Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31333a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a31333a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          2/xs19Zx3wChm/Yg6o1wRWRsmVkPWnGR+SUw9j7I41o=
Subject key identifier:   8F:14:72:F3:4F:69:22:38:A8:B5:2B:2D:DC:07:6D:06:E9:CD:A9:52
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       7BDC16F5F2086C7B506AF3B95CBCC0D99937FB6C
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31333a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 17 Sep 2026 12:36:20 +0000
ROA not before:           Thu 17 Sep 2026 12:31:20 +0000
ROA not after:            Thu 16 Sep 2027 12:36:20 +0000
asID:                     9009
IP address blocks:        2602:fad4:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:57:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:dc:16:f5:f2:08:6c:7b:50:6a:f3:b9:5c:bc:c0:d9:99:37:fb:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Sep 17 12:31:20 2026 GMT
            Not After : Sep 16 12:36:20 2027 GMT
        Subject: CN=8F1472F34F692238A8B52B2DDC076D06E9CDA952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:d1:ba:49:2e:a0:b1:26:2b:0d:f7:78:c9:
                    7f:23:2d:ae:df:17:27:00:ef:79:de:1b:3b:b7:72:
                    b8:16:23:6b:b6:57:85:06:8e:45:48:4f:ec:ff:c3:
                    74:53:ac:9c:64:73:63:77:62:25:30:0a:b5:99:15:
                    d7:62:1b:92:b8:6d:f7:87:4e:05:51:26:22:32:99:
                    9b:28:41:22:42:17:ba:b2:7f:e6:6a:0c:07:bd:2a:
                    1f:cd:94:ea:60:34:e6:8f:08:a8:9b:cc:21:38:17:
                    cf:f2:7c:f8:d0:96:98:02:4d:71:e9:27:37:73:22:
                    47:4e:fd:5a:1f:8c:26:b2:c8:64:81:0b:38:8f:c4:
                    42:d7:51:b8:a9:fe:b4:34:89:60:23:1f:c6:6c:ab:
                    51:fc:e9:4a:18:51:6e:fb:2e:9d:a7:84:4f:eb:ba:
                    8d:e2:fa:39:71:5e:a1:41:bc:00:d2:9e:95:26:ff:
                    ec:8f:e4:cf:65:4a:f3:94:1a:99:84:31:42:02:95:
                    64:e1:ec:72:41:a8:d3:2f:d5:06:8f:95:fe:73:68:
                    b7:3f:13:86:a3:ab:89:3e:b8:df:11:99:81:ec:f8:
                    33:b7:3f:12:b3:54:69:aa:b9:ea:af:07:44:8a:a7:
                    00:af:19:1f:16:eb:5e:15:f5:8c:37:0e:0d:9e:37:
                    05:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:14:72:F3:4F:69:22:38:A8:B5:2B:2D:DC:07:6D:06:E9:CD:A9:52
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31333a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:3e:6e:a3:6b:22:25:ff:6e:68:1f:d6:d4:c9:b3:21:ad:74:
         3d:43:ae:c4:98:a6:5e:14:1f:19:0d:67:01:47:41:86:d2:02:
