Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3830303a3a2f34302d3430203d3e20343031363832.roa
File:                     323630343a6361303a3830303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier:          Dl7cUbg1VZUHZvJ6I6y4mB8xkbj49FjLYM+Oz/kOpOA=
Subject key identifier:   F3:D0:CA:94:28:A6:37:CC:36:FD:E1:5F:33:31:EB:07:AA:00:A9:86
Certificate issuer:       /CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
Certificate serial:       56E3ADC81E065BC2C0EE5D3614FC69DD370B339A
Authority key identifier: 7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3830303a3a2f34302d3430203d3e20343031363832.roa
Signing time:             Fri 01 May 2026 21:21:20 +0000
ROA not before:           Fri 01 May 2026 21:16:20 +0000
ROA not after:            Fri 30 Apr 2027 21:21:20 +0000
asID:                     401682
IP address blocks:        2604:ca0:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 01:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e3:ad:c8:1e:06:5b:c2:c0:ee:5d:36:14:fc:69:dd:37:0b:33:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
        Validity
            Not Before: May  1 21:16:20 2026 GMT
            Not After : Apr 30 21:21:20 2027 GMT
        Subject: CN=F3D0CA9428A637CC36FDE15F3331EB07AA00A986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c3:bf:9f:9a:97:f9:73:45:f5:9c:c1:4b:ae:
                    72:21:39:4f:6a:b8:32:88:c3:b8:56:41:b0:56:03:
                    05:10:d4:2c:39:c0:9c:cf:1c:77:10:04:1f:36:69:
                    f6:35:12:f7:15:5e:f1:b4:c2:11:0d:2b:71:7e:84:
                    43:43:de:62:30:cf:97:24:3e:a1:e7:76:01:5a:04:
                    5c:32:07:1e:9f:1c:ef:c2:22:3d:7c:a4:75:41:06:
                    33:5a:bb:4c:21:23:ff:19:2e:c4:9c:49:c6:7f:4b:
                    b1:0c:42:15:58:80:c5:2a:9b:6b:0d:50:5f:7d:15:
                    93:17:92:1e:33:31:9c:49:29:d7:ad:f9:6b:bb:42:
                    95:2c:d7:b3:61:62:5c:f0:1b:c4:f0:36:80:ba:4d:
                    3a:54:cd:a6:f9:0b:c6:b0:19:3d:e1:61:95:71:4e:
                    6f:c7:cc:dc:d5:9e:43:0d:35:4d:5b:4c:b0:d8:ae:
                    56:02:4e:36:60:b2:d3:96:39:db:6c:8d:91:50:eb:
                    1a:e9:70:ef:21:3f:27:5a:a6:46:bb:83:70:6c:3e:
                    2c:1c:c0:03:ff:7c:b1:ee:7a:92:f5:67:fd:85:2f:
                    69:81:d6:fc:38:77:a1:06:fa:11:05:f5:76:33:aa:
                    2c:db:ac:a8:2a:c5:90:b3:7f:4b:df:32:fa:fe:2f:
                    88:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D0:CA:94:28:A6:37:CC:36:FD:E1:5F:33:31:EB:07:AA:00:A9:86
            X509v3 Authority Key Identifier:
                keyid:7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3830303a3a2f34302d3430203d3e20343031363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ca0:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         1f:d0:4b:4c:bf:fe:93:6d:fa:ab:b9:dc:70:68:1b:4b:c7:77:
