Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31303a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a31303a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          2QXU9E87hkEaqcpNy/5wtuVWql36am4hUaQWCtxNROc=
Subject key identifier:   57:3D:77:72:19:84:5B:60:3C:5A:43:60:44:93:9A:2D:F2:0E:42:9E
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       42F8743F5A2D1ECEE61043403601AC7A5A5E7734
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31303a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 17 Sep 2026 12:36:20 +0000
ROA not before:           Thu 17 Sep 2026 12:31:20 +0000
ROA not after:            Thu 16 Sep 2027 12:36:20 +0000
asID:                     9009
IP address blocks:        2602:fad4:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:57:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f8:74:3f:5a:2d:1e:ce:e6:10:43:40:36:01:ac:7a:5a:5e:77:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Sep 17 12:31:20 2026 GMT
            Not After : Sep 16 12:36:20 2027 GMT
        Subject: CN=573D777219845B603C5A436044939A2DF20E429E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:c7:1b:ad:66:af:ec:73:5c:af:a7:1d:97:
                    cc:d6:63:b3:25:5a:8f:a2:86:2d:2f:61:f9:72:7a:
                    75:82:50:e8:46:3a:3b:27:c5:c9:ed:86:b5:ce:02:
                    13:04:1d:06:bd:6a:a6:09:0f:da:88:5a:b2:96:13:
                    ab:66:15:eb:6e:bc:19:82:1e:ef:48:97:cb:aa:54:
                    9b:b0:b7:16:09:2e:20:4a:c3:82:00:b5:ae:d8:82:
                    f3:71:61:b4:73:78:7e:3a:b3:d4:4f:2a:96:6c:61:
                    6f:86:67:32:71:88:6c:db:48:50:62:b0:b8:f4:96:
                    f2:c2:fc:3f:31:8e:1d:d4:30:c4:20:cb:d7:91:c8:
                    1d:50:f9:b4:90:e9:a6:73:f1:18:16:c6:e7:0e:60:
                    e0:e1:9a:2b:d6:08:25:5d:d1:4f:fd:58:64:46:0f:
                    b6:07:b1:ed:db:11:23:50:d7:c6:a0:3b:37:71:33:
                    b2:54:b8:97:81:b1:c6:43:31:d9:c3:b9:db:b9:b3:
                    dd:45:f3:f7:d9:0d:d3:01:18:64:fc:2c:7d:c0:25:
                    46:a2:5a:41:5a:7a:53:e1:1e:2b:20:83:72:79:60:
                    07:3b:df:2f:d3:92:c6:5b:5d:5e:cf:b4:e9:e0:70:
                    c0:cb:34:66:e4:c0:08:91:bd:fe:bc:a5:23:bd:6d:
                    af:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3D:77:72:19:84:5B:60:3C:5A:43:60:44:93:9A:2D:F2:0E:42:9E
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31303a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:09:8a:43:10:cc:ad:be:a8:21:8e:7d:6e:f5:05:95:e7:99:
         9c:01:1a:62:d2:bb:66:92:d5:55:b0:09:e6:b1:44:63:c2:39:
         2b:bf:93:7c:74:08:c4:97:3e:c4:d6:d7:c4:d4:e6:4e:25:80:
         35:e1:eb:99:3e:6d:c4:40:6b:29:50:d5:a2:88:39:11:f1:6a:
         c0:92:a9:ef:f3:26:87:89:05:15:f3:13:24:4c:e8:48:ad:59:
         50:ec:d3:75:e5:ad:e6:c0:3b:0e:a2:c9:a4:7f:47:96:55:72:
         f6:4b:1b:29:8b:88:46:ba:9f:00:89:9b:b6:6d:df:9b:25:81:
         25:b1:f1:ed:a8:e5:f5:88:02:02:17:d7:bf:41:97:e2:c8:9c:
         e0:a7:a9:84:cb:61:aa:2e:9b:cf:2b:8f:aa:d0:60:01:6b:ec:
         0c:24:10:ad:6e:1e:ca:82:e7:3c:6c:72:08:9e:e6:e9:e9:33:
         8e:b6:04:35:68:fc:b0:09:d1:f6:bb:73:8f:60:3f:4d:16:3f:
         01:b1:03:1f:59:49:85:40:95:39:5b:5f:75:07:22:81:39:2f:
         6d:fa:ac:35:a7:0a:0f:be:3d:7b:98:a0:a8:6e:9b:83:73:ea:
         cf:5c:75:b3:eb:e5:53:a0:b6:d7:01:e9:a5:78:26:e0:ba:6d:
         2e:3e:1c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:16:44 2026 by rpki-client