Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3637313a3a2f34382d3438203d3e203630393030.roa
File:                     323630323a663530633a3637313a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          Hfr3pv/sFI910pkRvJ2xlxqpn+jcoOPTRWrEbuAOY/s=
Subject key identifier:   72:02:8C:2D:E8:51:EC:08:57:09:AA:05:95:E5:DA:76:32:53:A6:CA
Certificate issuer:       /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Certificate serial:       02B2C72D93F9797B1D3571CF74CD53E7D01E76D1
Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3637313a3a2f34382d3438203d3e203630393030.roa
Signing time:             Mon 07 Sep 2026 17:46:12 +0000
ROA not before:           Mon 07 Sep 2026 17:41:12 +0000
ROA not after:            Mon 06 Sep 2027 17:46:12 +0000
asID:                     60900
IP address blocks:        2602:f50c:671::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 20:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b2:c7:2d:93:f9:79:7b:1d:35:71:cf:74:cd:53:e7:d0:1e:76:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
        Validity
            Not Before: Sep  7 17:41:12 2026 GMT
            Not After : Sep  6 17:46:12 2027 GMT
        Subject: CN=72028C2DE851EC085709AA0595E5DA763253A6CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:8c:fc:9b:1e:6b:46:d7:48:1d:25:a8:7a:
                    ff:a5:39:df:7e:18:8a:a1:7c:15:fd:db:44:3a:35:
                    7b:e3:45:62:33:32:78:f2:83:27:bd:f6:8f:1e:e4:
                    09:8a:92:f2:26:07:56:0d:ea:c7:f8:45:51:60:bb:
                    98:e1:b6:82:30:79:d7:a0:88:a0:5d:4f:99:b4:b8:
                    b0:56:31:8d:14:0a:06:5b:f9:ff:28:80:2b:e8:e6:
                    21:54:dc:e6:d6:87:e3:0e:ed:65:6b:f1:57:66:77:
                    75:0f:86:60:d5:77:00:0c:36:dc:cb:df:22:2a:39:
                    3e:c6:7d:b0:7a:6a:17:2f:ab:4d:52:08:67:cc:ef:
                    62:f4:88:d0:61:fb:8a:f7:1d:55:38:61:22:5a:fa:
                    ae:a3:09:c1:d5:3b:73:ff:9c:6c:6a:66:69:42:8a:
                    5d:3d:ab:6c:d8:71:56:f0:63:55:ea:2a:79:ba:3a:
                    7f:f7:4b:de:94:63:c8:c6:d8:25:d9:f4:94:c2:d1:
                    a7:a3:2d:fc:29:de:cc:d6:af:57:13:c0:d9:d1:c5:
                    da:c6:5b:f4:8d:e1:70:ca:23:ec:4e:0d:c6:ef:b4:
                    54:3f:aa:8a:c4:17:2f:11:ac:68:cc:dc:c6:e2:73:
                    c0:ab:d2:ea:57:d3:ed:78:44:fc:3f:f7:5c:a5:06:
                    be:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:02:8C:2D:E8:51:EC:08:57:09:AA:05:95:E5:DA:76:32:53:A6:CA
            X509v3 Authority Key Identifier:
                keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3637313a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f50c:671::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:4b:72:cf:a6:24:68:e6:b4:1f:c6:37:b2:9c:19:b0:c6:7b:
         e7:7e:22:6c:aa:fa:9b:65:30:ec:5a:de:1c:8b:1e:b7:b1:d7:
         04:13:d6:e9:27:ed:d0:c7:9b:53:17:2f:f6:ce:7a:30:cb:b1:
         28:0a:11:f8:76:aa:c0:e0:ac:7a:4b:e8:d3:1e:8c:7b:f9:35:
         2f:bd:54:07:42:ae:93:0b:e1:6c:62:01:f9:91:fa:27:73:a0:
         c9:c0:86:bd:df:f9:7c:fd:c3:1a:34:cd:0f:b0:32:a0:1c:c7:
         44:0f:83:79:40:1c:94:a4:7f:3b:dd:3f:98:9a:2d:d4:9c:2f:
         98:68:88:99:95:83:90:cd:af:42:49:b7:33:ec:39:79:37:a4:
         64:ee:df:7f:b1:02:ea:b4:51:8b:5f:fe:42:b4:47:a7:c5:7d:
         9a:76:d1:57:35:e3:59:d3:10:d8:85:73:4c:68:25:35:96:fb:
         d0:88:99:ed:aa:57:3c:af:5e:dc:de:47:f5:76:d4:5c:ca:8c:
         d0:a3:55:7a:24:fc:8e:b1:46:9e:c5:98:a2:03:23:56:4b:9d:
         91:b9:d9:7f:13:f9:e3:9c:10:71:fe:7a:78:63:a4:e1:5d:bc:
         e5:9d:31:bb:37:69:ca:d1:f9:e8:e3:7c:e1:ce:49:01:d9:3e:
         eb:e3:8e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:01:39 2026 by rpki-client