Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a63333a3a2f34382d3438203d3e20323135363035.roa
File:                     323630323a663962613a63333a3a2f34382d3438203d3e20323135363035.roa (raw, json)
Hash identifier:          0Qu0jWwMjIsKv54kTtd202jaH9/jtrVNkdn2sFXTGC4=
Subject key identifier:   F7:2B:2B:89:FE:14:17:0E:BD:D7:A3:AA:81:20:0B:6A:42:EF:64:3B
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       306A87E1D0B378B057D5A6C505A0993F6033AE73
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a63333a3a2f34382d3438203d3e20323135363035.roa
Signing time:             Wed 17 Jun 2026 09:32:53 +0000
ROA not before:           Wed 17 Jun 2026 09:27:53 +0000
ROA not after:            Wed 16 Jun 2027 09:32:53 +0000
asID:                     215605
IP address blocks:        2602:f9ba:c3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Jun 2026 09:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6a:87:e1:d0:b3:78:b0:57:d5:a6:c5:05:a0:99:3f:60:33:ae:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jun 17 09:27:53 2026 GMT
            Not After : Jun 16 09:32:53 2027 GMT
        Subject: CN=F72B2B89FE14170EBDD7A3AA81200B6A42EF643B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:88:31:79:33:86:19:f1:4e:d0:d5:b8:52:cb:
                    bd:68:51:89:c3:19:76:d5:36:dd:a2:d8:3d:5d:b2:
                    64:74:92:f8:91:de:fa:be:42:1a:71:90:56:b5:69:
                    c7:86:c5:e1:31:ae:af:38:b4:f0:2b:e7:ab:0b:a0:
                    91:54:f6:cf:7d:5b:62:94:7e:6f:b9:73:bd:83:ae:
                    58:f0:6f:8c:71:f7:d4:34:7b:1c:52:f4:38:5a:bc:
                    8e:8e:f4:93:4b:aa:dc:3e:ad:23:55:53:f9:97:ad:
                    ba:f1:3d:23:7d:4e:25:5f:34:4c:c0:3e:30:05:20:
                    3f:a7:dd:e1:78:cc:14:05:bb:a8:e9:5d:37:d0:a5:
                    3b:c1:cb:90:f4:03:92:2b:6e:e6:19:33:e4:f5:35:
                    ec:0c:9a:b3:d6:ee:c9:1e:a4:61:a7:d5:20:a5:ef:
                    b6:37:af:2e:cf:1f:9b:db:26:4b:22:45:da:18:f0:
                    3c:60:ef:e1:68:09:fb:f1:be:e4:75:e5:fd:fa:c3:
                    88:2f:4e:1d:47:39:0b:47:95:4e:c1:26:9c:5c:3a:
                    ad:5a:e2:a0:67:07:57:1c:a0:b9:12:00:17:74:61:
                    ca:17:2b:f4:d4:7d:82:a2:4d:34:7f:81:7e:0a:f5:
                    d6:71:4b:80:58:ed:d8:a3:76:ee:c3:c1:e0:f1:ac:
                    53:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2B:2B:89:FE:14:17:0E:BD:D7:A3:AA:81:20:0B:6A:42:EF:64:3B
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a63333a3a2f34382d3438203d3e20323135363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:c3::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:3f:83:4f:53:17:e5:56:a8:c8:f5:df:cf:d3:fd:6b:2a:f8:
