Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3730303a3a2f34302d3430203d3e20343031363832.roa
File:                     323630343a6361303a3730303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier:          G6APkDBzbIAqqPXAF9hX0+0H/cD0XAsePApjU5kSFc4=
Subject key identifier:   0D:89:ED:62:5A:91:2B:02:ED:09:25:CC:69:AA:CD:F4:3F:D6:3E:2D
Certificate issuer:       /CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
Certificate serial:       74E5422767901941A5A17F689AA72AEC2A2A44D5
Authority key identifier: 7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3730303a3a2f34302d3430203d3e20343031363832.roa
Signing time:             Fri 01 May 2026 21:21:19 +0000
ROA not before:           Fri 01 May 2026 21:16:19 +0000
ROA not after:            Fri 30 Apr 2027 21:21:19 +0000
asID:                     401682
IP address blocks:        2604:ca0:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 01:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e5:42:27:67:90:19:41:a5:a1:7f:68:9a:a7:2a:ec:2a:2a:44:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
        Validity
            Not Before: May  1 21:16:19 2026 GMT
            Not After : Apr 30 21:21:19 2027 GMT
        Subject: CN=0D89ED625A912B02ED0925CC69AACDF43FD63E2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:66:44:eb:9c:da:20:84:1b:74:cc:1e:d2:
                    e4:b0:6f:13:41:6c:20:b9:6a:c0:31:40:4f:55:23:
                    2c:cc:4f:d1:72:30:a0:c2:2a:3e:54:ec:7e:48:71:
                    62:7f:71:5d:c2:96:86:d0:20:cb:f8:eb:17:43:b3:
                    2d:b5:5a:8d:52:e3:2d:dc:69:68:ba:aa:ed:14:7d:
                    16:1e:fb:f1:5b:ee:e4:a2:e4:34:51:b6:94:21:c4:
                    06:8a:bb:31:fb:c1:40:8f:38:11:4b:42:54:5c:ba:
                    1f:7c:f9:b2:43:d5:e9:9a:87:e4:fc:92:d7:a4:80:
                    8d:4e:63:33:8c:01:52:6e:c6:d0:9e:66:d6:d2:a6:
                    60:c1:0c:ba:5f:0c:e3:e8:e6:05:47:fc:eb:d8:de:
                    fb:e4:20:8b:f3:13:3b:71:b6:6d:92:1d:62:e3:ab:
                    6a:bb:04:62:8c:f9:47:4e:1d:fc:63:d7:42:63:43:
                    d9:ef:58:b6:9a:87:13:1f:68:24:41:b7:d1:8f:9a:
                    fe:97:bf:4e:2c:32:08:03:5d:a8:10:82:c6:05:d4:
                    36:86:57:98:24:c4:b8:92:93:4f:e3:4e:4d:af:ee:
                    51:81:54:f1:01:c4:45:8f:16:7d:e2:a2:84:80:dd:
                    57:ff:be:ce:a1:d5:85:21:4a:c5:24:84:ae:da:af:
                    7b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:89:ED:62:5A:91:2B:02:ED:09:25:CC:69:AA:CD:F4:3F:D6:3E:2D
            X509v3 Authority Key Identifier:
                keyid:7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3730303a3a2f34302d3430203d3e20343031363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ca0:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         b3:ac:6d:e3:34:d8:a3:7f:b2:a1:67:ab:0d:49:61:26:23:1c:
         aa:09:88:07:3d:c6:10:ca:04:98:f1:d1:aa:7b:ef:d3:5f:1c:
         2f:c3:51:08:b1:c9:7e:9b:6a:f7:6d:c5:ff:7c:a9:c3:97:05:
         74:0d:12:62:80:10:db:9a:1e:1e:2b:28:4e:85:7a:17:dc:fa:
         a2:ec:cc:b2:cd:58:71:30:26:9a:50:8c:1f:68:f3:8c:12:f1:
         a1:e8:1f:ce:d3:f6:04:4e:ec:a8:52:dc:76:78:c5:15:72:b1:
         78:fe:0e:46:52:e8:04:97:20:73:67:fa:57:3c:23:8e:4b:a8:
         fc:33:2f:7c:f1:a8:3f:ff:9c:8e:25:c7:3e:27:2d:32:cc:a3:
         7d:e2:10:70:c1:61:5c:fa:e5:6f:55:ae:6c:a4:de:0a:39:b7:
         0a:42:f2:c2:72:60:ce:c8:73:87:38:1d:71:48:3f:0f:e7:56:
         27:db:c9:51:7c:be:76:0d:8b:5a:9f:9f:ae:b9:ce:48:3a:30:
         74:75:46:e9:59:be:56:18:b4:f1:7d:1f:ae:67:d4:d5:2b:15:
         92:36:49:d3:99:26:3f:0e:37:9b:99:27:4b:52:cc:df:55:64:
         b3:f0:b8:25:8a:c3:d4:ea:9d:0e:3e:14:c1:d4:f9:e8:94:72:
         97:d7:9f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:53 2026 by rpki-client