Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a6566393a3a2f34382d3438203d3e2033323830.roa
File:                     323630323a666336383a6566393a3a2f34382d3438203d3e2033323830.roa (raw, json)
Hash identifier:          KLXSQta4GWA7Jx4CWpUtzMYaDOz8Wams+KSuRM0ymrA=
Subject key identifier:   E5:E8:DE:49:D3:E9:50:A8:50:F1:1A:C4:18:C9:87:9B:23:81:ED:19
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       734E8EB68284A9CEB80C9F9A300690F3D5E7792C
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a6566393a3a2f34382d3438203d3e2033323830.roa
Signing time:             Fri 20 Feb 2026 22:09:56 +0000
ROA not before:           Fri 20 Feb 2026 22:04:56 +0000
ROA not after:            Fri 19 Feb 2027 22:09:56 +0000
asID:                     3280
IP address blocks:        2602:fc68:ef9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 11:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:4e:8e:b6:82:84:a9:ce:b8:0c:9f:9a:30:06:90:f3:d5:e7:79:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Feb 20 22:04:56 2026 GMT
            Not After : Feb 19 22:09:56 2027 GMT
        Subject: CN=E5E8DE49D3E950A850F11AC418C9879B2381ED19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cf:2f:3a:02:94:4c:6a:bc:4f:f8:c3:98:9a:
                    e4:2d:1c:8b:74:37:a4:dc:2a:02:24:39:d8:62:04:
                    8e:08:4f:b4:d9:b8:d7:91:20:01:aa:44:93:fa:3c:
                    05:2e:f0:b4:ef:26:c9:60:16:3b:88:09:71:0f:bc:
                    2b:6d:20:bd:d3:91:83:cd:53:44:88:99:99:1a:af:
                    5c:0e:4c:6c:3d:6e:6b:1b:8a:0b:c2:fb:1f:42:3d:
                    29:3c:df:b3:c1:b9:6e:2e:a5:b4:8b:43:54:4f:12:
                    36:8a:c0:af:a5:38:88:c8:bf:4b:f3:c0:b6:43:15:
                    38:2d:c5:22:4f:26:a2:95:ce:e5:13:04:d5:ff:83:
                    6b:10:22:2b:72:44:e2:bf:41:ba:6d:a9:f5:66:fb:
                    06:fe:fd:c2:e2:9e:17:2e:78:9a:43:33:d7:9e:ee:
                    f7:61:54:6e:28:43:e3:0d:f3:31:1c:4f:94:d3:bf:
                    1a:db:8b:7e:9e:78:15:8d:1f:67:c4:ff:05:65:1f:
                    46:9f:db:65:f5:55:d0:95:b2:1f:c1:60:a5:6c:77:
                    70:ae:35:4f:39:21:bd:0c:f1:39:0b:4a:f4:b2:a2:
                    40:9a:b7:07:18:4c:86:78:53:81:37:cb:50:96:48:
                    d7:6e:32:ec:a4:05:b0:b3:e5:15:4e:34:96:11:fe:
                    36:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E8:DE:49:D3:E9:50:A8:50:F1:1A:C4:18:C9:87:9B:23:81:ED:19
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a6566393a3a2f34382d3438203d3e2033323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc68:ef9::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:92:5a:a6:dd:14:a4:6d:f0:be:1d:fa:e7:7d:98:39:48:2a:
         47:f7:5b:e3:7e:1b:f6:6e:ea:e8:58:bd:75:b0:97:9f:79:8c:
         51:a9:a3:f4:36:f5:9d:ce:39:4c:63:6b:ba:70:c3:9f:e0:4d:
         a3:32:10:30:d9:61:9b:18:3f:ea:ad:0d:dd:ee:3a:a6:db:98:
         a6:b3:a8:0e:80:76:c1:c7:8b:6f:41:81:8a:1f:b0:d8:ea:ba:
         f3:9f:a0:f9:8a:ca:23:26:d4:f0:01:8b:e5:61:51:61:da:4b:
         a3:ec:2e:36:41:d2:e7:ce:d6:d2:20:0d:1a:b3:b0:4e:35:8c:
         69:d5:92:4b:34:af:2b:1f:2a:ef:3c:e8:aa:b8:d2:38:b7:c9:
         87:f4:08:f1:c0:74:c4:44:e8:50:f9:c9:dd:7c:f4:33:99:d6:
         f7:a1:49:73:04:9c:90:41:9d:9d:fb:0e:8e:2e:f7:c7:35:a7:
         11:d2:62:09:d7:3d:db:50:6d:1a:08:90:e1:91:6e:eb:83:82:
         ef:7d:20:e9:56:e1:7c:bd:17:23:2c:58:a3:06:4d:2d:f8:98:
         11:4b:14:92:52:23:59:51:7b:90:4f:9d:af:6b:a3:58:56:61:
         2b:a7:29:33:1f:8c:8e:61:3a:21:bd:1a:53:95:e7:e2:51:77:
         c7:73:56:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:59:37 2026 by rpki-client