         07:d3:f4:71:b1:66:e3:35:7a:dd:ce:d0:73:26:f4:6e:87:07:
         a4:92:38:bb:be:e3:17:40:85:14:8d:25:2c:8a:bd:f5:20:9f:
         95:a2:29:4c:0b:eb:32:50:75:35:36:f0:ff:90:5a:ce:86:31:
         bd:dc:f2:ab:1b:13:fa:3a:53:a7:7e:f5:c5:d1:30:92:a9:cb:
         ea:10:4b:b6:9f:90:5e:4d:98:78:69:28:a6:06:c6:92:96:ca:
         92:45:c1:37:6f:1a:fc:cb:98:f8:30:3f:da:63:7a:65:a3:60:
         1e:1c:8d:11:9a:98:4e:02:23:8a:6d:77:50:c3:eb:0c:eb:50:
         67:e4:87:c1:f4:21:11:93:dc:e3:0e:db:0a:88:00:1f:61:3f:
         8f:c0:21:01:93:cc:ea:cf:a3:0a:d0:c9:19:ec:df:ab:bd:30:
         a6:fe:6f:73:ca:d6:9e:d8:8c:a7:61:66:d2:fb:2d:9c:40:0d:
         c7:84:99:d4:77:52:c5:0c:41:f2:8f:a3:ea:53:13:55:ff:74:
         f9:db:88:b0:40:06:09:e7:63:a0:ad:43:02:e9:be:5a:d3:02:
         37:30:c3:42:fa:75:1b:a5:5b:9c:a7:f9:4c:70:fd:c1:55:55:
         e0:11:31:ea
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUMGqH4dCzeLBX1abFBaCZP2AzrnMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGQ4YTY3MmRkNzk2ZTVhZmQ5NTg3NmU5YjU2ODU2NWFl
ZjJiMGI3NmI4MzgyZWEyMmEwHhcNMjYwNjE3MDkyNzUzWhcNMjcwNjE2MDkzMjUz
WjAzMTEwLwYDVQQDEyhGNzJCMkI4OUZFMTQxNzBFQkREN0EzQUE4MTIwMEI2QTQy
RUY2NDNCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYgxeTOGGfFO
0NW4Usu9aFGJwxl21Tbdotg9XbJkdJL4kd76vkIacZBWtWnHhsXhMa6vOLTwK+er
C6CRVPbPfVtilH5vuXO9g65Y8G+McffUNHscUvQ4WryOjvSTS6rcPq0jVVP5l626
8T0jfU4lXzRMwD4wBSA/p93heMwUBbuo6V030KU7wcuQ9AOSK27mGTPk9TXsDJqz
1u7JHqRhp9Ugpe+2N68uzx+b2yZLIkXaGPA8YO/haAn78b7kdeX9+sOIL04dRzkL
R5VOwSacXDqtWuKgZwdXHKC5EgAXdGHKFyv01H2Cok00f4F+CvXWcUuAWO3Yo3bu
w8Hg8axTYwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFPcrK4n+FBcOvdejqoEgC2pC
72Q7MB8GA1UdIwQYMBaAFHa/RHyTUISUnbBG/3c4seV8gk/5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzlhNjg5NjRmNWZmNjQwZWJhZDEwMGRlZWE3YzliYTQ2LzEv
NzZCRjQ0N0M5MzUwODQ5NDlEQjA0NkZGNzczOEIxRTU3QzgyNEZGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzhkMzdhMDcyLTE1YWUtNDkwNS04MTBlLTk5MWZjNjIwMWI0NS84ZDhh
NjcyZGQ3OTZlNWFmZDk1ODc2ZTliNTY4NTY1YWVmMmIwYjc2YjgzODJlYTIyYS5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS85YTY4OTY0ZjVmZjY0MGViYWQxMDBk
ZWVhN2M5YmE0Ni8xLzMyMzYzMDMyM2E2NjM5NjI2MTNhNjMzMzNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMyMzEzNTM2MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+boAwzANBgkq
hkiG9w0BAQsFAAOCAQEAez+DT1MX5VaoyPXfz9P9ayr4B9P0cbFm4zV63c7Qcyb0
bocHpJI4u77jF0CFFI0lLIq99SCflaIpTAvrMlB1NTbw/5BazoYxvdzyqxsT+jpT
p371xdEwkqnL6hBLtp+QXk2YeGkopgbGkpbKkkXBN28a/MuY+DA/2mN6ZaNgHhyN
EZqYTgIjim13UMPrDOtQZ+SHwfQhEZPc4w7bCogAH2E/j8AhAZPM6s+jCtDJGezf
q70wpv5vc8rWntiMp2Fm0vstnEANx4SZ1HdSxQxB8o+j6lMTVf90+duIsEAGCedj
oK1DAum+WtMCNzDDQvp1G6VbnKf5THD9wVVV4BEx6g==
-----END CERTIFICATE-----
Generated at Sat Jun 20 17:27:05 2026 by rpki-client