Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a32663a3a2f34382d3438203d3e2036303739.roa
File:                     323630323a666164343a32663a3a2f34382d3438203d3e2036303739.roa (raw, json)
Hash identifier:          EBWCUOVQSDcWbl99xncoQjlq9XS0tJ3Jk2EtYbIOpT0=
Subject key identifier:   86:30:1C:D0:32:27:23:D7:E0:BB:FF:BD:19:8D:C8:37:94:7F:B2:BB
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       5B152BCE3664666B417C3CF8B306413FB8C74C20
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a32663a3a2f34382d3438203d3e2036303739.roa
Signing time:             Thu 26 Feb 2026 13:30:29 +0000
ROA not before:           Thu 26 Feb 2026 13:25:29 +0000
ROA not after:            Thu 25 Feb 2027 13:30:29 +0000
asID:                     6079
IP address blocks:        2602:fad4:2f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:15:2b:ce:36:64:66:6b:41:7c:3c:f8:b3:06:41:3f:b8:c7:4c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Feb 26 13:25:29 2026 GMT
            Not After : Feb 25 13:30:29 2027 GMT
        Subject: CN=86301CD0322723D7E0BBFFBD198DC837947FB2BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a4:5e:0e:78:2f:d4:9c:e7:30:42:2e:ee:2e:
                    a5:33:05:21:f4:6f:23:81:96:10:f9:0c:d8:92:72:
                    00:37:ba:a1:a0:eb:ab:c4:65:47:6d:b9:11:a6:f5:
                    45:34:1c:84:41:a2:55:0a:24:e8:60:f5:66:03:1a:
                    86:a7:e9:fc:5a:29:15:f3:06:cc:e2:95:1d:42:7e:
                    88:2b:7c:f5:90:c8:8f:0c:ab:74:d1:5d:e0:28:7b:
                    49:d4:e3:80:f5:d9:51:ee:8a:89:f2:c4:7a:ba:7c:
                    2e:68:e9:37:39:7a:39:ec:73:b1:6d:97:d6:34:9c:
                    f1:f3:c4:7b:4e:fd:8b:5a:b3:ad:69:91:92:ab:b3:
                    ac:71:25:b2:d8:9b:31:ab:fb:2e:6e:39:63:e6:33:
                    f1:f1:db:4b:46:bc:c7:30:a8:52:e9:14:e6:40:8a:
                    58:f0:48:36:dc:4e:27:03:96:3c:f8:d6:b9:fb:f1:
                    6e:9d:2b:6f:6b:64:d6:ac:b3:d7:92:48:bd:07:e0:
                    22:e1:66:fa:7f:63:b8:86:68:11:70:80:86:77:74:
                    04:02:22:29:6b:57:4e:db:9b:ed:04:af:ec:1a:d2:
                    22:6b:be:34:2d:13:bc:4c:5e:f7:39:ba:cc:12:d2:
                    23:b2:d3:db:79:63:9f:a5:92:03:f1:51:ce:9b:49:
                    f0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:30:1C:D0:32:27:23:D7:E0:BB:FF:BD:19:8D:C8:37:94:7F:B2:BB
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a32663a3a2f34382d3438203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:2f::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:7c:b5:6a:1c:93:c4:0f:45:56:77:15:23:b8:5d:da:30:50:
         92:26:c8:3e:4f:9c:42:43:35:13:20:c8:6f:e4:03:f6:83:e9:
         1b:07:f1:eb:ba:e7:30:62:51:ae:f2:c9:7e:52:77:e0:d7:61:
         ab:dc:2a:a7:b3:33:33:f5:a6:69:38:bb:b7:ed:5f:b4:72:e1:
         47:1b:4f:9e:79:71:fd:da:fb:3d:6e:a0:1a:61:b2:35:65:43:
         93:3c:e3:c4:85:14:d9:0b:97:01:f8:f4:4f:93:36:26:48:3d:
         ac:63:a6:a4:04:2a:d6:6e:d0:b7:d8:75:44:d9:ce:31:ce:ee:
         04:92:ac:44:f1:1c:fc:7d:84:cd:cc:fd:ac:1d:28:7c:d5:ab:
         db:32:f5:84:4e:b5:ed:19:ef:dc:b4:e1:10:87:02:ad:55:43:
         8d:f8:7c:85:c2:0d:33:46:02:de:d4:86:94:0c:ad:5a:6c:32:
         b8:db:82:27:6f:3a:6f:e4:88:d5:0e:8b:e3:d7:1c:4f:38:ac:
         b1:fb:eb:c2:c6:fa:9d:4b:1a:8a:f8:0a:3f:f7:d2:f7:9e:90:
         f8:4c:4b:bb:25:7d:0a:18:d8:13:ab:b3:80:c1:40:55:2d:75:
         29:20:50:e0:9c:b5:b5:35:c8:00:d0:2e:ba:9e:d1:50:7c:17:
         11:e0:c6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:43:43 2026 by rpki-client