Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a323a3a2f34382d3438203d3e203133323133.roa
File:                     323630323a666164343a323a3a2f34382d3438203d3e203133323133.roa (raw, json)
Hash identifier:          eCvCOzgcQYJ2WfjUIf+oJIyQbXOPuFp32ErP1WdzyVs=
Subject key identifier:   3B:D6:4B:0D:B8:BC:48:DC:9F:0D:57:1E:27:6A:BE:39:10:D1:87:5B
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       496292CF0CD2801DCBB1AA85235C8537DBE3A4F5
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a323a3a2f34382d3438203d3e203133323133.roa
Signing time:             Wed 01 Apr 2026 10:35:54 +0000
ROA not before:           Wed 01 Apr 2026 10:30:54 +0000
ROA not after:            Wed 31 Mar 2027 10:35:54 +0000
asID:                     13213
IP address blocks:        2602:fad4:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 08:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:62:92:cf:0c:d2:80:1d:cb:b1:aa:85:23:5c:85:37:db:e3:a4:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Apr  1 10:30:54 2026 GMT
            Not After : Mar 31 10:35:54 2027 GMT
        Subject: CN=3BD64B0DB8BC48DC9F0D571E276ABE3910D1875B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1d:ac:07:3a:52:75:8b:d1:4e:95:be:92:fb:
                    12:45:09:69:23:7a:f6:c0:eb:a3:ce:fe:73:c5:19:
                    75:ac:d0:ee:47:2c:e5:33:72:3f:a0:60:a2:4f:43:
                    ea:05:0a:83:7d:d2:dc:4f:86:ef:a4:d9:55:eb:6b:
                    56:ba:b5:c9:23:08:f2:9b:49:8e:d3:6f:63:01:74:
                    8b:66:e6:80:b5:3c:5f:b1:88:8a:f8:b1:e0:58:95:
                    f9:c9:ac:ad:a6:ab:bc:9f:96:65:ab:ee:5e:81:de:
                    f2:c1:c7:a5:7d:f2:aa:12:ec:d2:98:dc:c5:04:bc:
                    25:bc:ee:21:1f:e2:2d:d8:89:02:5b:aa:9a:0e:28:
                    9c:15:3f:d2:c5:38:d6:69:94:00:1f:98:6b:91:fd:
                    d4:c6:59:30:df:0e:44:fc:3b:04:40:43:b5:58:a7:
                    96:9f:03:c5:49:14:14:68:f2:ba:eb:7c:27:e1:4e:
                    56:aa:7e:bc:01:4c:cc:3a:8f:10:e2:c4:95:e9:9e:
                    9f:a6:71:0f:81:7f:2d:f2:f8:4e:fb:83:09:73:9c:
                    56:8a:b8:27:7e:05:79:d0:6f:ce:3d:67:04:e8:e0:
                    e8:9b:cd:f2:a2:c4:0a:74:50:44:45:b0:26:e5:e2:
                    b4:59:ff:7a:3c:07:c1:20:2e:a6:a3:d6:b7:09:91:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D6:4B:0D:B8:BC:48:DC:9F:0D:57:1E:27:6A:BE:39:10:D1:87:5B
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a323a3a2f34382d3438203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:4d:e8:bd:11:09:31:98:3d:fd:00:58:96:cf:67:d5:8a:b8:
         b7:b6:d8:4b:fc:80:b5:91:32:80:b1:d1:52:26:44:76:b6:f6:
         94:f1:be:65:16:c5:89:8c:72:32:10:1c:98:36:83:9f:17:43:
         3a:f2:dd:ba:10:f4:53:b6:67:ef:64:17:6f:70:2c:c9:2c:11:
         7f:e0:6d:d4:4c:ae:6c:d0:e9:2d:d7:ee:25:e9:d9:0d:f2:9d:
         91:91:35:14:59:42:1e:f2:ff:e0:d7:e0:22:fd:43:c9:5b:de:
         6b:bb:a9:1d:fc:97:2d:8d:39:c0:2c:ba:e9:1a:df:84:cd:8a:
         da:bb:b5:f6:72:b4:8f:54:7b:2e:17:68:09:90:dc:c7:be:9f:
         e8:f5:25:ec:c7:3d:25:f0:8c:82:f8:67:51:e8:70:90:cc:ab:
         35:01:f5:1f:fa:88:f1:c5:40:b9:ec:1e:74:ee:cd:45:71:63:
         37:a6:7c:12:d4:9d:0c:0a:34:01:f7:71:83:12:c7:e1:ee:df:
         d4:43:1f:00:49:9f:e3:23:4b:04:ed:5a:c3:dd:32:e1:b4:d9:
         99:09:93:0d:50:bc:a5:14:d0:eb:7f:02:2f:7f:56:f6:ae:32:
         71:2a:36:50:ab:33:91:2f:9c:39:67:81:e3:92:ec:32:74:74:
         d3:1c:da:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:40:17 2026 by rpki-client