Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3630303a3a2f34302d3430203d3e20343031363832.roa
File:                     323630343a6361303a3630303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier:          QPbv7aWzd2P2O/JxuG0JciG2WXp9RWkENf7UIjwYGHw=
Subject key identifier:   E7:E7:FA:85:01:86:05:14:80:71:A0:CE:EC:08:6C:B8:DA:ED:31:FA
Certificate issuer:       /CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
Certificate serial:       0EF84FDDD0E5DC2C348861ED844DBD3D9DAA163F
Authority key identifier: 7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3630303a3a2f34302d3430203d3e20343031363832.roa
Signing time:             Fri 01 May 2026 21:21:19 +0000
ROA not before:           Fri 01 May 2026 21:16:19 +0000
ROA not after:            Fri 30 Apr 2027 21:21:19 +0000
asID:                     401682
IP address blocks:        2604:ca0:600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 01:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f8:4f:dd:d0:e5:dc:2c:34:88:61:ed:84:4d:bd:3d:9d:aa:16:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
        Validity
            Not Before: May  1 21:16:19 2026 GMT
            Not After : Apr 30 21:21:19 2027 GMT
        Subject: CN=E7E7FA85018605148071A0CEEC086CB8DAED31FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a2:ea:64:92:00:38:9f:d4:00:a3:cc:b1:20:
                    c1:68:2e:4c:c0:74:c3:26:8c:43:2d:7f:c1:2a:21:
                    07:26:8a:c0:45:ca:6f:47:86:8c:87:2c:4a:4c:d1:
                    a9:80:62:18:84:3d:a8:11:8e:56:47:61:91:b2:8e:
                    4e:ba:03:dc:db:25:00:d2:d7:38:fb:28:63:7d:a7:
                    9e:0e:be:3c:26:96:aa:c3:77:4d:39:23:e0:ff:62:
                    f1:34:17:ab:a7:32:a0:36:a5:72:c3:a8:db:4a:a4:
                    8f:d7:5c:ed:31:a9:8e:ff:b3:81:c9:a8:a7:47:b0:
                    32:66:92:15:28:c0:c9:2b:da:fc:29:3f:ac:18:d0:
                    36:aa:77:14:77:b2:21:bd:08:cd:54:55:e1:16:df:
                    c6:05:1f:26:c0:3e:57:4f:95:d3:a6:bd:9e:7c:66:
                    c3:43:35:df:7b:60:9b:43:a8:f3:45:c9:0e:7b:f2:
                    c1:ff:aa:ac:98:91:b6:4b:94:06:70:4d:c0:b6:25:
                    3c:2b:5f:a9:b4:99:97:24:45:f5:69:89:89:a3:58:
                    42:fa:04:50:7c:dd:73:ed:ce:b5:99:56:2e:9e:22:
                    4a:af:94:29:17:b1:49:5b:c2:43:cb:16:84:ff:51:
                    37:da:ea:a1:d0:fb:d9:e2:a6:73:51:3e:a9:27:fe:
                    e4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E7:FA:85:01:86:05:14:80:71:A0:CE:EC:08:6C:B8:DA:ED:31:FA
            X509v3 Authority Key Identifier:
                keyid:7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3630303a3a2f34302d3430203d3e20343031363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ca0:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:5a:5b:06:f3:47:4b:9c:1a:4e:fe:e3:36:ba:8d:89:14:4b:
