Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3635313a3a2f34382d3438203d3e203630393030.roa
File:                     323630323a663530633a3635313a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          o9jBRHrKHJrSYlJBazbXZsg9uRr8nMgcPYfQQ/P6hBA=
Subject key identifier:   C6:BD:4D:F2:D9:06:0A:68:3D:9C:B3:6A:87:EA:74:D8:5F:83:31:50
Certificate issuer:       /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Certificate serial:       028060BB871E1915DBD046CDC7F78BE33E6113E8
Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3635313a3a2f34382d3438203d3e203630393030.roa
Signing time:             Tue 10 Mar 2026 00:18:38 +0000
ROA not before:           Tue 10 Mar 2026 00:13:38 +0000
ROA not after:            Tue 09 Mar 2027 00:18:38 +0000
asID:                     60900
IP address blocks:        2602:f50c:651::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 13:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:80:60:bb:87:1e:19:15:db:d0:46:cd:c7:f7:8b:e3:3e:61:13:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
        Validity
            Not Before: Mar 10 00:13:38 2026 GMT
            Not After : Mar  9 00:18:38 2027 GMT
        Subject: CN=C6BD4DF2D9060A683D9CB36A87EA74D85F833150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c9:89:82:7d:8e:57:16:70:c0:ab:59:44:f7:
                    91:ce:9f:ae:cc:50:7f:4a:20:d2:03:dc:4d:2b:ef:
                    3b:e0:e6:56:d7:a0:69:e9:60:1a:9a:1f:2f:37:db:
                    3b:af:13:ab:ad:32:76:f3:da:34:33:3c:51:7b:8b:
                    37:8b:78:03:b3:ce:85:7e:94:78:58:18:e7:cf:af:
                    b0:91:ad:b7:d2:04:33:d0:e7:d4:fc:a6:d9:eb:5d:
                    f2:52:fb:b9:26:9b:24:87:57:7b:cb:fd:36:27:12:
                    31:02:90:68:cd:1c:61:70:ac:88:ab:e8:24:6b:a9:
                    de:c5:7f:ed:e8:e2:3a:a1:5b:f7:26:c5:6a:57:c1:
                    ef:77:d3:fa:bd:93:c7:99:18:9e:64:25:b9:47:81:
                    32:ff:3c:45:0e:07:1f:4d:ed:1c:8f:d1:ba:8c:e4:
                    cc:00:27:0e:1d:e2:23:4d:f4:db:04:da:65:98:a9:
                    20:c8:54:59:00:34:a1:9a:83:cc:5f:02:b8:80:bd:
                    b7:15:b1:ad:5e:8a:a8:e1:79:3b:8e:0e:b2:f1:3e:
                    e6:eb:48:45:14:cc:c5:17:2d:9a:92:cc:9f:ef:33:
                    f5:c4:9a:d9:9e:69:15:01:1e:0b:fe:1b:3e:b2:d0:
                    5e:62:a2:3a:ca:36:65:5d:e5:2f:7d:6c:0c:7e:c3:
                    45:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BD:4D:F2:D9:06:0A:68:3D:9C:B3:6A:87:EA:74:D8:5F:83:31:50
            X509v3 Authority Key Identifier:
                keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/323630323a663530633a3635313a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f50c:651::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:ca:a0:c9:1a:bc:cf:9f:b0:09:65:f0:3f:45:56:9c:2f:74:
