Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3235303a3a2f34382d3438203d3e203630393030.roa
File:                     323630323a663530633a3235303a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          /2Vv4/M467VkkSEtrhi+2tDOA7BpgHYnhy+n/kBOMyE=
Subject key identifier:   0D:34:8C:6A:22:4A:66:B4:BD:6C:82:3D:79:D3:B5:6F:9D:FD:BD:D2
Certificate issuer:       /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Certificate serial:       6BE4AE18259F52FD7437CCAA9A48B010EBD574B0
Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3235303a3a2f34382d3438203d3e203630393030.roa
Signing time:             Sun 26 Apr 2026 15:09:18 +0000
ROA not before:           Sun 26 Apr 2026 15:04:18 +0000
ROA not after:            Sun 25 Apr 2027 15:09:18 +0000
asID:                     60900
IP address blocks:        2602:f50c:250::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 19:11:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e4:ae:18:25:9f:52:fd:74:37:cc:aa:9a:48:b0:10:eb:d5:74:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
        Validity
            Not Before: Apr 26 15:04:18 2026 GMT
            Not After : Apr 25 15:09:18 2027 GMT
        Subject: CN=0D348C6A224A66B4BD6C823D79D3B56F9DFDBDD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d9:88:2b:70:c0:ad:9b:2f:17:2b:2d:ef:40:
                    47:85:24:ad:33:70:a4:d1:02:29:4f:8d:1f:67:f8:
                    1b:bb:83:56:92:e8:04:6d:c4:05:4c:98:ee:32:d8:
                    c1:c9:35:f8:03:9c:68:2e:f6:fc:5d:ba:1a:4a:89:
                    96:c2:3c:35:18:25:52:85:3b:5d:9f:9d:a7:3d:d8:
                    38:cc:6f:25:65:72:21:57:cb:88:92:32:ca:6d:9c:
                    0f:b9:47:7d:94:d4:de:16:bc:67:a3:68:b9:97:e0:
                    d0:44:99:54:c6:8c:a6:a1:7f:9e:aa:05:86:10:1d:
                    57:a9:ca:ec:4a:9d:bb:ce:68:85:a7:11:8d:0c:c4:
                    58:93:66:98:73:5d:4d:94:b0:ec:67:05:60:2c:27:
                    7e:93:9e:03:06:25:5b:63:86:b9:3f:57:47:c6:fe:
                    c2:13:3d:b9:f7:e5:16:db:5a:bc:2f:a3:02:4a:60:
                    cd:1c:f5:dd:45:78:4e:96:4a:53:dc:dc:eb:fd:4e:
                    fd:bf:95:98:e6:25:11:9c:8d:ed:1e:4e:25:7b:59:
                    cb:3d:98:ce:77:d6:61:f2:36:7e:37:a0:5a:dc:e7:
                    2b:db:46:e2:0f:3e:ce:9b:10:bd:c1:72:4e:f0:25:
                    ba:2c:fb:b1:18:00:1f:72:3a:81:e2:94:36:a7:b9:
                    d9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:34:8C:6A:22:4A:66:B4:BD:6C:82:3D:79:D3:B5:6F:9D:FD:BD:D2
            X509v3 Authority Key Identifier:
                keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3235303a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f50c:250::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:16:5d:74:0e:64:55:0b:44:20:90:4b:c5:6b:98:5e:d7:dc:
         71:3e:f2:ca:35:75:89:c0:4f:ab:d2:3b:8d:8b:32:73:04:7d:
         46:0c:f3:2a:0f:ff:4a:1d:1e:31:27:56:33:6a:f8:fc:7c:6a:
         8a:83:17:4b:73:7d:bb:23:bb:d9:51:5d:10:b2:49:b9:ff:57:
         e4:20:22:69:29:64:a2:52:19:10:91:30:f2:36:05:e5:9b:45:
         5d:c7:81:b3:75:84:d8:60:46:5f:08:1c:d9:db:d4:c1:3d:1a:
         4b:53:5a:06:64:c4:63:ac:0f:14:52:b8:25:50:60:85:a1:92:
         69:47:f5:4f:db:cf:0a:77:50:90:37:7c:43:e3:8e:0d:5e:a7:
         d0:34:85:27:f7:62:ab:52:d4:15:da:95:9a:cf:52:2c:49:9d:
         7f:06:e9:22:7c:8c:ff:f6:39:21:8b:06:36:11:51:c3:b1:b6:
         7a:2b:18:2c:69:17:70:56:e2:81:b5:08:1d:39:b0:19:16:2c:
         40:77:55:84:04:03:32:68:da:44:f4:10:fe:ac:fd:e9:e2:f5:
         4f:09:be:59:2e:6f:09:6d:af:1a:7c:7a:c1:93:4f:44:77:fb:
         e5:12:ea:bd:a5:f3:1d:3d:31:99:48:44:61:11:d0:d5:de:8f:
         c1:90:7f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 22:09:22 2026 by rpki-client