Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3636313a3a2f34382d3438203d3e203630393030.roa
File:                     323630323a663530633a3636313a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          DH0+n+H9rnB0z+bU6/qvKuQ6i58cyqFXPoxyBJNo8sc=
Subject key identifier:   58:4E:A2:A8:E6:29:4E:A6:0E:7A:F2:90:1A:C1:57:9D:08:59:EC:44
Certificate issuer:       /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Certificate serial:       3DE56707C20A2734E9183F7A46A5D557A6EE0239
Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3636313a3a2f34382d3438203d3e203630393030.roa
Signing time:             Sat 16 May 2026 22:16:10 +0000
ROA not before:           Sat 16 May 2026 22:11:10 +0000
ROA not after:            Sat 15 May 2027 22:16:10 +0000
asID:                     60900
IP address blocks:        2602:f50c:661::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 11:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e5:67:07:c2:0a:27:34:e9:18:3f:7a:46:a5:d5:57:a6:ee:02:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
        Validity
            Not Before: May 16 22:11:10 2026 GMT
            Not After : May 15 22:16:10 2027 GMT
        Subject: CN=584EA2A8E6294EA60E7AF2901AC1579D0859EC44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:01:be:f8:55:67:10:6a:1d:72:42:ab:2f:9e:
                    cf:8d:f2:fc:cf:76:f2:50:9a:61:36:8a:f9:41:58:
                    10:2b:e0:ab:37:e1:7b:0a:cf:91:00:13:41:32:2d:
                    da:b1:4c:66:79:8d:55:ac:54:1d:e9:d6:a0:59:94:
                    3e:8c:27:fb:2c:29:67:5d:7b:4b:6f:bf:d6:cd:23:
                    1e:ae:4d:ba:48:c2:83:9c:b2:f6:0e:59:1d:e4:8d:
                    83:5b:0a:78:5f:f5:cf:64:86:dc:1e:59:99:9d:8d:
                    3d:e2:fa:d5:63:a6:e6:04:6f:fc:5d:ac:1c:d1:cb:
                    99:9a:8d:7c:ae:bf:55:db:ff:0a:ca:bc:2a:28:12:
                    c7:f7:27:b7:1c:41:53:a1:e9:05:7b:64:b0:6f:d1:
                    67:8b:61:20:3f:5a:3f:f3:d9:ce:42:90:7a:16:82:
                    b7:4c:b2:53:e6:24:91:25:ba:30:1a:3b:46:e0:9d:
                    ec:46:94:f3:90:79:54:9e:50:4c:3b:f7:ce:7f:f1:
                    2d:4a:df:16:4e:0f:22:2a:6c:66:b5:85:a9:6e:ba:
                    f7:a9:cb:92:25:f2:b0:a0:88:65:c6:a6:c8:a5:f9:
                    b5:54:ed:85:59:50:4f:14:19:83:c4:b5:87:08:47:
                    32:19:30:fe:18:27:cb:6a:af:91:00:bf:9b:a0:8c:
                    ac:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4E:A2:A8:E6:29:4E:A6:0E:7A:F2:90:1A:C1:57:9D:08:59:EC:44
            X509v3 Authority Key Identifier:
                keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3636313a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f50c:661::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:8a:f2:74:25:56:39:c7:51:c8:c4:0b:b4:f5:b9:a0:55:a8:
