:06:d1:81:62:38:1a:de:2c:00:48:e0:05:
                    ca:f3:69:2b:a1:d7:0f:5d:a4:56:ea:be:b6:3f:93:
                    6b:c3:32:f1:e8:bb:54:d0:0b:65:36:9a:eb:33:a9:
                    f0:4f:ba:d6:5a:f6:96:49:06:da:b5:b4:4b:81:aa:
                    f1:2b:40:97:de:60:cc:08:09:5f:7a:96:7e:a0:91:
                    61:ad:14:8d:0c:bc:d4:34:7d:dc:fc:16:07:e6:37:
                    b0:f5:0c:87:e1:f2:80:24:02:74:a3:79:c0:e2:35:
                    ba:38:db:89:61:43:2a:93:7e:41:03:13:65:aa:a9:
                    c2:14:78:fd:b0:7c:2f:7e:3b:d6:b9:cd:00:b8:ee:
                    20:8e:2b:51:ea:6c:6c:98:7d:93:50:fb:2f:b3:fb:
                    b5:5b:52:2c:90:92:09:64:7a:7b:0b:dd:ff:72:f5:
                    da:3a:60:9a:30:1a:be:df:8a:bd:01:1b:e0:7a:96:
                    0f:fd:fb:71:81:cf:5c:d2:d3:65:11:48:07:97:af:
                    2d:8d:50:91:21:8d:ea:86:dd:52:e0:5e:0c:e1:b1:
                    f0:af:71:a6:8f:36:69:c6:2b:f0:99:79:1f:5f:ce:
                    80:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7E:E4:62:AF:12:AA:8B:03:A2:35:EB:8B:29:75:05:DF:C0:5E:BE
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61383a3a2f34382d3438203d3e20313337393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:a8::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:13:98:ca:df:66:ef:db:d5:4b:62:77:e7:0f:d8:b2:c0:58:
         af:76:22:73:5e:1e:96:6c:e7:6e:a9:3f:5c:ef:6b:bb:68:8f:
         d4:7b:42:2e:30:55:82:58:12:f0:22:a5:d9:f8:6a:69:30:f7:
         1a:d4:4a:df:8f:58:c0:ae:40:08:09:2e:84:5c:d0:43:c1:c0:
         80:32:f0:34:d5:0f:e4:dc:25:ec:16:d4:19:30:24:9a:8c:57:
         e9:70:91:86:53:0b:c4:96:db:65:0c:31:26:7e:8e:ea:b1:ff:
         e9:28:4b:ba:b7:1a:dd:78:b6:3e:a8:4c:44:74:60:f8:5a:d7:
         c3:b4:7f:0f:1c:15:87:07:3a:56:da:d6:a7:fd:38:e0:4e:de:
         5d:0d:7d:90:7e:45:10:6f:99:e2:57:5d:a6:07:d5:11:79:61:
         02:b8:50:04:93:1d:c2:76:47:04:a1:bc:87:6f:af:14:5c:31:
         fd:29:8b:aa:9d:03:a7:82:be:2f:19:b0:3f:94:1a:91:b6:43:
         cd:97:b5:39:1c:79:21:72:d7:95:1b:e8:ac:98:ba:8a:ca:17:
         f9:ad:c9:c1:92:ec:aa:d5:d1:33:29:d9:be:63:9d:e1:c5:84:
         5f:bc:18:27:fc:a6:5d:96:e3:37:dc:ef:47:f3:53:c5:2a:84:
         a1:3f:0a:f9
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUZfO0f7Smq7C3F/E8L07Kszb7ifswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGQ4YTY3MmRkNzk2ZTVhZmQ5NTg3NmU5YjU2ODU2NWFl
ZjJiMGI3NmI4MzgyZWEyMmEwHhcNMjYwNjE3MDkyNzU1WhcNMjcwNjE2MDkzMjU1
WjAzMTEwLwYDVQQDEyg5NzdFRTQ2MkFGMTJBQThCMDNBMjM1RUI4QjI5NzUwNURG
QzA1RUJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN2XaEbZv4sQ
HQJNz6mn5hxBsj1o8D+0V+d+1a+0C7QG0YFiOBreLABI4AXK82krodcPXaRW6r62
P5NrwzLx6LtU0AtlNprrM6nwT7rWWvaWSQbatbRLgarxK0CX3mDMCAlfepZ+oJFh
rRSNDLzUNH3c/BYH5jew9QyH4fKAJAJ0o3nA4jW6ONuJYUMqk35BAxNlqqnCFHj9
sHwvfjvWuc0AuO4gjitR6mxsmH2TUPsvs/u1W1IskJIJZHp7C93/cvXaOmCaMBq+
34q9ARvgepYP/ftxgc9c0tNlEUgHl68tjVCRIY3qht1S4F4M4bHwr3GmjzZpxivw
mXkfX86AFQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFJd+5GKvEqqLA6I164spdQXf
wF6+MB8GA1UdIwQYMBaAFHa/RHyTUISUnbBG/3c4seV8gk/5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzlhNjg5NjRmNWZmNjQwZWJhZDEwMGRlZWE3YzliYTQ2LzEv
NzZCRjQ0N0M5MzUwODQ5NDlEQjA0NkZGNzczOEIxRTU3QzgyNEZGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzhkMzdhMDcyLTE1YWUtNDkwNS04MTBlLTk5MWZjNjIwMWI0NS84ZDhh
NjcyZGQ3OTZlNWFmZDk1ODc2ZTliNTY4NTY1YWVmMmIwYjc2YjgzODJlYTIyYS5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS85YTY4OTY0ZjVmZjY0MGViYWQxMDBk
ZWVhN2M5YmE0Ni8xLzMyMzYzMDMyM2E2NjM5NjI2MTNhNjEzODNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMxMzMzNzM5MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+boAqDANBgkq
hkiG9w0BAQsFAAOCAQEAVxOYyt9m79vVS2J35w/YssBYr3Yic14elmznbqk/XO9r
u2iP1HtCLjBVglgS8CKl2fhqaTD3GtRK349YwK5ACAkuhFzQQ8HAgDLwNNUP5Nwl
7BbUGTAkmoxX6XCRhlMLxJbbZQwxJn6O6rH/6ShLurca3Xi2PqhMRHRg+FrXw7R/
DxwVhwc6VtrWp/044E7eXQ19kH5FEG+Z4lddpgfVEXlhArhQBJMdwnZHBKG8h2+v
FFwx/SmLqp0Dp4K+LxmwP5QakbZDzZe1ORx5IXLXlRvorJi6isoX+a3JwZLsqtXR
MynZvmOd4cWEX7wYJ/ymXZbjN9zvR/NTxSqEoT8K+Q==
-----END CERTIFICATE-----
Generated at Sat Jun 20 17:27:05 2026 by rpki-client