Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Netiface/1/323630323a663931353a3a2f34302d3438203d3e203531333936.roa
File:                     323630323a663931353a3a2f34302d3438203d3e203531333936.roa (raw, json)
Hash identifier:          WmqVj8V6xVzpXCNqCshc/Fq7eN/xSGbAcNt3LlN+mVw=
Subject key identifier:   04:68:FF:BD:44:1F:FD:E5:D2:A8:48:9E:B8:C0:DC:C3:3D:1E:1C:46
Certificate issuer:       /CN=2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8
Certificate serial:       056404F91ABB9DE99F19EE48131239769F4D27C5
Authority key identifier: FB:F7:8E:5D:A5:B5:D6:AD:4E:2F:93:26:34:20:6B:13:3C:CB:FD:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer
Subject info access:      rsync://repo.rpki.space/repo/Netiface/1/323630323a663931353a3a2f34302d3438203d3e203531333936.roa
Signing time:             Wed 06 May 2026 16:20:04 +0000
ROA not before:           Wed 06 May 2026 16:15:04 +0000
ROA not after:            Wed 05 May 2027 16:20:04 +0000
asID:                     51396
IP address blocks:        2602:f915::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.crl
                          rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 10:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:64:04:f9:1a:bb:9d:e9:9f:19:ee:48:13:12:39:76:9f:4d:27:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8
        Validity
            Not Before: May  6 16:15:04 2026 GMT
            Not After : May  5 16:20:04 2027 GMT
        Subject: CN=0468FFBD441FFDE5D2A8489EB8C0DCC33D1E1C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5d:93:ab:b8:10:b7:e6:b3:4c:5c:a4:bd:4d:
                    8c:0c:f5:18:81:16:bf:11:ba:6b:8f:91:76:4a:75:
                    6c:40:c4:e5:e3:e9:5a:69:3e:6f:f4:16:c8:f4:13:
                    7d:a7:20:76:bc:c5:a0:0c:b3:62:39:ed:b0:09:05:
                    ff:d7:21:fd:18:3f:15:f9:42:4a:7e:19:d9:f5:8f:
                    3c:e3:e0:4f:26:be:58:76:aa:b4:de:98:7f:d2:57:
                    19:c3:6e:1e:1f:8c:06:88:cc:cb:da:cc:09:db:d2:
                    f0:f9:a6:62:53:4a:2a:43:35:28:1b:26:61:4a:bc:
                    b3:c4:22:c3:29:70:a8:85:4e:81:9e:08:3d:59:74:
                    7e:8c:d1:7e:46:be:12:ba:2a:48:19:90:d3:de:55:
                    a9:05:5b:85:37:29:97:68:5f:9a:e8:4c:d6:9d:05:
                    61:df:00:c5:dc:ad:b7:8b:8f:06:a8:d4:52:f5:c8:
                    73:f0:a2:88:07:b9:ba:32:b1:de:02:d5:c0:54:69:
                    90:cf:2a:ee:26:9b:d9:ba:5e:de:4b:b2:c1:12:cf:
                    bc:3b:97:8b:5b:fc:31:04:e2:32:d9:94:33:83:ce:
                    d2:b8:c9:65:5b:25:6b:7a:8a:9f:12:62:7c:ed:0b:
                    1d:97:98:2c:f8:63:c0:77:bb:f5:61:69:7c:ee:2a:
                    b4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:68:FF:BD:44:1F:FD:E5:D2:A8:48:9E:B8:C0:DC:C3:3D:1E:1C:46
            X509v3 Authority Key Identifier:
                keyid:FB:F7:8E:5D:A5:B5:D6:AD:4E:2F:93:26:34:20:6B:13:3C:CB:FD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/1/323630323a663931353a3a2f34302d3438203d3e203531333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f915::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:07:00:9d:3a:7f:f8:b5:7d:bc:e4:6a:d8:0f:ea:91:8e:b9:
         89:93:cc:af:41:45:fb:1b:8c:97:ed:35:b7:0a:16:48:11:02:
         4d:f8:1e:81:2d:03:82:29:da:ca:19:a3:88:a5:59:52:2e:16:
         fb:b5:2e:3a:0b:6a:bd:36:be:c5:e1:48:88:93:fc:44:cf:94:
         c4:c0:5f:f1:f9:b5:98:ff:6f:bc:95:c3:ea:e9:6b:44:d7:98:
         43:cc:16:1a:07:75:96:58:8a:66:7b:23:c9:51:48:df:4a:d0:
         78:96:b5:1a:95:ad:76:76:04:96:99:45:cb:5e:c2:54:25:1f:
         59:c7:42:28:77:a8:12:43:a9:cb:80:b2:32:57:91:f8:0c:d8:
         38:a4:1f:39:21:eb:16:12:28:24:04:5e:21:e3:c7:85:30:96:
         6b:9b:c6:bf:1d:f8:50:39:57:8a:d8:5f:f2:d2:26:7d:71:5e:
         7f:10:85:f3:55:6d:18:50:9b:be:a7:58:30:0d:cf:a1:ad:7d:
         43:f4:2c:53:6a:26:6c:5e:42:4c:cd:6f:0f:ff:91:84:30:a3:
         f6:7d:60:6a:b1:4d:00:1e:1d:00:fa:0e:bf:ed:c8:fe:c2:a3:
         bc:58:8a:2d:cd:9f:16:da:9e:26:00:57:f4:e0:2d:31:ed:1a:
         f7:ea:36:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:27 2026 by rpki-client