Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3130303a3a2f34302d3430203d3e20343031363832.roa
File:                     323630343a6361303a3130303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier:          TZ2JCPwsvmIJjlzDI1t5I/7/KQGM/H8wVOsQEhmXClc=
Subject key identifier:   A1:2A:AD:C2:B3:7F:E4:8E:12:05:BB:60:5D:FC:1E:EF:BC:20:4D:05
Certificate issuer:       /CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
Certificate serial:       0F1F62AA141C6DBF6CE15E3458EA0B3E2E6FAA47
Authority key identifier: 7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3130303a3a2f34302d3430203d3e20343031363832.roa
Signing time:             Fri 01 May 2026 21:21:21 +0000
ROA not before:           Fri 01 May 2026 21:16:21 +0000
ROA not after:            Fri 30 Apr 2027 21:21:21 +0000
asID:                     401682
IP address blocks:        2604:ca0:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 01:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1f:62:aa:14:1c:6d:bf:6c:e1:5e:34:58:ea:0b:3e:2e:6f:aa:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
        Validity
            Not Before: May  1 21:16:21 2026 GMT
            Not After : Apr 30 21:21:21 2027 GMT
        Subject: CN=A12AADC2B37FE48E1205BB605DFC1EEFBC204D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:28:36:64:2e:8f:04:e0:02:14:48:44:2a:51:
                    ff:96:3f:3d:8b:9d:38:10:a0:0e:f6:68:d5:03:a8:
                    ec:7a:f7:5f:67:ea:c8:69:8b:b3:30:56:6c:58:12:
                    19:3b:13:40:b9:56:39:64:cf:07:3d:35:1a:88:60:
                    43:ef:c8:39:af:5e:74:f7:6d:0c:88:dc:92:ef:cf:
                    00:ff:07:2e:4d:18:93:24:0b:e4:36:e6:44:d6:66:
                    73:f9:fc:72:4e:65:0d:1d:91:38:b3:ae:0b:95:e8:
                    77:04:93:53:8b:17:f0:93:4c:0b:4f:64:bb:3d:70:
                    cd:0d:90:c1:32:90:6a:33:2f:54:09:42:43:62:52:
                    b3:99:25:9a:e8:41:2f:64:6b:48:7a:98:8d:48:16:
                    09:67:59:73:94:4c:8e:b9:c1:ba:03:f2:c0:b7:07:
                    98:1e:d2:53:ed:15:77:ad:30:a2:7b:af:eb:a8:fe:
                    1b:a6:9f:80:f1:e4:c5:50:24:4e:97:73:0c:14:a3:
                    f4:ed:3b:27:d2:5b:d3:89:ad:ae:4b:b1:d5:5d:1d:
                    30:6c:57:b3:9b:3e:ec:54:9b:07:d9:38:3e:9e:1c:
                    e2:a7:01:3e:09:f1:89:5b:35:bb:ec:7a:bc:11:8b:
                    21:1a:77:f6:96:e3:d7:d0:70:ad:c2:57:ef:27:eb:
                    c6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2A:AD:C2:B3:7F:E4:8E:12:05:BB:60:5D:FC:1E:EF:BC:20:4D:05
            X509v3 Authority Key Identifier:
                keyid:7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3130303a3a2f34302d3430203d3e20343031363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ca0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:19:11:e4:ad:25:60:da:e4:00:56:55:20:4b:50:54:96:e2:
         9d:46:10:05:35:75:c5:ea:3a:86:c1:6f:8b:7c:ac:7e:4d:08:
         5b:71:08:d0:96:26:b2:37:0c:ae:0c:b1:90:1a:3c:c2:2e:f2:
         91:5a:85:70:de:8e:33:a8:c0:18:85:2a:fe:a2:d3:cf:40:4e:
         25:54:cd:44:8a:a3:24:af:e1:25:26:ae:cf:aa:26:9f:6f:0f:
         17:52:f3:9f:ed:c6:be:60:a0:13:49:22:68:e2:31:59:b4:3e:
         9c:25:0d:b4:23:ae:44:4b:d5:0e:70:80:0c:de:bb:ca:1e:78:
         2f:aa:23:a5:23:66:9d:8e:09:d2:b6:3e:13:4e:4c:b9:9c:8a:
         2d:d3:e4:50:8a:06:07:c8:8b:68:86:a1:19:5e:28:3f:f0:32:
         fc:53:67:ad:f4:08:d4:6e:a6:49:69:29:19:a6:4e:ea:6c:de:
         67:88:80:3e:9c:27:59:92:74:4b:74:42:eb:17:97:b4:b5:5e:
         52:a9:0b:25:56:8d:28:5c:57:6f:e3:b9:b2:e1:86:24:27:14:
         f4:ce:89:6f:34:95:a1:9f:d9:11:ab:e7:12:45:55:52:01:88:
         32:89:3c:44:81:f3:ce:a4:f6:65:84:69:37:c6:9e:e8:a6:c4:
         4f:6a:8c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:51 2026 by rpki-client