         d7:13:94:aa:fa:64:34:75:b8:34:de:e5:12:54:e9:cf:c8:26:
         cf:a8:56:0a:70:8a:45:e8:73:3c:f5:5d:32:70:f0:aa:a4:1d:
         0a:09:6a:56:96:79:74:a8:ec:40:ad:56:94:5a:a8:e0:c3:b3:
         11:5b:d8:93:8f:8d:b4:b9:12:e9:a3:29:b2:76:53:80:bc:ca:
         c3:28:03:15:12:d9:69:65:db:fd:b5:2f:3e:81:8b:68:ec:30:
         e8:07:a1:73:a3:86:00:ee:08:d9:b7:7c:16:5b:ba:db:5b:53:
         cf:75:48:ac:f7:7e:fa:c7:f4:6b:58:0f:17:f6:dc:33:17:05:
         89:0e:0a:f8:f1:6b:74:e7:75:ff:9c:1d:28:3b:8c:54:41:31:
         d4:88:69:a5:5e:c9:5b:eb:e5:d4:95:9e:ed:2b:80:8e:ab:d0:
         26:0a:d0:b5:85:de:88:25:c3:ba:21:1a:ba:f1:8b:21:f8:44:
         0c:a8:08:a4:6a:f2:ea:63:99:5c:e0:ec:78:28:e1:5e:24:82:
         1f:62:01:88:7e:18:ba:9f:ea:35:99:67:b0:91:e9:90:ce:76:
         4b:e4:15:0a:e7:04:c9:22:c1:1c:bc:42:a0:fa:c5:c9:57:6a:
         24:f8:c0:47
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUDvhP3dDl3Cw0iGHthE29PZ2qFj8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTg3NDFhYzRmMTIyOTFlOGRkMjkxMTRjZjAwYmFhODll
NGVlNzdkNjQ0YzI5YzhmYWMwHhcNMjYwNTAxMjExNjE5WhcNMjcwNDMwMjEyMTE5
WjAzMTEwLwYDVQQDEyhFN0U3RkE4NTAxODYwNTE0ODA3MUEwQ0VFQzA4NkNCOERB
RUQzMUZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aLqZJIAOJ/U
AKPMsSDBaC5MwHTDJoxDLX/BKiEHJorARcpvR4aMhyxKTNGpgGIYhD2oEY5WR2GR
so5OugPc2yUA0tc4+yhjfaeeDr48Jpaqw3dNOSPg/2LxNBerpzKgNqVyw6jbSqSP
11ztMamO/7OByainR7AyZpIVKMDJK9r8KT+sGNA2qncUd7IhvQjNVFXhFt/GBR8m
wD5XT5XTpr2efGbDQzXfe2CbQ6jzRckOe/LB/6qsmJG2S5QGcE3AtiU8K1+ptJmX
JEX1aYmJo1hC+gRQfN1z7c61mVYuniJKr5QpF7FJW8JDyxaE/1E32uqh0PvZ4qZz
UT6pJ/7kPQIDAQABo4ICujCCArYwHQYDVR0OBBYEFOfn+oUBhgUUgHGgzuwIbLja
7TH6MB8GA1UdIwQYMBaAFHojVPCChJhJzQAHtFDkwbH8W5DaMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3LzEv
N0EyMzU0RjA4Mjg0OTg0OUNEMDAwN0I0NTBFNEMxQjFGQzVCOTBEQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzRlOTYyNzE3LTExMzgtNGQyYi05NDQyLTAzMzJlOTA2MDEzMi9lODc0
MWFjNGYxMjI5MWU4ZGQyOTExNGNmMDBiYWE4OWU0ZWU3N2Q2NDRjMjljOGZhYy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3
NGI0MmNhMTg2Ny8xLzMyMzYzMDM0M2E2MzYxMzAzYTM2MzAzMDNhM2EyZjM0MzAy
ZDM0MzAyMDNkM2UyMDM0MzAzMTM2MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACYEDKAGMA0GCSqG
SIb3DQEBCwUAA4IBAQCiWlsG80dLnBpO/uM2uo2JFEvXE5Sq+mQ0dbg03uUSVOnP
yCbPqFYKcIpF6HM89V0ycPCqpB0KCWpWlnl0qOxArVaUWqjgw7MRW9iTj420uRLp
oymydlOAvMrDKAMVEtlpZdv9tS8+gYto7DDoB6Fzo4YA7gjZt3wWW7rbW1PPdUis
9376x/RrWA8X9twzFwWJDgr48Wt053X/nB0oO4xUQTHUiGmlXslb6+XUlZ7tK4CO
q9AmCtC1hd6IJcO6IRq68Ysh+EQMqAikavLqY5lc4Ox4KOFeJIIfYgGIfhi6n+o1
mWewkemQznZL5BUK5wTJIsEcvEKg+sXJV2ok+MBH
-----END CERTIFICATE-----
Generated at Wed May 13 03:44:30 2026 by rpki-client