Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3a2f33322d3332203d3e20343031363832.roa
File:                     323630343a6361303a3a2f33322d3332203d3e20343031363832.roa (raw, json)
Hash identifier:          wbY0gXNIT3xBuXxj5yTdAq9M36LwjxOPQCuisBPOa+c=
Subject key identifier:   FF:88:0C:00:CD:CF:91:F9:DC:D3:E0:CD:AF:10:E8:D7:0E:49:1E:F0
Certificate issuer:       /CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
Certificate serial:       4D683CC71B602EA520A9D48B30D99816FCD157F6
Authority key identifier: 7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3a2f33322d3332203d3e20343031363832.roa
Signing time:             Fri 01 May 2026 21:21:21 +0000
ROA not before:           Fri 01 May 2026 21:16:21 +0000
ROA not after:            Fri 30 Apr 2027 21:21:21 +0000
asID:                     401682
IP address blocks:        2604:ca0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 01:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:68:3c:c7:1b:60:2e:a5:20:a9:d4:8b:30:d9:98:16:fc:d1:57:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
        Validity
            Not Before: May  1 21:16:21 2026 GMT
            Not After : Apr 30 21:21:21 2027 GMT
        Subject: CN=FF880C00CDCF91F9DCD3E0CDAF10E8D70E491EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:30:37:8e:8d:40:48:b4:36:ad:44:e6:fa:
                    18:69:23:46:29:39:9c:9d:9e:41:72:25:54:0a:0a:
                    0a:85:15:d7:a6:20:aa:74:86:fc:93:11:a2:ff:42:
                    08:2d:9b:7c:f5:d1:07:29:a3:4e:1c:75:9f:30:7f:
                    10:07:d2:c6:cd:d4:06:95:c6:23:12:88:7a:b8:4d:
                    a4:ca:1e:ce:d5:1f:12:5f:b8:4e:5e:dc:07:de:85:
                    d1:27:5d:ca:3a:8b:8a:d8:b0:4b:9d:fa:0a:7d:74:
                    97:ab:1e:b9:9d:61:d5:d0:cc:1b:79:eb:aa:d5:11:
                    24:b8:41:96:36:5b:8c:7e:55:bc:eb:7f:4f:8b:59:
                    f0:87:f6:54:6c:31:c4:54:35:90:60:cf:12:cb:30:
                    24:11:83:cc:32:a0:4e:5e:b0:c6:4f:b9:26:3c:6a:
                    47:83:3c:61:1e:c0:f8:a2:b9:3b:a7:0d:f9:5b:5d:
                    c0:30:e0:0b:2b:0f:69:2d:37:a4:30:66:7f:84:55:
                    4c:83:ac:86:e0:fd:cd:c8:c4:55:af:89:42:d7:fb:
                    6e:15:f6:0d:7d:d6:34:f5:be:f4:c4:4b:44:93:c1:
                    e8:a0:77:75:5a:aa:07:02:eb:57:87:18:8b:bb:27:
                    92:d0:65:71:84:8d:ff:c5:a3:7e:a6:b2:c7:55:f7:
                    67:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:88:0C:00:CD:CF:91:F9:DC:D3:E0:CD:AF:10:E8:D7:0E:49:1E:F0
            X509v3 Authority Key Identifier:
                keyid:7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/323630343a6361303a3a2f33322d3332203d3e20343031363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:84:1a:c1:95:4f:a4:0d:e0:85:23:07:25:55:e2:e1:81:07:
