Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3234303a3a2f34382d3438203d3e203630393030.roa
File:                     323630323a663530633a3234303a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          ZwkaE7fJeMQvqtdfhQicW8MJ2dJ3AmYGP78nB4M+vlI=
Subject key identifier:   B3:2B:C1:D6:70:40:A7:2F:DC:EE:1E:32:DC:62:95:A2:87:E6:23:C9
Certificate issuer:       /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Certificate serial:       3188B2D6930C48F2E9CE1F402C0FBB4FEC27577F
Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3234303a3a2f34382d3438203d3e203630393030.roa
Signing time:             Sun 08 Feb 2026 17:41:41 +0000
ROA not before:           Sun 08 Feb 2026 17:36:41 +0000
ROA not after:            Sun 07 Feb 2027 17:41:41 +0000
asID:                     60900
IP address blocks:        2602:f50c:240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 01:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:88:b2:d6:93:0c:48:f2:e9:ce:1f:40:2c:0f:bb:4f:ec:27:57:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
        Validity
            Not Before: Feb  8 17:36:41 2026 GMT
            Not After : Feb  7 17:41:41 2027 GMT
        Subject: CN=B32BC1D67040A72FDCEE1E32DC6295A287E623C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fd:05:d3:ec:8f:c9:dc:89:b8:a4:bd:ac:1e:
                    dc:e3:07:09:d5:fa:08:ca:90:a2:4a:66:42:00:54:
                    77:a3:53:fc:37:f1:05:53:4f:92:78:23:fa:2e:e3:
                    5f:bf:ed:75:ea:a3:4d:ce:91:00:9c:32:73:47:f8:
                    69:88:a3:94:5f:bd:7d:46:34:02:34:0c:54:cf:89:
                    fb:1d:30:46:d5:c1:3a:f8:f6:eb:6f:55:c3:7e:c9:
                    52:f4:12:21:ad:aa:0d:c3:2d:0f:8d:33:bb:ec:8a:
                    cb:52:9c:0d:d8:b8:6c:a9:a6:43:65:91:02:d2:05:
                    48:4b:2c:2d:cd:9e:18:10:13:d5:ec:bc:ab:ca:15:
                    d8:a7:0e:18:3e:b3:df:f7:f6:b7:d2:93:1f:43:42:
                    5e:bb:46:94:7f:67:42:aa:a4:82:33:69:69:4b:f4:
                    d5:d1:47:08:2f:04:54:c5:54:4a:2f:3b:ee:51:ce:
                    79:b6:d8:b6:aa:3b:bf:93:7e:87:89:12:56:ae:67:
                    75:31:a1:c1:a0:ba:a5:1c:c7:d5:00:99:36:4a:e4:
                    49:f1:76:58:f7:13:a1:69:76:69:b0:da:ce:34:72:
                    d5:60:91:08:f5:61:e2:b9:1c:35:73:d5:40:8a:36:
                    e6:55:e9:eb:b4:31:d1:1c:85:ef:17:56:cf:33:0d:
                    e6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2B:C1:D6:70:40:A7:2F:DC:EE:1E:32:DC:62:95:A2:87:E6:23:C9
            X509v3 Authority Key Identifier:
                keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3234303a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f50c:240::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:f8:fd:aa:5a:c9:c0:2a:74:5a:e0:a1:fa:89:8d:4b:39:99:
