Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/323630323a663465333a62623a3a2f34382d3438203d3e203332303432.roa
File:                     323630323a663465333a62623a3a2f34382d3438203d3e203332303432.roa (raw, json)
Hash identifier:          lMm22M0bnMd4Gd/agbIZvffIOFjyxZfUqm+d2hzkqQ8=
Subject key identifier:   C3:5C:04:98:AE:31:76:6F:B5:E6:01:83:A3:14:62:E6:01:A6:FC:E4
Certificate issuer:       /CN=3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288
Certificate serial:       12247E7F7BEAF409BB81BBE9973C89E59C06906E
Authority key identifier: A8:8F:B4:DD:1C:10:02:2B:6E:FD:B3:A5:27:36:61:A4:1E:27:52:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/323630323a663465333a62623a3a2f34382d3438203d3e203332303432.roa
Signing time:             Thu 16 Jul 2026 20:50:00 +0000
ROA not before:           Thu 16 Jul 2026 20:45:00 +0000
ROA not after:            Thu 15 Jul 2027 20:50:00 +0000
asID:                     32042
IP address blocks:        2602:f4e3:bb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/A88FB4DD1C10022B6EFDB3A5273661A41E275233.crl
                          rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/A88FB4DD1C10022B6EFDB3A5273661A41E275233.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 05:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:24:7e:7f:7b:ea:f4:09:bb:81:bb:e9:97:3c:89:e5:9c:06:90:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288
        Validity
            Not Before: Jul 16 20:45:00 2026 GMT
            Not After : Jul 15 20:50:00 2027 GMT
        Subject: CN=C35C0498AE31766FB5E60183A31462E601A6FCE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:7f:f8:e5:fc:7a:89:7e:59:e8:4e:13:f3:
                    00:58:70:a8:3f:df:eb:b8:e5:08:0c:be:70:a7:7c:
                    15:20:74:af:7d:1b:88:4f:61:8a:73:c8:56:6a:ae:
                    16:a6:63:f8:b2:23:6a:3f:5f:a6:24:f3:32:f7:41:
                    09:20:d8:6e:d2:94:35:82:81:9c:c5:ed:6e:f5:2b:
                    2a:ae:5a:1b:b8:8e:f0:45:22:a0:68:52:b1:21:16:
                    26:53:cd:3f:2f:19:e0:c7:6e:78:3a:d6:e9:6c:41:
                    23:8b:05:b8:f9:1e:8c:47:5c:68:c1:31:64:93:4f:
                    4a:d3:f3:a0:72:0f:3f:d6:d4:01:6d:bf:52:63:f2:
                    a8:e0:4c:a3:a1:07:21:14:1c:b6:1f:2c:b9:c0:9e:
                    ae:25:86:a3:6b:a3:63:69:38:92:bc:dc:9c:c0:35:
                    f3:35:ca:f3:a7:1a:1f:15:d0:51:c2:23:fb:ea:73:
                    89:63:58:d3:5f:b8:63:25:3f:06:16:77:70:d8:2c:
                    16:c6:69:37:b0:75:74:be:52:df:4c:67:cb:c9:f3:
                    6b:c9:6b:a3:83:b1:31:f1:52:a8:6b:39:24:7b:3d:
                    56:6d:02:76:97:a3:f8:3e:e1:ea:3f:f7:72:af:05:
                    b3:32:e2:18:4a:2d:14:14:fb:2c:d5:81:93:b3:00:
                    f8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5C:04:98:AE:31:76:6F:B5:E6:01:83:A3:14:62:E6:01:A6:FC:E4
            X509v3 Authority Key Identifier:
