Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/AS396356.roa
File:                     AS396356.roa (raw, json)
Hash identifier:          Q2evE0oOkPdEdsSNVtHDZWQNrymOgOdVXrT61sMyIZE=
Subject key identifier:   86:46:57:44:58:76:A1:74:95:9A:6A:4E:86:05:26:42:DC:43:13:0A
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       4357A9837AE41FD02EBE874DB9662EF79DA7D723
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/AS396356.roa
Signing time:             Mon 10 Aug 2026 15:32:02 +0000
ROA not before:           Mon 10 Aug 2026 15:27:02 +0000
ROA not after:            Mon 09 Aug 2027 15:32:02 +0000
asID:                     396356
IP address blocks:        2602:ff62:103::/48 maxlen: 48
                          2602:ff62:108::/48 maxlen: 48
                          2602:ff62:109::/48 maxlen: 48
                          2602:ff62:10a::/48 maxlen: 48
                          2602:ff62:10b::/48 maxlen: 48
                          2602:ff62:10c::/48 maxlen: 48
                          2602:ff62:10d::/48 maxlen: 48
                          2602:ff62:10e::/48 maxlen: 48
                          2602:ff62:10f::/48 maxlen: 48
                          2602:ff62:110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 08:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:57:a9:83:7a:e4:1f:d0:2e:be:87:4d:b9:66:2e:f7:9d:a7:d7:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Aug 10 15:27:02 2026 GMT
            Not After : Aug  9 15:32:02 2027 GMT
        Subject: CN=864657445876A174959A6A4E86052642DC43130A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a2:2c:24:c6:a5:6e:0b:35:f5:02:e6:93:5a:
                    02:45:34:d7:6f:8f:3c:b5:4d:79:07:14:52:c2:63:
                    28:28:37:42:99:4d:10:93:62:79:d7:83:25:e9:bd:
                    80:22:b5:d0:f2:4d:5d:a4:77:91:05:23:f0:cf:dc:
                    87:ad:ae:5d:a6:28:70:69:0e:11:5e:ae:58:1c:88:
                    d9:b9:32:15:09:9d:7f:c4:cb:a8:7f:c7:9d:02:a1:
                    3c:0c:c0:9c:7e:62:08:0e:c9:23:4e:44:66:b0:7a:
                    77:75:47:6f:06:d1:e1:74:90:5d:e3:06:f6:5e:65:
                    6f:46:e9:11:4b:28:96:e4:87:56:00:61:6a:66:48:
                    eb:b9:a4:e5:ed:66:8e:b7:49:21:d1:90:b9:7b:40:
                    c9:0d:86:ac:87:a3:2f:bf:fd:93:33:89:48:c7:3f:
                    bb:e8:36:e2:c8:68:ad:17:ad:7d:7b:94:cb:1b:d8:
                    8d:4c:e9:90:8b:04:9e:cf:66:f2:0d:bf:8e:fd:a3:
                    cc:1c:63:aa:3b:89:d4:0c:bb:a8:11:4c:e4:46:6e:
                    de:d8:5d:a0:4a:bd:f8:74:29:f9:4f:08:dd:f6:ee:
                    7e:57:ac:7a:9e:7d:ad:d1:ee:5f:ac:a2:75:9f:2b:
                    38:4e:62:74:c0:b1:1a:72:1b:ef:57:b6:0e:3c:80:
                    f7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:46:57:44:58:76:A1:74:95:9A:6A:4E:86:05:26:42:DC:43:13:0A
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/AS396356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:103::/48
                  2602:ff62:108::-2602:ff62:110:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         1a:d2:fc:08:46:e9:84:90:b0:99:7c:bf:20:99:aa:fb:71:33:
         94:79:1f:40:4a:b3:c6:b3:6d:82:b9:d2:be:13:05:c8:90:55:
         7b:83:e4:70:3b:78:47:e4:cf:48:4f:5a:71:41:46:14:42:cf:
         f1:5e:72:44:95:af:51:6e:71:5f:34:a2:ce:58:db:73:e4:ba:
         55:51:51:64:69:ad:85:8e:5f:8c:17:23:47:92:e0:6b:76:31:
         4e:f9:59:f4:81:14:4d:61:08:e1:e8:76:08:95:a7:0f:6e:75:
         91:66:bb:57:1a:9c:34:a4:cc:33:6a:bf:60:ae:05:0e:9a:01:
         b6:5f:fa:ee:dd:c4:dd:53:4f:45:59:ed:c5:36:26:5c:d6:1e:
         fc:80:67:06:41:ed:b1:bd:05:bf:7a:c1:25:b2:fa:72:38:b6:
         b2:fb:bf:57:c3:5b:89:35:1f:c1:0f:49:28:99:31:85:0d:94:
         64:9c:42:03:52:ab:ed:cb:42:b9:5b:0f:d9:4f:0c:f8:45:d8:
         a6:a7:c2:cb:8d:0a:f6:a5:e5:f3:0a:05:bb:c6:8a:e6:ff:b9:
         8b:81:8b:4c:f9:f3:dc:6f:62:52:1c:a1:5a:c9:d5:7e:1d:5c:
         74:17:77:19:55:35:71:21:ff:b3:de:77:9d:7e:42:74:69:60:
         1c:67:03:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:23:16 2026 by rpki-client