         9c:cc:1f:60:b3:be:f3:c2:78:fe:7d:bb:13:90:56:56:4d:2f:
         d9:f3:5a:0d:2e:ee:9b:1f:71:7b:b7:1d:a5:3d:20:b6:5a:7d:
         8e:d4:fd:3c:cd:60:66:90:be:5b:f8:f4:07:7a:e2:9a:eb:dd:
         54:c3:d5:4b:67:c7:d8:cb:7b:e7:f4:84:58:51:af:5c:92:d7:
         77:24:f4:43:19:89:e5:30:45:ca:78:6b:e3:d2:47:49:0a:04:
         a3:25:71:45:eb:c2:19:a4:5e:a2:60:6c:b2:00:a7:57:80:eb:
         94:33:62:02:be:c9:ac:60:e4:9e:34:d0:fe:e4:0a:fd:5f:6f:
         f7:38:b8:6b:37:5a:76:d0:07:34:0f:9c:b4:f1:db:1f:97:13:
         3f:a4:ff:bb:1b:2b:0b:df:e2:1f:f5:16:cc:f4:0b:4f:6a:2b:
         98:8e:24:a2:37:18:b3:6c:84:02:8e:6e:8e:12:af:c7:8e:f4:
         c4:d5:8f:f3:16:62:4d:15:9d:f3:7c:8b:65:7a:23:fe:7f:3a:
         0a:83:3e:43:4e:2b:14:a1:43:90:7f:95:09:60:21:b5:df:42:
         f0:90:35:2d:b8:d1:91:36:fc:88:c7:63:1f:43:1e:4e:fd:07:
         01:8a:ec:c9
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUVuOtyB4GW8LA7l02FPxp3TcLM5owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTg3NDFhYzRmMTIyOTFlOGRkMjkxMTRjZjAwYmFhODll
NGVlNzdkNjQ0YzI5YzhmYWMwHhcNMjYwNTAxMjExNjIwWhcNMjcwNDMwMjEyMTIw
WjAzMTEwLwYDVQQDEyhGM0QwQ0E5NDI4QTYzN0NDMzZGREUxNUYzMzMxRUIwN0FB
MDBBOTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sO/n5qX+XNF
9ZzBS65yITlPargyiMO4VkGwVgMFENQsOcCczxx3EAQfNmn2NRL3FV7xtMIRDStx
foRDQ95iMM+XJD6h53YBWgRcMgcenxzvwiI9fKR1QQYzWrtMISP/GS7EnEnGf0ux
DEIVWIDFKptrDVBffRWTF5IeMzGcSSnXrflru0KVLNezYWJc8BvE8DaAuk06VM2m
+QvGsBk94WGVcU5vx8zc1Z5DDTVNW0yw2K5WAk42YLLTljnbbI2RUOsa6XDvIT8n
WqZGu4NwbD4sHMAD/3yx7nqS9Wf9hS9pgdb8OHehBvoRBfV2M6os26yoKsWQs39L
3zL6/i+IWwIDAQABo4ICujCCArYwHQYDVR0OBBYEFPPQypQopjfMNv3hXzMx6weq
AKmGMB8GA1UdIwQYMBaAFHojVPCChJhJzQAHtFDkwbH8W5DaMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3LzEv
N0EyMzU0RjA4Mjg0OTg0OUNEMDAwN0I0NTBFNEMxQjFGQzVCOTBEQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzRlOTYyNzE3LTExMzgtNGQyYi05NDQyLTAzMzJlOTA2MDEzMi9lODc0
MWFjNGYxMjI5MWU4ZGQyOTExNGNmMDBiYWE4OWU0ZWU3N2Q2NDRjMjljOGZhYy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3
NGI0MmNhMTg2Ny8xLzMyMzYzMDM0M2E2MzYxMzAzYTM4MzAzMDNhM2EyZjM0MzAy
ZDM0MzAyMDNkM2UyMDM0MzAzMTM2MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACYEDKAIMA0GCSqG
SIb3DQEBCwUAA4IBAQAf0EtMv/6TbfqrudxwaBtLx3eczB9gs77zwnj+fbsTkFZW
TS/Z81oNLu6bH3F7tx2lPSC2Wn2O1P08zWBmkL5b+PQHeuKa691Uw9VLZ8fYy3vn
9IRYUa9cktd3JPRDGYnlMEXKeGvj0kdJCgSjJXFF68IZpF6iYGyyAKdXgOuUM2IC
vsmsYOSeNND+5Ar9X2/3OLhrN1p20Ac0D5y08dsflxM/pP+7GysL3+If9RbM9AtP
aiuYjiSiNxizbIQCjm6OEq/HjvTE1Y/zFmJNFZ3zfItleiP+fzoKgz5DTisUoUOQ
f5UJYCG130LwkDUtuNGRNvyIx2MfQx5O/QcBiuzJ
-----END CERTIFICATE-----
Generated at Wed May 13 05:16:51 2026 by rpki-client