Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31343a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a31343a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          u2bERjDWP1YBhwB32DMR9R4gkvg4Pq2c7nm1H4zmH2U=
Subject key identifier:   70:16:43:02:AE:E9:A8:63:29:90:57:46:6E:82:CC:48:31:68:43:DC
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       EC40D122A289C5D2F4A850EF760268F3F281A2
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31343a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 17 Sep 2026 12:36:20 +0000
ROA not before:           Thu 17 Sep 2026 12:31:20 +0000
ROA not after:            Thu 16 Sep 2027 12:36:20 +0000
asID:                     9009
IP address blocks:        2602:fad4:14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:57:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ec:40:d1:22:a2:89:c5:d2:f4:a8:50:ef:76:02:68:f3:f2:81:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Sep 17 12:31:20 2026 GMT
            Not After : Sep 16 12:36:20 2027 GMT
        Subject: CN=70164302AEE9A863299057466E82CC48316843DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:45:b8:e1:ce:db:a8:94:ba:98:d4:4d:20:45:
                    39:7f:af:76:a7:31:ee:c5:cf:84:21:ab:b6:de:e1:
                    b2:b1:71:41:ef:ae:8b:87:3c:9c:79:12:cf:18:d5:
                    99:44:ff:5c:b3:28:47:20:79:77:c8:20:0d:33:14:
                    36:bb:d5:6a:e2:84:49:b4:90:60:0e:61:94:41:db:
                    49:e7:77:9b:da:67:be:72:47:cb:e4:3c:73:05:c9:
                    8a:3e:72:78:5e:5f:8e:ea:e0:d8:c8:83:3d:5e:22:
                    4e:4b:00:dc:c2:40:06:60:c7:53:cc:e1:60:98:8a:
                    5b:9d:10:1f:38:0e:b0:a7:a3:f8:28:4d:b0:7c:ac:
                    5f:f6:b4:af:96:8f:d8:2e:8f:8f:6f:01:45:5a:95:
                    3a:67:fc:e1:e8:77:34:9f:7e:b6:c5:0f:6a:dd:ea:
                    15:a2:95:a9:b3:57:14:e3:17:c6:7c:52:10:07:4e:
                    e1:5b:ac:ee:09:bf:61:5c:57:eb:29:2d:8d:44:0f:
                    03:eb:64:7b:19:26:aa:88:53:38:18:26:fe:01:1a:
                    c1:49:c3:16:c6:dc:09:ee:1f:fc:d7:45:02:4f:1e:
                    23:af:d5:1b:40:07:4c:c2:38:a3:3f:03:b9:96:fc:
                    42:ba:be:b5:5b:6c:81:b8:14:46:e2:e9:01:e7:9d:
                    ae:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:16:43:02:AE:E9:A8:63:29:90:57:46:6E:82:CC:48:31:68:43:DC
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31343a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:98:ed:9f:67:2f:fc:f1:3b:e1:1a:f0:8b:59:47:b4:6d:3a:
         67:99:d4:d2:5c:da:28:63:72:94:de:ad:87:b4:2f:c3:ea:0b:
