Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a373a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a373a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          xq+/lwXDga+R4bPTtwJC0YD4H/OSoB2tttNEsTwkayc=
Subject key identifier:   0F:AB:35:3E:F5:BE:A3:B3:85:A2:46:9F:37:B4:A0:BB:E6:B7:BB:DE
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       0AAA30D63C5A029EAB7B5CF17AE281DDB8D86814
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a373a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 11 Jun 2026 14:36:06 +0000
ROA not before:           Thu 11 Jun 2026 14:31:06 +0000
ROA not after:            Thu 10 Jun 2027 14:36:06 +0000
asID:                     9009
IP address blocks:        2602:fad4:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:aa:30:d6:3c:5a:02:9e:ab:7b:5c:f1:7a:e2:81:dd:b8:d8:68:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Jun 11 14:31:06 2026 GMT
            Not After : Jun 10 14:36:06 2027 GMT
        Subject: CN=0FAB353EF5BEA3B385A2469F37B4A0BBE6B7BBDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:98:de:24:3c:b1:ce:35:12:89:a0:b4:df:7d:
                    74:72:6c:4c:d8:d2:7a:e0:6d:f4:f2:40:77:63:cb:
                    4f:7b:98:fe:7e:05:00:3f:15:00:2d:ee:4d:2e:c5:
                    da:cc:2b:99:61:df:09:cb:3d:03:0e:ea:3d:81:57:
                    0f:14:17:24:cf:88:d4:0f:96:a1:81:8c:48:e0:b1:
                    da:69:e1:d3:75:b7:1e:a8:8e:33:05:c0:9f:a7:95:
                    fd:1b:f4:59:cd:45:76:11:01:9e:cc:45:f7:8f:5c:
                    fb:f0:fe:7e:94:de:20:3b:4b:7f:01:d6:1d:8c:fb:
                    59:18:04:4f:f2:28:1b:9f:0a:41:74:94:2a:74:42:
                    c4:b1:41:b5:92:93:15:35:51:a3:50:00:0a:94:22:
                    ba:6f:ba:d0:cb:44:60:a8:d5:1b:33:21:e3:c8:52:
                    1a:6b:c0:79:7e:de:73:03:5c:29:92:ba:af:19:c8:
                    f3:f0:37:22:66:2f:32:6a:fb:3c:2c:3e:ed:4e:97:
                    f3:ad:ad:59:0e:e5:7b:b8:5a:b9:fa:76:14:b9:7e:
                    a4:d1:9e:34:0a:40:a6:b6:a3:ad:89:df:43:a6:55:
                    c1:53:ab:60:b3:bb:31:2c:99:bc:bb:ba:58:99:a7:
                    cb:2d:f4:16:0b:ff:7a:17:6e:56:09:1f:65:54:6f:
                    f3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AB:35:3E:F5:BE:A3:B3:85:A2:46:9F:37:B4:A0:BB:E6:B7:BB:DE
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a373a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:a3:51:1d:12:14:16:65:b5:c7:0b:9e:94:a5:ab:4b:da:96:
         92:49:be:ee:42:fc:7e:5d:4e:f8:c8:fe:30:55:3e:37:7f:53:
         44:90:7f:72:81:14:83:5c:17:47:75:43:c5:5c:23:ec:41:80:
         66:87:f3:91:c8:67:dd:3c:d0:7d:d9:e7:e1:b4:ed:10:63:6a:
         e9:92:e5:2b:9e:9a:7b:cd:ae:87:16:9e:b0:bb:40:e8:b5:f8:
         99:e5:59:d3:6d:45:02:a0:32:81:13:27:73:c1:24:c8:26:36:
         3e:e9:85:f2:85:76:dd:ed:e8:1e:2c:c9:3f:87:b0:d9:1f:21:
         43:4d:2e:bd:1f:9d:db:25:90:26:17:0c:65:c4:48:cc:bc:d3:
         9a:ce:17:b2:72:26:bb:c7:d6:fa:80:cd:06:69:ff:66:3d:e1:
         28:5e:ba:66:65:90:03:4c:9a:68:86:8e:a8:d6:72:82:77:b0:
         62:fc:ca:41:f7:5c:57:bd:42:75:39:97:ee:b9:bd:39:6d:75:
         7d:de:34:31:5a:9e:16:cb:44:d9:31:3d:17:fc:65:f5:f5:cf:
         c6:af:8a:b6:3b:65:53:dc:cd:cf:e1:4c:9c:a8:55:6f:b5:9d:
         10:92:57:31:6d:d0:1f:58:00:fe:69:c9:68:73:69:6e:d8:f1:
         80:c5:b8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:20 2026 by rpki-client