         b1:b0:5c:af:4d:38:88:be:e3:2e:7e:7e:8d:35:a4:f3:73:7d:
         ca:d9:be:fa:0a:c2:ff:3d:72:1c:50:2f:25:dd:41:a0:86:19:
         02:8f:4d:eb:a9:4b:83:0e:2c:24:86:d1:10:e2:f9:ee:d4:6b:
         db:6e:b9:16:34:c3:77:2a:2d:d3:63:3d:6e:13:31:4d:b3:80:
         aa:77:0b:c3:7b:98:7b:8c:a7:50:48:79:0c:47:9c:ad:b9:e0:
         2e:8b:ce:49:0e:c1:24:9a:ec:f0:f4:61:8a:16:5b:07:f0:3e:
         7b:0d:58:2e:fc:f6:70:b0:17:e3:d0:ad:3f:cf:db:4c:08:98:
         f9:da:d0:24:56:7d:63:76:9b:1b:a7:3a:a0:b6:63:fe:04:0d:
         cf:67:19:1e:a5:4a:ea:5d:a9:d9:5b:61:61:6d:bd:31:db:ce:
         a8:3b:73:d3:28:23:14:7c:94:04:a9:cf:63:26:3d:3b:51:fc:
         37:eb:a5:4e:8e:09:4e:81:2a:dc:3e:31:9f:70:4f:b9:3c:de:
         49:db:4e:08:76:fb:21:39:4c:e4:ac:5c:c5:1b:9c:92:35:14:
         a2:99:23:10:89:5a:14:88:fd:e0:bd:0f:8d:eb:53:7f:bd:d0:
         86:51:e0:f3
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUPeVnB8IKJzTpGD96RqXVV6buAjkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmVjZmRmZGJkYjU2ZDNmYmZhMjYxYmIyODdiZjBjNDE4
NTU3MmQwYzIxYjY0ZTFmNzQwHhcNMjYwNTE2MjIxMTEwWhcNMjcwNTE1MjIxNjEw
WjAzMTEwLwYDVQQDEyg1ODRFQTJBOEU2Mjk0RUE2MEU3QUYyOTAxQUMxNTc5RDA4
NTlFQzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAG++FVnEGod
ckKrL57PjfL8z3byUJphNor5QVgQK+CrN+F7Cs+RABNBMi3asUxmeY1VrFQd6dag
WZQ+jCf7LClnXXtLb7/WzSMerk26SMKDnLL2Dlkd5I2DWwp4X/XPZIbcHlmZnY09
4vrVY6bmBG/8Xawc0cuZmo18rr9V2/8KyrwqKBLH9ye3HEFToekFe2Swb9Fni2Eg
P1o/89nOQpB6FoK3TLJT5iSRJbowGjtG4J3sRpTzkHlUnlBMO/fOf/EtSt8WTg8i
KmxmtYWpbrr3qcuSJfKwoIhlxqbIpfm1VO2FWVBPFBmDxLWHCEcyGTD+GCfLaq+R
AL+boIysCwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFFhOoqjmKU6mDnrykBrBV50I
WexEMB8GA1UdIwQYMBaAFHW/F2dWTXxExb05X2pqIZDS3dcIMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2NhMmIxMmFmYzQyODQzZGJhZTRiMDVjZjM2MGQ5NTJkLzAv
NzVCRjE3Njc1NjREN0M0NEM1QkQzOTVGNkE2QTIxOTBEMkRERDcwOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDll
ZjFiNGUyL2M0MTU2NDRhLWE1YTQtNDg0OS1hYmE5LTE5ODA4NmZkMTU0ZC9mZWNm
ZGZkYmRiNTZkM2ZiZmEyNjFiYjI4N2JmMGM0MTg1NTcyZDBjMjFiNjRlMWY3NC5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jYTJiMTJhZmM0Mjg0M2RiYWU0YjA1
Y2YzNjBkOTUyZC8wLzMyMzYzMDMyM2E2NjM1MzA2MzNhMzYzNjMxM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzYzMDM5MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC9QwGYTANBgkq
hkiG9w0BAQsFAAOCAQEAv4rydCVWOcdRyMQLtPW5oFWosbBcr004iL7jLn5+jTWk
83N9ytm++grC/z1yHFAvJd1BoIYZAo9N66lLgw4sJIbREOL57tRr2265FjTDdyot
02M9bhMxTbOAqncLw3uYe4ynUEh5DEecrbngLovOSQ7BJJrs8PRhihZbB/A+ew1Y
Lvz2cLAX49CtP8/bTAiY+drQJFZ9Y3abG6c6oLZj/gQNz2cZHqVK6l2p2VthYW29
MdvOqDtz0ygjFHyUBKnPYyY9O1H8N+ulTo4JToEq3D4xn3BPuTzeSdtOCHb7ITlM
5KxcxRuckjUUopkjEIlaFIj94L0PjetTf73QhlHg8w==
-----END CERTIFICATE-----
Generated at Thu May 28 15:15:27 2026 by rpki-client