Route Origin Authorization

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/323630323a666461643a3a2f34302d3438203d3e2037303130.roa
File:                     323630323a666461643a3a2f34302d3438203d3e2037303130.roa (raw, json)
Hash identifier:          RVBdGUMed0yeJwGesBxpnUhuP70xtA9w4HInEAe7IKI=
Subject key identifier:   A2:A7:B3:D5:95:AD:86:01:28:F1:47:01:CD:45:78:11:B0:EB:B5:89
Certificate issuer:       /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Certificate serial:       06753EC66499C6839FCFAF600E5A1CDB721539B5
Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/2/323630323a666461643a3a2f34302d3438203d3e2037303130.roa
Signing time:             Fri 26 Jun 2026 21:07:44 +0000
ROA not before:           Fri 26 Jun 2026 21:02:44 +0000
ROA not after:            Fri 25 Jun 2027 21:07:44 +0000
asID:                     7010
IP address blocks:        2602:fdad::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
                          rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Jul 2026 20:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:75:3e:c6:64:99:c6:83:9f:cf:af:60:0e:5a:1c:db:72:15:39:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
        Validity
            Not Before: Jun 26 21:02:44 2026 GMT
            Not After : Jun 25 21:07:44 2027 GMT
        Subject: CN=A2A7B3D595AD860128F14701CD457811B0EBB589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b9:78:14:8e:bb:c8:84:cc:8a:55:51:a7:55:
                    77:13:64:f8:b6:02:23:a0:6a:75:ce:ba:69:56:52:
                    d0:91:93:f6:c2:ce:b7:8a:e0:b3:05:b1:ac:57:83:
                    3b:a7:b6:1a:89:30:2b:1d:ef:ad:d4:46:3b:36:d6:
                    1b:7a:a0:82:2e:70:14:f6:28:7b:8f:64:a8:1d:40:
                    4e:94:21:2e:a5:72:cf:4e:9d:d1:39:4d:fa:2c:0d:
                    2e:07:50:5b:b9:d2:1e:4f:77:a3:12:b4:9f:5d:0a:
                    a5:f5:2a:69:8b:a3:4d:bf:48:3c:c3:ab:f5:93:fb:
                    c4:ab:64:ae:3b:35:a5:4f:71:78:b8:ba:01:13:ae:
                    86:d1:e1:9a:96:d5:75:6c:f5:b8:b0:92:39:18:bb:
                    cb:0c:07:01:89:e4:d8:3c:20:c6:3c:7a:ea:36:74:
                    9f:1c:38:08:08:8d:13:96:f9:07:df:a4:6a:3b:bd:
                    ee:6d:c4:c4:95:5f:11:da:5c:3e:60:ed:b9:0f:0a:
                    a9:23:16:68:81:9d:2b:7f:9d:4a:cf:ed:af:f2:cd:
                    85:f7:9e:08:3a:8e:3d:f9:b2:11:16:6f:09:4e:c6:
                    1f:bd:50:5f:5c:c8:26:da:99:14:fa:e4:a6:ee:c3:
                    8f:82:10:f5:2f:0a:6f:ab:ae:11:a0:ba:83:bb:91:
                    6f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A7:B3:D5:95:AD:86:01:28:F1:47:01:CD:45:78:11:B0:EB:B5:89
            X509v3 Authority Key Identifier:
                keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/323630323a666461643a3a2f34302d3438203d3e2037303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdad::/40

    Signature Algorithm: sha256WithRSAEncryption
         92:80:0f:02:14:10:3e:59:5f:d6:d7:9f:9c:35:39:cc:37:04:
         18:d1:c0:01:07:3c:f2:1a:16:06:0c:ea:2d:b9:a3:55:66:d3:
         1a:ae:4c:7b:3d:2a:03:a4:31:71:cc:dd:12:95:1f:8d:a5:44:
         cc:6d:d8:01:5e:01:ad:99:f3:3a:29:34:38:8d:ed:d7:65:2f:
         3e:b8:07:bd:b2:ef:a6:64:f6:80:7e:4e:72:44:c4:85:f0:d1:
         15:02:23:61:e6:22:44:5c:ca:51:d6:52:ff:af:55:da:f4:42:
         35:f5:52:3b:5e:1b:80:76:ff:35:aa:b9:8d:f8:86:a7:f9:6c:
         42:64:c6:55:d8:62:3b:ab:30:9b:7e:f5:80:3b:94:d1:ee:f5:
         47:91:dc:65:c5:3b:c9:17:ab:f4:41:83:18:8c:d5:0a:db:84:
         1b:8b:1f:48:60:2a:e6:8e:d1:67:54:42:f0:99:cd:03:e7:19:
         43:6c:ea:77:c2:79:66:1e:60:b0:fd:ef:05:40:60:b3:ec:dd:
         b7:68:40:73:01:49:e0:b6:72:4f:17:84:a0:46:d4:41:56:cb:
         8d:d1:89:70:cf:f0:09:f0:c5:a9:a8:51:4a:66:c1:ba:c0:7c:
         ec:29:6d:e7:1d:9d:89:4b:31:8b:02:0e:ed:eb:da:cc:21:9c:
         24:67:6c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:27:24 2026 by rpki-client