         06:d5:30:fd:de:17:87:df:88:16:45:75:2b:b1:5e:97:cd:b6:
         7f:1c:18:fc:76:26:49:67:e1:67:74:f0:a2:40:e5:f6:d8:6e:
         92:5d:82:20:f0:12:19:ff:dd:18:cf:43:49:80:f8:e6:c8:98:
         85:c9:00:b8:36:f9:86:3d:2b:15:2a:9a:74:8b:6d:25:9d:e8:
         89:ad:40:bb:93:d5:c9:8d:01:6d:5f:ab:e2:ff:05:ae:c0:db:
         d7:d5:e4:39:9e:bf:cf:89:d2:33:95:12:5d:f9:33:16:3f:b9:
         7e:37:33:81:92:d5:2b:e5:2f:83:26:e4:4d:9f:86:73:bc:17:
         d8:d5:9d:2f:54:da:30:26:ee:f7:68:24:dd:4d:d7:a6:ac:52:
         0c:de:2a:7d:b7:fc:05:e4:0f:d2:8f:28:5e:1d:85:96:7e:70:
         c7:25:94:29:8d:c4:50:7f:78:54:56:2e:1a:c5:a4:48:84:ea:
         86:99:a2:28:7f:80:14:9d:2e:67:a2:b9:a3:bf:89:9e:35:30:
         8b:42:a7:e1:f0:9f:c6:d5:28:1e:70:ba:7a:21:36:cd:94:ac:
         cd:52:19:b3:79:66:b8:96:c2:f8:e6:90:17:0e:b3:0e:77:7a:
         7b:c0:61:e2
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIUTWg8xxtgLqUgqdSLMNmYFvzRV/YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTg3NDFhYzRmMTIyOTFlOGRkMjkxMTRjZjAwYmFhODll
NGVlNzdkNjQ0YzI5YzhmYWMwHhcNMjYwNTAxMjExNjIxWhcNMjcwNDMwMjEyMTIx
WjAzMTEwLwYDVQQDEyhGRjg4MEMwMENEQ0Y5MUY5RENEM0UwQ0RBRjEwRThENzBF
NDkxRUYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk8wN46NQEi0
Nq1E5voYaSNGKTmcnZ5BciVUCgoKhRXXpiCqdIb8kxGi/0IILZt89dEHKaNOHHWf
MH8QB9LGzdQGlcYjEoh6uE2kyh7O1R8SX7hOXtwH3oXRJ13KOouK2LBLnfoKfXSX
qx65nWHV0Mwbeeuq1REkuEGWNluMflW8639Pi1nwh/ZUbDHEVDWQYM8SyzAkEYPM
MqBOXrDGT7kmPGpHgzxhHsD4ork7pw35W13AMOALKw9pLTekMGZ/hFVMg6yG4P3N
yMRVr4lC1/tuFfYNfdY09b70xEtEk8HooHd1WqoHAutXhxiLuyeS0GVxhI3/xaN+
prLHVfdneQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFP+IDADNz5H53NPgza8Q6NcO
SR7wMB8GA1UdIwQYMBaAFHojVPCChJhJzQAHtFDkwbH8W5DaMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3LzEv
N0EyMzU0RjA4Mjg0OTg0OUNEMDAwN0I0NTBFNEMxQjFGQzVCOTBEQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzRlOTYyNzE3LTExMzgtNGQyYi05NDQyLTAzMzJlOTA2MDEzMi9lODc0
MWFjNGYxMjI5MWU4ZGQyOTExNGNmMDBiYWE4OWU0ZWU3N2Q2NDRjMjljOGZhYy5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3
NGI0MmNhMTg2Ny8xLzMyMzYzMDM0M2E2MzYxMzAzYTNhMmYzMzMyMmQzMzMyMjAz
ZDNlMjAzNDMwMzEzNjM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBAygMA0GCSqGSIb3DQEBCwUA
A4IBAQAehBrBlU+kDeCFIwclVeLhgQcG1TD93heH34gWRXUrsV6XzbZ/HBj8diZJ
Z+FndPCiQOX22G6SXYIg8BIZ/90Yz0NJgPjmyJiFyQC4NvmGPSsVKpp0i20lneiJ
rUC7k9XJjQFtX6vi/wWuwNvX1eQ5nr/PidIzlRJd+TMWP7l+NzOBktUr5S+DJuRN
n4ZzvBfY1Z0vVNowJu73aCTdTdemrFIM3ip9t/wF5A/SjyheHYWWfnDHJZQpjcRQ
f3hUVi4axaRIhOqGmaIof4AUnS5normjv4meNTCLQqfh8J/G1SgecLp6ITbNlKzN
UhmzeWa4lsL45pAXDrMOd3p7wGHi
-----END CERTIFICATE-----
Generated at Wed May 13 04:06:53 2026 by rpki-client