Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a353a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a353a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          GhxmpL0aVX4Q5obP15qUuQCZcerX7ZzqDMm1r22jTv4=
Subject key identifier:   BD:30:0F:B5:E8:C4:F8:B2:40:AB:A5:A9:68:AE:3F:3C:62:29:80:FE
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       6C640E2F97EFBAB423BD1C69F789FE4949A95DBB
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a353a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 11 Jun 2026 14:36:06 +0000
ROA not before:           Thu 11 Jun 2026 14:31:06 +0000
ROA not after:            Thu 10 Jun 2027 14:36:06 +0000
asID:                     9009
IP address blocks:        2602:fad4:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:64:0e:2f:97:ef:ba:b4:23:bd:1c:69:f7:89:fe:49:49:a9:5d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Jun 11 14:31:06 2026 GMT
            Not After : Jun 10 14:36:06 2027 GMT
        Subject: CN=BD300FB5E8C4F8B240ABA5A968AE3F3C622980FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:6f:a7:28:dd:30:b4:88:ac:36:eb:86:e5:
                    16:da:9b:29:5e:55:91:e2:87:c1:c6:c5:52:3e:1b:
                    7c:77:28:ac:45:c5:ab:1a:40:ad:ed:1f:d1:40:aa:
                    58:bb:6f:ec:94:3c:12:ef:00:61:00:90:5d:34:95:
                    c6:d9:25:ab:87:19:5c:2b:40:a7:bc:51:7a:93:56:
                    48:ab:a4:d1:b3:55:31:96:47:0e:f8:f9:39:62:58:
                    20:09:d0:b7:3c:b0:35:11:1c:b6:4a:78:67:d0:a5:
                    a7:e1:13:6c:f8:88:25:70:f2:bb:17:d1:77:1b:77:
                    2d:03:00:76:58:f4:da:99:9a:ed:d8:84:01:40:14:
                    e2:80:52:7a:01:e3:c7:7a:8c:13:3d:e3:09:5e:e3:
                    b7:f4:47:d1:d9:62:b2:5d:7c:3a:3b:83:58:fc:e3:
                    a3:5b:25:98:83:63:62:cb:f6:fa:b6:ed:ee:41:19:
                    f4:05:30:c5:28:c7:1a:0a:a3:a9:9e:8e:de:90:16:
                    d1:03:18:42:ba:8c:a6:52:53:1f:cc:75:f8:76:27:
                    b6:10:6f:49:e1:08:b4:92:68:cc:22:11:b8:c0:71:
                    b6:6d:5f:a1:47:dc:7f:6f:d6:0d:42:b7:13:72:67:
                    9f:44:e7:be:cf:fd:70:a3:f8:96:b6:a4:80:62:cf:
                    c9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:30:0F:B5:E8:C4:F8:B2:40:AB:A5:A9:68:AE:3F:3C:62:29:80:FE
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a353a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:31:d8:ff:85:1b:e7:47:a7:ab:69:bd:b2:43:f0:9c:97:00:
         5a:95:ed:38:fa:23:6b:84:dd:06:eb:8a:01:98:52:2a:b6:32:
         9f:85:98:00:92:8f:97:dc:b5:5e:a1:7a:42:05:0a:e4:93:87:
         44:32:8c:d9:15:39:e8:28:98:bf:5e:97:ef:76:06:bf:82:4a:
         63:fa:23:72:d4:08:2f:ff:b5:00:0f:fd:56:f5:b1:31:5b:56:
         27:c8:f8:a6:64:37:45:f9:f9:90:2f:4f:36:75:88:80:7b:e3:
         e5:49:b5:2f:0b:33:d8:9c:b3:88:6e:d0:71:60:50:ed:2e:ae:
         a4:b1:6a:4a:60:51:8e:ba:ed:b6:14:0c:a7:82:ba:5e:8a:ad:
         52:90:20:a9:16:f1:92:70:74:98:70:89:74:30:bf:3c:96:58:
         ee:13:79:d2:2b:1e:cb:4d:17:7c:e7:5c:b9:7b:65:ff:b7:6a:
         c1:0d:23:fb:71:06:5e:d7:85:43:bf:99:17:7d:34:94:90:c2:
         ef:74:ba:7d:38:5a:31:cc:b7:94:f2:87:63:1b:27:d5:98:39:
         35:04:e9:65:68:62:eb:bc:5f:1f:01:95:48:46:bc:17:83:78:
         9e:aa:d0:0e:9a:0a:53:06:2c:a3:00:54:58:24:07:80:b7:86:
         6e:6d:37:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:56:38 2026 by rpki-client