         20:0c:e4:b6:60:05:f2:0a:7d:89:af:5d:55:2b:c4:0a:09:47:
         d3:7a:0c:24:cb:ab:99:0d:13:ac:86:da:ea:2a:44:eb:eb:74:
         bb:18:c6:cc:7e:44:b0:92:54:e6:db:e0:5d:28:2c:08:65:96:
         4c:cc:5d:59:fc:28:c0:38:e2:f7:da:8c:77:83:f2:2c:0f:c8:
         ed:46:d7:65:c5:71:27:b2:29:ef:66:59:57:82:db:f4:8b:f1:
         42:93:90:2d:a8:3b:6a:dc:ff:83:44:50:02:39:16:df:c9:81:
         f6:b3:a7:15:f5:d3:b7:85:d4:53:52:1f:55:58:ab:93:26:00:
         1d:3d:b4:ab:e9:0b:cc:e4:e7:c8:bf:b5:a5:e4:50:49:5f:44:
         94:56:83:57:57:30:92:1f:1b:09:4a:7f:c6:88:ad:22:7c:e0:
         9b:1c:62:b5:54:df:9c:7a:85:19:90:93:fb:a2:51:99:c2:c2:
         c2:cf:a3:b9:32:e5:dc:ba:b6:83:b1:74:c9:11:3f:65:3e:a0:
         97:4b:1b:5d:25:45:4e:7b:5c:43:c0:f8:53:78:06:81:c6:65:
         06:33:a5:ba:a6:05:dc:d9:b6:e9:24:90:08:0f:54:3a:7d:ea:
         1d:93:25:41
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUMYiy1pMMSPLpzh9ALA+7T+wnV38wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmVjZmRmZGJkYjU2ZDNmYmZhMjYxYmIyODdiZjBjNDE4
NTU3MmQwYzIxYjY0ZTFmNzQwHhcNMjYwMjA4MTczNjQxWhcNMjcwMjA3MTc0MTQx
WjAzMTEwLwYDVQQDEyhCMzJCQzFENjcwNDBBNzJGRENFRTFFMzJEQzYyOTVBMjg3
RTYyM0M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP0F0+yPydyJ
uKS9rB7c4wcJ1foIypCiSmZCAFR3o1P8N/EFU0+SeCP6LuNfv+116qNNzpEAnDJz
R/hpiKOUX719RjQCNAxUz4n7HTBG1cE6+Pbrb1XDfslS9BIhraoNwy0PjTO77IrL
UpwN2LhsqaZDZZEC0gVISywtzZ4YEBPV7LyryhXYpw4YPrPf9/a30pMfQ0Jeu0aU
f2dCqqSCM2lpS/TV0UcILwRUxVRKLzvuUc55tti2qju/k36HiRJWrmd1MaHBoLql
HMfVAJk2SuRJ8XZY9xOhaXZpsNrONHLVYJEI9WHiuRw1c9VAijbmVenrtDHRHIXv
F1bPMw3mEwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFLMrwdZwQKcv3O4eMtxilaKH
5iPJMB8GA1UdIwQYMBaAFHW/F2dWTXxExb05X2pqIZDS3dcIMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2NhMmIxMmFmYzQyODQzZGJhZTRiMDVjZjM2MGQ5NTJkLzAv
NzVCRjE3Njc1NjREN0M0NEM1QkQzOTVGNkE2QTIxOTBEMkRERDcwOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDll
ZjFiNGUyL2M0MTU2NDRhLWE1YTQtNDg0OS1hYmE5LTE5ODA4NmZkMTU0ZC9mZWNm
ZGZkYmRiNTZkM2ZiZmEyNjFiYjI4N2JmMGM0MTg1NTcyZDBjMjFiNjRlMWY3NC5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jYTJiMTJhZmM0Mjg0M2RiYWU0YjA1
Y2YzNjBkOTUyZC8wLzMyMzYzMDMyM2E2NjM1MzA2MzNhMzIzNDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzYzMDM5MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC9QwCQDANBgkq
hkiG9w0BAQsFAAOCAQEAcvj9qlrJwCp0WuCh+omNSzmZIAzktmAF8gp9ia9dVSvE
CglH03oMJMurmQ0TrIba6ipE6+t0uxjGzH5EsJJU5tvgXSgsCGWWTMxdWfwowDji
99qMd4PyLA/I7UbXZcVxJ7Ip72ZZV4Lb9IvxQpOQLag7atz/g0RQAjkW38mB9rOn
FfXTt4XUU1IfVVirkyYAHT20q+kLzOTnyL+1peRQSV9ElFaDV1cwkh8bCUp/xoit
InzgmxxitVTfnHqFGZCT+6JRmcLCws+juTLl3Lq2g7F0yRE/ZT6gl0sbXSVFTntc
Q8D4U3gGgcZlBjOluqYF3Nm26SSQCA9UOn3qHZMlQQ==
-----END CERTIFICATE-----
Generated at Fri Feb 27 01:56:25 2026 by rpki-client