         a6:36:18:ee:be:05:ec:a5:e0:0c:b8:14:53:aa:08:ad:70:30:
         cc:90:4f:5f:58:a9:a3:52:86:8b:50:5d:86:00:50:ff:9f:ea:
         ea:3c:4c:d8:79:6f:3f:77:07:e6:33:4d:dd:9a:6f:50:e1:3f:
         36:34:0e:62:6a:76:98:72:5e:2b:75:b4:b8:26:18:e3:92:28:
         88:0e:b1:63:fc:a1:9a:b9:d9:d2:77:97:b0:8b:ed:5d:73:1c:
         a5:b1:53:d5:71:32:3e:d6:0c:e5:7b:05:36:a8:dd:94:2e:9b:
         a3:cb:66:6b:4e:84:8c:e8:10:c3:5e:9c:d0:cb:ed:8a:2d:b6:
         16:d9:bb:7d:93:5a:23:29:de:3a:60:9a:b7:fe:37:bb:dd:35:
         98:53:c3:11:66:40:91:8d:6b:00:fe:fe:bd:a9:26:ba:d8:33:
         df:56:e6:87:a7:f2:1d:f1:36:1f:80:a9:1c:8f:2c:87:a3:a5:
         a7:26:3e:e9:10:2d:91:83:c0:90:30:84:3c:25:60:f6:6e:a2:
         d4:2f:67:84:ad:15:2c:2e:07:e9:66:f8:a3:7b:31:85:5d:0f:
         0a:6c:98:5a
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUAOxA0SKiicXS9KhQ73YCaPPygaIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTNlMTM1MjE2YTM3NTU0MGJlNWVmMzQ1MmU2YWEzMmEw
YTAzZWFjNjY3Y2I5ZmU2NGUwHhcNMjYwOTE3MTIzMTIwWhcNMjcwOTE2MTIzNjIw
WjAzMTEwLwYDVQQDEyg3MDE2NDMwMkFFRTlBODYzMjk5MDU3NDY2RTgyQ0M0ODMx
Njg0M0RDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30W44c7bqJS6
mNRNIEU5f692pzHuxc+EIau23uGysXFB766LhzyceRLPGNWZRP9csyhHIHl3yCAN
MxQ2u9Vq4oRJtJBgDmGUQdtJ53eb2me+ckfL5DxzBcmKPnJ4Xl+O6uDYyIM9XiJO
SwDcwkAGYMdTzOFgmIpbnRAfOA6wp6P4KE2wfKxf9rSvlo/YLo+PbwFFWpU6Z/zh
6Hc0n362xQ9q3eoVopWps1cU4xfGfFIQB07hW6zuCb9hXFfrKS2NRA8D62R7GSaq
iFM4GCb+ARrBScMWxtwJ7h/810UCTx4jr9UbQAdMwjijPwO5lvxCur61W2yBuBRG
4ukB552upQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFHAWQwKu6ahjKZBXRm6CzEgx
aEPcMB8GA1UdIwQYMBaAFJB1EYPkO6TqsWr2BLUEHo/+8x3yMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODg5YzNlYWUwMTg4YWZmNjY3MzQwOTRkLzAv
OTA3NTExODNFNDNCQTRFQUIxNkFGNjA0QjUwNDFFOEZGRUYzMURGMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjLzA3NDNlYWNmLWJjNGYtNGM4YS05MTQwLTEzNDdiNmZhNmVlNS9hM2Ux
MzUyMTZhMzc1NTQwYmU1ZWYzNDUyZTZhYTMyYTBhMDNlYWM2NjdjYjlmZTY0ZS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4OWMzZWFlMDE4OGFm
ZjY2NzM0MDk0ZC8wLzMyMzYzMDMyM2E2NjYxNjQzNDNhMzEzNDNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDM5MzAzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL61AAUMA0GCSqGSIb3
DQEBCwUAA4IBAQBvmO2fZy/88TvhGvCLWUe0bTpnmdTSXNooY3KU3q2HtC/D6gum
NhjuvgXspeAMuBRTqgitcDDMkE9fWKmjUoaLUF2GAFD/n+rqPEzYeW8/dwfmM03d
mm9Q4T82NA5ianaYcl4rdbS4JhjjkiiIDrFj/KGaudnSd5ewi+1dcxylsVPVcTI+
1gzlewU2qN2ULpujy2ZrToSM6BDDXpzQy+2KLbYW2bt9k1ojKd46YJq3/je73TWY
U8MRZkCRjWsA/v69qSa62DPfVuaHp/Id8TYfgKkcjyyHo6WnJj7pEC2Rg8CQMIQ8
JWD2bqLUL2eErRUsLgfpZvijezGFXQ8KbJha
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:38:00 2026 by rpki-client