         2d:b8:60:86:2b:f8:f8:fe:dd:94:9a:97:85:6e:c4:a1:68:6d:
         3a:9e:9f:fc:c1:27:11:2f:0b:b1:c7:b3:16:7b:50:52:3f:ff:
         4e:de:46:a9:9c:71:74:83:fb:a2:ef:22:87:17:d9:82:fc:2e:
         8b:0a:ec:88:62:a4:76:60:d8:84:4e:8d:bd:0b:82:37:95:df:
         d1:ee:cd:24:0a:48:cc:c7:e4:d6:35:eb:9f:c0:61:16:69:52:
         b2:34:2c:d0:27:0b:a2:bb:60:d3:bb:f8:15:41:91:67:7e:74:
         50:2a:c5:89:fb:dd:0b:21:23:0f:37:3c:50:9c:8c:45:15:18:
         55:00:a5:9d:cc:22:6c:83:ff:72:0d:ea:56:fd:3a:49:a5:65:
         f8:ca:a3:3d:4b:8f:59:b3:61:19:de:72:00:57:f3:0b:86:b6:
         c3:c9:21:fa:48:d0:ab:81:bb:ef:47:b3:5d:83:38:23:b2:31:
         86:9f:08:b9:3c:51:e4:8d:b3:23:b9:ea:e5:03:16:57:6e:41:
         f0:38:88:6d:90:5c:39:a2:4a:f7:29:10:1a:af:dd:b7:ba:73:
         8e:99:2d:cc
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUe9wW9fIIbHtQavO5XLzA2Zk3+2wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTNlMTM1MjE2YTM3NTU0MGJlNWVmMzQ1MmU2YWEzMmEw
YTAzZWFjNjY3Y2I5ZmU2NGUwHhcNMjYwOTE3MTIzMTIwWhcNMjcwOTE2MTIzNjIw
WjAzMTEwLwYDVQQDEyg4RjE0NzJGMzRGNjkyMjM4QThCNTJCMkREQzA3NkQwNkU5
Q0RBOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrbRukkuoLEm
Kw33eMl/Iy2u3xcnAO953hs7t3K4FiNrtleFBo5FSE/s/8N0U6ycZHNjd2IlMAq1
mRXXYhuSuG33h04FUSYiMpmbKEEiQhe6sn/magwHvSofzZTqYDTmjwiom8whOBfP
8nz40JaYAk1x6Sc3cyJHTv1aH4wmsshkgQs4j8RC11G4qf60NIlgIx/GbKtR/OlK
GFFu+y6dp4RP67qN4vo5cV6hQbwA0p6VJv/sj+TPZUrzlBqZhDFCApVk4exyQajT
L9UGj5X+c2i3PxOGo6uJPrjfEZmB7Pgztz8Ss1RpqrnqrwdEiqcArxkfFuteFfWM
Nw4NnjcFAwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFI8UcvNPaSI4qLUrLdwHbQbp
zalSMB8GA1UdIwQYMBaAFJB1EYPkO6TqsWr2BLUEHo/+8x3yMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODg5YzNlYWUwMTg4YWZmNjY3MzQwOTRkLzAv
OTA3NTExODNFNDNCQTRFQUIxNkFGNjA0QjUwNDFFOEZGRUYzMURGMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjLzA3NDNlYWNmLWJjNGYtNGM4YS05MTQwLTEzNDdiNmZhNmVlNS9hM2Ux
MzUyMTZhMzc1NTQwYmU1ZWYzNDUyZTZhYTMyYTBhMDNlYWM2NjdjYjlmZTY0ZS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4OWMzZWFlMDE4OGFm
ZjY2NzM0MDk0ZC8wLzMyMzYzMDMyM2E2NjYxNjQzNDNhMzEzMzNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDM5MzAzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL61AATMA0GCSqGSIb3
DQEBCwUAA4IBAQB7Pm6jayIl/25oH9bUybMhrXQ9Q67EmKZeFB8ZDWcBR0GG0gIt
uGCGK/j4/t2UmpeFbsShaG06np/8wScRLwuxx7MWe1BSP/9O3kapnHF0g/ui7yKH
F9mC/C6LCuyIYqR2YNiETo29C4I3ld/R7s0kCkjMx+TWNeufwGEWaVKyNCzQJwui
u2DTu/gVQZFnfnRQKsWJ+90LISMPNzxQnIxFFRhVAKWdzCJsg/9yDepW/TpJpWX4
yqM9S49Zs2EZ3nIAV/MLhrbDySH6SNCrgbvvR7NdgzgjsjGGnwi5PFHkjbMjuerl
AxZXbkHwOIhtkFw5okr3KRAar923unOOmS3M
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:36:46 2026 by rpki-client