Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3930303a3a2f34302d3430203d3e20343031363832.roa
File:                     323630343a6361303a3930303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier:          gqlVD7DVyIKMNeFBL4WRdgPF0KLqOWUzX3ICdIOWXEc=
Subject key identifier:   C6:73:CB:FF:23:93:05:9B:9E:DE:1C:8A:31:B8:AB:F7:78:EA:B3:EE
Certificate issuer:       /CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
Certificate serial:       41A4F56FD51F9ED40327F6AE5EDFE4F32734F73B
Authority key identifier: 7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3930303a3a2f34302d3430203d3e20343031363832.roa
Signing time:             Fri 01 May 2026 21:21:20 +0000
ROA not before:           Fri 01 May 2026 21:16:20 +0000
ROA not after:            Fri 30 Apr 2027 21:21:20 +0000
asID:                     401682
IP address blocks:        2604:ca0:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 01:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a4:f5:6f:d5:1f:9e:d4:03:27:f6:ae:5e:df:e4:f3:27:34:f7:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
        Validity
            Not Before: May  1 21:16:20 2026 GMT
            Not After : Apr 30 21:21:20 2027 GMT
        Subject: CN=C673CBFF2393059B9EDE1C8A31B8ABF778EAB3EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:9a:23:ac:aa:aa:7c:a0:fe:12:11:5a:48:
                    b0:41:db:90:45:46:bc:75:3c:17:ba:1b:47:9b:46:
                    e8:6d:72:7c:be:5a:1a:5d:b2:8a:49:71:6d:f3:88:
                    26:c9:8d:80:d4:11:d1:14:49:81:c0:26:44:dc:1e:
                    b4:74:37:2f:d0:2a:b5:24:fa:72:5c:55:06:e5:95:
                    52:0f:61:eb:2a:44:43:d5:bc:56:61:cf:f2:29:80:
                    a2:a7:9b:90:c2:83:eb:68:d9:57:03:f0:96:78:1d:
                    a1:42:33:a8:88:dd:58:4f:3c:cf:49:58:0c:31:60:
                    90:34:49:d7:27:4e:22:4c:58:f1:42:fa:73:fe:a1:
                    00:ae:df:21:82:66:1d:56:ae:00:f3:5e:99:40:db:
                    83:39:33:48:f9:65:ff:50:e9:f7:84:fe:f7:89:f8:
                    55:6d:bd:af:e7:6f:95:b8:a1:1b:f7:14:df:1c:7d:
                    3f:ce:6e:32:1d:80:b1:80:cb:69:38:23:2b:38:e9:
                    d0:72:9e:20:96:18:43:64:99:83:fa:cb:44:32:fb:
                    f8:e2:6e:e0:1e:b1:50:15:e0:be:89:94:d9:23:87:
                    ec:73:3f:4f:a9:55:73:a2:c8:ec:c2:0d:59:29:23:
                    6e:a2:48:73:5d:d4:22:29:bb:92:92:41:d4:0d:b4:
                    90:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:73:CB:FF:23:93:05:9B:9E:DE:1C:8A:31:B8:AB:F7:78:EA:B3:EE
            X509v3 Authority Key Identifier:
                keyid:7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3930303a3a2f34302d3430203d3e20343031363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ca0:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:08:b4:aa:fa:af:b8:e5:1c:40:6e:ac:fd:95:6d:61:66:ae:
         14:31:50:42:88:31:0a:90:2a:e1:ea:cd:66:04:9e:3d:7b:b4:
         31:b3:46:86:d8:03:1d:93:e8:99:fe:e8:e9:e7:5a:5d:77:d1:
         2e:11:b5:73:e4:8f:4c:40:a5:ef:c3:ac:df:8b:37:54:3b:2d:
         5a:d3:47:c2:ef:b4:9d:29:9b:e0:23:15:05:02:99:b0:47:50:
         7f:51:51:b1:f4:81:60:b3:23:f7:8d:4b:60:8e:96:d5:72:ff:
         2d:8f:9e:1d:05:6b:8c:49:bc:9b:2a:d2:7e:f2:65:94:c8:6f:
         57:1d:1c:a1:bb:8f:77:bb:a7:0a:97:4e:23:9c:0f:35:24:61:
         a0:1a:1a:57:bd:e4:ef:fe:50:f3:e8:25:34:64:06:95:a5:5c:
         9c:6c:69:32:33:7d:0e:17:f9:fd:d9:c8:06:26:37:67:41:ea:
         b5:11:cb:5a:70:82:98:0b:07:07:fe:75:64:b3:ea:fc:1f:61:
         6f:91:32:37:ac:0d:34:1a:9d:cb:fa:1d:d2:00:18:5b:24:db:
         38:7b:e0:04:5f:37:b2:4b:e8:7f:bd:d9:e7:98:a8:6e:53:0f:
         e1:55:b8:5f:c0:00:7f:06:12:e6:d4:25:40:5a:8d:6d:7b:d4:
         50:00:c9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:51 2026 by rpki-client