                keyid:A8:8F:B4:DD:1C:10:02:2B:6E:FD:B3:A5:27:36:61:A4:1E:27:52:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/A88FB4DD1C10022B6EFDB3A5273661A41E275233.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/323630323a663465333a62623a3a2f34382d3438203d3e203332303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4e3:bb::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:7c:b5:73:66:a7:96:ed:96:81:b9:4d:99:10:8a:60:47:86:
         b2:72:28:54:03:89:9b:b8:2e:3b:e4:a8:94:25:92:19:11:49:
         11:27:d7:c9:2c:c5:0e:bc:8c:6e:87:0a:a6:39:ff:39:04:df:
         41:d3:83:b3:a8:db:cf:99:f4:5b:c7:a0:4c:08:23:c6:62:ee:
         ac:2c:14:6a:51:a8:c9:9b:05:d4:b9:01:10:f1:44:9b:b5:4d:
         e8:8e:7e:56:4a:94:cd:39:b1:64:cb:d5:f2:0c:c2:c7:db:be:
         6d:40:e3:bf:97:d9:3b:5d:13:88:35:ee:9d:df:e8:86:e4:ba:
         f2:8b:03:69:21:ce:73:d8:b9:68:64:0f:07:bb:2c:f3:2e:f3:
         7f:fd:7d:14:71:e4:5d:72:d0:dc:83:c0:9c:5b:5e:08:c7:a2:
         e3:33:8d:ab:cf:d5:8d:fb:b0:0d:25:0b:29:63:86:53:81:39:
         ef:81:d4:dd:ba:c7:b2:6c:6a:3e:a1:fc:eb:66:5f:f3:e2:8b:
         ed:bf:0a:a5:4a:92:5d:fc:8a:a6:c1:7c:5d:0a:86:fe:29:6f:
         6e:ce:84:42:67:45:06:ce:82:54:90:24:7d:92:d1:d5:60:29:
         e3:81:82:a3:cb:32:58:51:b3:d9:9c:d4:6d:c0:0b:bf:86:30:
         70:94:90:9c
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUEiR+f3vq9Am7gbvplzyJ5ZwGkG4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyM2MxN2E3NmNjNGM3YTlhZTU4MmUxZDllMDU3N2RkNmZi
ZDI3ZDU5NTVlYTA5NDcyODgwHhcNMjYwNzE2MjA0NTAwWhcNMjcwNzE1MjA1MDAw
WjAzMTEwLwYDVQQDEyhDMzVDMDQ5OEFFMzE3NjZGQjVFNjAxODNBMzE0NjJFNjAx
QTZGQ0U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyN/+OX8eol+
WehOE/MAWHCoP9/ruOUIDL5wp3wVIHSvfRuIT2GKc8hWaq4WpmP4siNqP1+mJPMy
90EJINhu0pQ1goGcxe1u9SsqrlobuI7wRSKgaFKxIRYmU80/Lxngx254OtbpbEEj
iwW4+R6MR1xowTFkk09K0/Ogcg8/1tQBbb9SY/Ko4EyjoQchFBy2Hyy5wJ6uJYaj
a6NjaTiSvNycwDXzNcrzpxofFdBRwiP76nOJY1jTX7hjJT8GFndw2CwWxmk3sHV0
vlLfTGfLyfNryWujg7Ex8VKoazkkez1WbQJ2l6P4PuHqP/dyrwWzMuIYSi0UFPss
1YGTswD4CwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFMNcBJiuMXZvteYBg6MUYuYB
pvzkMB8GA1UdIwQYMBaAFKiPtN0cEAIrbv2zpSc2YaQeJ1IzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2EzNDdjMDRmYWE2MzQyM2JhYzRmYjExYjc3NTliNjk2LzAv
QTg4RkI0REQxQzEwMDIyQjZFRkRCM0E1MjczNjYxQTQxRTI3NTIzMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDll
ZjFiNGUyL2EyY2RiMzE5LWFlNWQtNGQ0NS04NzU0LTI5ZjRiYzMxYzQ2ZC8zYzE3
YTc2Y2M0YzdhOWFlNTgyZTFkOWUwNTc3ZGQ2ZmJkMjdkNTk1NWVhMDk0NzI4OC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9hMzQ3YzA0ZmFhNjM0MjNiYWM0ZmIx
MWI3NzU5YjY5Ni8wLzMyMzYzMDMyM2E2NjM0NjUzMzNhNjI2MjNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMzMzIzMDM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvTjALswDQYJKoZI
hvcNAQELBQADggEBAGp8tXNmp5btloG5TZkQimBHhrJyKFQDiZu4LjvkqJQlkhkR
SREn18ksxQ68jG6HCqY5/zkE30HTg7Oo28+Z9FvHoEwII8Zi7qwsFGpRqMmbBdS5
ARDxRJu1TeiOflZKlM05sWTL1fIMwsfbvm1A47+X2TtdE4g17p3f6IbkuvKLA2kh
znPYuWhkDwe7LPMu83/9fRRx5F1y0NyDwJxbXgjHouMzjavP1Y37sA0lCyljhlOB
Oe+B1N26x7Jsaj6h/OtmX/Pii+2/CqVKkl38iqbBfF0Khv4pb27OhEJnRQbOglSQ
JH2S0dVgKeOBgqPLMlhRs9mc1G3AC7+GMHCUkJw=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:10:13 2026 by rpki-client