Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a63303a3a2f34382d313238203d3e20333933353737.roa
File:                     323630323a663962613a63303a3a2f34382d313238203d3e20333933353737.roa (raw, json)
Hash identifier:          gw0sMuTsdV7LRVpxdD3vT8SO9LtHYUCEND3dwR0SrPY=
Subject key identifier:   15:BF:C5:E1:1C:AD:F9:AF:13:98:12:AE:16:2C:40:1B:E8:A3:36:9A
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       476CACBD0ED9A6E320C41941D769308AE36CF57A
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a63303a3a2f34382d313238203d3e20333933353737.roa
Signing time:             Wed 17 Jun 2026 09:32:51 +0000
ROA not before:           Wed 17 Jun 2026 09:27:51 +0000
ROA not after:            Wed 16 Jun 2027 09:32:51 +0000
asID:                     393577
IP address blocks:        2602:f9ba:c0::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Jun 2026 09:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6c:ac:bd:0e:d9:a6:e3:20:c4:19:41:d7:69:30:8a:e3:6c:f5:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jun 17 09:27:51 2026 GMT
            Not After : Jun 16 09:32:51 2027 GMT
        Subject: CN=15BFC5E11CADF9AF139812AE162C401BE8A3369A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6a:c3:03:d8:21:f4:b8:19:02:04:a7:1c:7c:
                    15:d7:8a:9d:10:0d:a7:38:11:46:bd:5f:99:56:17:
                    bb:b9:19:17:82:fc:ac:ff:6c:9a:29:6f:5d:da:0a:
                    97:7b:79:d7:31:e2:ae:47:7a:d4:50:93:64:bd:71:
                    2e:42:88:6a:43:47:1a:d6:45:6a:5c:de:db:e6:dd:
                    f1:0e:c0:cf:67:79:37:db:4b:5c:99:ae:37:ee:40:
                    f1:73:95:c6:54:bb:66:41:d4:29:55:4a:fb:08:c2:
                    5f:0b:1c:20:38:cf:d4:16:b3:d6:39:61:60:41:ab:
                    dd:ca:ab:04:c2:29:5e:19:70:45:6a:5d:47:e1:74:
                    da:b9:62:13:2e:73:cf:57:bc:2f:be:31:15:0f:cd:
                    cc:b0:17:f4:e8:c7:22:1b:7f:3a:c3:d4:38:2b:5c:
                    e2:70:8b:ca:aa:4c:ac:cc:dc:0f:af:e5:b1:57:45:
                    d3:36:83:6d:1d:e3:64:8a:9d:da:20:3b:e9:e5:01:
                    32:bf:50:cd:11:86:55:91:fa:d5:e8:1e:8d:bf:02:
                    cc:09:a9:71:c7:53:ce:fb:f2:47:c9:ff:0f:56:9f:
                    0e:61:7f:3b:f5:e5:7a:ea:05:a6:5a:a9:8b:8a:cd:
                    e2:b0:7f:d3:b3:3b:e0:05:31:cd:97:3d:28:89:2f:
                    5b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BF:C5:E1:1C:AD:F9:AF:13:98:12:AE:16:2C:40:1B:E8:A3:36:9A
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a63303a3a2f34382d313238203d3e20333933353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:49:c8:67:23:a2:0a:e2:21:c7:a2:19:fa:6b:58:dc:20:1a:
         b6:f6:66:d4:c8:7f:88:bb:44:dd:59:85:71:b7:76:15:13:0e:
         42:2f:a6:23:bb:34:aa:2e:3f:cb:74:08:7a:f3:12:20:bf:ee:
         1b:0b:83:7d:93:8d:ea:da:52:e3:d2:04:1d:4e:1e:59:9a:50:
         79:b4:6e:75:23:7c:fb:e8:0b:3f:e4:c9:2e:19:35:c9:a6:a2:
         8c:d1:a9:55:d0:be:54:26:94:89:f0:6e:c8:ed:d0:b8:af:62:
         61:b4:47:e5:bd:d1:04:80:91:08:95:3a:f1:be:e2:4b:8d:5c:
         bb:c7:02:d9:c0:ea:7b:cb:cd:a0:5c:30:12:22:ef:da:32:d1:
         e6:a8:2c:c8:25:23:44:e0:f7:be:ea:ed:e7:71:dd:b8:5e:ff:
         c7:b8:92:45:df:58:aa:84:fa:f8:84:81:ff:73:af:8d:1c:b7:
         98:e4:cf:2c:67:10:ff:1b:31:05:4c:b7:55:a3:30:a3:48:72:
         95:a9:d1:4d:91:91:ba:ba:26:39:81:57:e0:0b:47:fe:73:8c:
         7b:f1:d0:29:81:b3:00:43:f6:cc:d8:7a:b6:c4:27:3c:9d:2d:
         de:4b:49:8f:c9:16:e9:6c:2b:15:02:fe:18:33:99:ad:8a:35:
         b4:53:30:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 17:26:28 2026 by rpki-client