         47:f3:ae:28:cd:91:c4:a7:64:07:4c:04:33:c0:1d:82:93:b3:
         be:e6:fe:2f:43:b7:79:e8:e6:2b:be:7a:6a:b1:3c:53:85:20:
         55:c4:11:32:28:53:8d:42:61:12:83:6a:76:63:ac:22:ac:ef:
         10:0a:4b:38:7a:09:43:08:2d:31:d9:16:d8:2c:54:e1:d5:d1:
         f2:8d:ab:92:60:03:79:cf:00:d5:83:d0:d7:3e:b0:01:49:8a:
         cc:af:38:01:86:5f:1d:f3:36:2c:8d:c8:4c:80:3b:97:a8:ae:
         4f:16:ba:5f:e5:3c:3c:cb:a6:4f:e1:48:fc:08:e0:fd:7f:5d:
         c6:67:7a:ee:31:5f:39:88:9e:35:35:26:81:09:67:11:0d:8a:
         c7:c3:79:3c:fb:c5:9c:e5:25:42:78:1d:17:7c:8e:f9:c3:63:
         63:8e:22:4d:34:36:b6:85:ed:47:f9:fb:13:19:73:bf:20:21:
         0c:57:99:e1:d7:c5:87:34:17:fb:df:4c:84:5a:de:63:d9:2f:
         ae:35:51:8a:82:96:2e:61:67:72:a8:40:61:c7:df:72:4b:fe:
         03:23:74:08:c1:f5:c9:40:6c:5a:b5:69:28:05:fb:a7:f2:c0:
         8d:00:be:e9
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUAoBgu4ceGRXb0EbNx/eL4z5hE+gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmVjZmRmZGJkYjU2ZDNmYmZhMjYxYmIyODdiZjBjNDE4
NTU3MmQwYzIxYjY0ZTFmNzQwHhcNMjYwMzEwMDAxMzM4WhcNMjcwMzA5MDAxODM4
WjAzMTEwLwYDVQQDEyhDNkJENERGMkQ5MDYwQTY4M0Q5Q0IzNkE4N0VBNzREODVG
ODMzMTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8mJgn2OVxZw
wKtZRPeRzp+uzFB/SiDSA9xNK+874OZW16Bp6WAamh8vN9s7rxOrrTJ289o0MzxR
e4s3i3gDs86FfpR4WBjnz6+wka230gQz0OfU/KbZ613yUvu5Jpskh1d7y/02JxIx
ApBozRxhcKyIq+gka6nexX/t6OI6oVv3JsVqV8Hvd9P6vZPHmRieZCW5R4Ey/zxF
DgcfTe0cj9G6jOTMACcOHeIjTfTbBNplmKkgyFRZADShmoPMXwK4gL23FbGtXoqo
4Xk7jg6y8T7m60hFFMzFFy2aksyf7zP1xJrZnmkVAR4L/hs+stBeYqI6yjZlXeUv
fWwMfsNFUwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFMa9TfLZBgpoPZyzaofqdNhf
gzFQMB8GA1UdIwQYMBaAFHW/F2dWTXxExb05X2pqIZDS3dcIMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2NhMmIxMmFmYzQyODQzZGJhZTRiMDVjZjM2MGQ5NTJkLzAv
NzVCRjE3Njc1NjREN0M0NEM1QkQzOTVGNkE2QTIxOTBEMkRERDcwOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDll
ZjFiNGUyL2M0MTU2NDRhLWE1YTQtNDg0OS1hYmE5LTE5ODA4NmZkMTU0ZC9mZWNm
ZGZkYmRiNTZkM2ZiZmEyNjFiYjI4N2JmMGM0MTg1NTcyZDBjMjFiNjRlMWY3NC5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jYTJiMTJhZmM0Mjg0M2RiYWU0YjA1
Y2YzNjBkOTUyZC8wLzMyMzYzMDMyM2E2NjM1MzA2MzNhMzYzNTMxM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzYzMDM5MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC9QwGUTANBgkq
hkiG9w0BAQsFAAOCAQEAVsqgyRq8z5+wCWXwP0VWnC90R/OuKM2RxKdkB0wEM8Ad
gpOzvub+L0O3eejmK756arE8U4UgVcQRMihTjUJhEoNqdmOsIqzvEApLOHoJQwgt
MdkW2CxU4dXR8o2rkmADec8A1YPQ1z6wAUmKzK84AYZfHfM2LI3ITIA7l6iuTxa6
X+U8PMumT+FI/Ajg/X9dxmd67jFfOYieNTUmgQlnEQ2Kx8N5PPvFnOUlQngdF3yO
+cNjY44iTTQ2toXtR/n7ExlzvyAhDFeZ4dfFhzQX+99MhFreY9kvrjVRioKWLmFn
cqhAYcffckv+AyN0CMH1yUBsWrVpKAX7p/LAjQC+6Q==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:00:59 2026 by rpki-client