Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3131303a3a2f34342d3434203d3e203130313033.roa
File:                     323630373a373463303a3131303a3a2f34342d3434203d3e203130313033.roa (raw, json)
Hash identifier:          4CJP8DqNDwrC28bJtfv5hBCeOnYALoe3BvBxgNHg/To=
Subject key identifier:   79:AF:54:33:26:A3:3E:7C:54:F9:C3:5A:F2:3E:40:F7:59:22:00:00
Certificate issuer:       /CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
Certificate serial:       4A871E53A48FAE0E823D653D873250F9299BEC34
Authority key identifier: CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3131303a3a2f34342d3434203d3e203130313033.roa
Signing time:             Thu 05 Feb 2026 18:19:49 +0000
ROA not before:           Thu 05 Feb 2026 18:14:49 +0000
ROA not after:            Thu 04 Feb 2027 18:19:49 +0000
asID:                     10103
IP address blocks:        2607:74c0:110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl
                          rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:87:1e:53:a4:8f:ae:0e:82:3d:65:3d:87:32:50:f9:29:9b:ec:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
        Validity
            Not Before: Feb  5 18:14:49 2026 GMT
            Not After : Feb  4 18:19:49 2027 GMT
        Subject: CN=79AF543326A33E7C54F9C35AF23E40F759220000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a3:a9:58:80:38:42:97:8f:c7:00:92:37:da:
                    3f:3d:69:3c:c4:14:ec:e2:3a:a0:cf:f3:af:40:d0:
                    83:c3:a8:e5:f7:f8:fc:23:69:91:0a:07:c9:d8:3d:
                    b9:10:b8:eb:4a:9b:1b:63:7f:d5:3f:34:0d:69:23:
                    89:a9:93:e3:fb:80:c5:8d:3d:64:7f:01:11:9f:d7:
                    88:49:3b:62:e4:fa:52:f4:af:0b:52:e6:af:57:a4:
                    95:dd:d0:0b:0a:8e:f1:3f:ea:66:87:21:2b:af:9a:
                    ad:2a:e8:e6:e4:85:c3:dd:46:96:03:d2:db:6f:c2:
                    f5:cf:53:40:d3:4f:23:96:8c:be:9a:c5:ad:14:37:
                    ca:19:9b:6a:8e:6b:42:33:21:4a:3d:74:e6:fb:0b:
                    23:22:59:9e:fb:b5:7e:0d:bd:af:5b:53:b2:0c:4d:
                    6b:a6:11:45:1c:34:b4:67:18:3c:8c:63:e0:7e:9f:
                    11:5a:31:85:10:73:68:72:dc:7d:2d:f3:52:4e:52:
                    a9:c3:3c:6f:16:0d:eb:74:f0:86:97:26:10:be:70:
                    f5:0f:5f:ff:36:a9:15:9e:89:4b:4c:5b:a5:69:e9:
                    34:f7:f2:6d:9f:01:0f:16:bf:5e:af:3a:24:a2:16:
                    0c:e2:1e:c2:04:53:f0:7a:d7:00:34:8e:36:ba:56:
                    2d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AF:54:33:26:A3:3E:7C:54:F9:C3:5A:F2:3E:40:F7:59:22:00:00
            X509v3 Authority Key Identifier:
                keyid:CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3131303a3a2f34342d3434203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         8d:ea:d6:3b:5d:3a:df:74:01:28:9c:8d:58:40:b8:f0:7e:9a:
         89:a7:f3:ef:75:70:1b:67:2c:55:87:a0:b7:43:5b:0e:6e:2d:
         82:22:06:96:44:ec:5c:97:97:95:18:0d:72:f4:05:5e:1c:2f:
         96:43:d4:ac:bf:0b:85:d9:e3:18:bf:20:5e:ee:3a:3a:af:10:
         85:c1:0e:4e:07:2b:e2:64:4e:c1:04:fe:04:0f:d5:f7:fd:47:
         86:41:e2:6f:fc:e6:75:8c:3c:a5:03:16:69:6d:8a:d9:70:f0:
         c2:59:01:9a:7a:8d:50:76:0c:27:8e:f9:7b:ac:a4:a4:33:02:
         20:f8:7c:d4:ee:50:fc:85:16:ef:a3:b4:ae:45:a6:41:13:41:
         39:a7:16:8c:58:2f:19:f0:0f:79:99:23:7e:54:ea:90:96:3c:
         d1:10:ad:f4:63:cd:4b:e1:77:64:1d:bf:ad:ad:e9:05:2a:4c:
         1b:80:ec:01:c6:75:30:24:cb:2c:ea:6a:b6:49:35:bd:54:1c:
         cc:37:f0:b8:1f:26:a0:da:2e:18:4e:17:83:d0:94:6e:aa:a1:
         49:b0:b2:13:89:31:ba:ab:5d:b4:6c:7c:b6:58:d1:45:9b:5d:
         66:9e:82:0e:86:b2:64:db:bb:bf:1c:ad:aa:67:a2:2b:0f:11:
         ed:70:93:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:27:10 2026 by rpki-client