Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a383a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a383a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          L+5Q+2K7eeWe1D4GzFEVr7G9IXODk2j7pc3HSBuVZrM=
Subject key identifier:   54:FF:C2:80:A9:3F:5B:9B:8B:56:92:2F:97:81:26:C1:5E:BC:2E:EB
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       6A176DF3EF8575143D13BFE0B4077FA938476929
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a383a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 11 Jun 2026 14:36:06 +0000
ROA not before:           Thu 11 Jun 2026 14:31:06 +0000
ROA not after:            Thu 10 Jun 2027 14:36:06 +0000
asID:                     9009
IP address blocks:        2602:fad4:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:17:6d:f3:ef:85:75:14:3d:13:bf:e0:b4:07:7f:a9:38:47:69:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Jun 11 14:31:06 2026 GMT
            Not After : Jun 10 14:36:06 2027 GMT
        Subject: CN=54FFC280A93F5B9B8B56922F978126C15EBC2EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:35:95:8c:ea:06:d3:16:74:c5:ad:02:5e:97:
                    b0:91:5c:b9:ea:aa:2a:d3:72:0b:7f:6a:b0:8e:b8:
                    90:aa:1a:cf:5d:88:55:e6:e2:c7:1e:10:91:2c:08:
                    bc:1b:eb:37:35:a8:9f:4a:a2:d1:76:74:b2:f9:cd:
                    1b:8a:d1:a0:4b:56:1b:bc:f0:23:c8:cd:98:b3:8c:
                    db:19:bc:ea:14:04:38:55:5a:87:52:ba:46:a8:df:
                    a0:e8:73:7e:d1:e2:da:7b:58:23:3b:3c:82:25:4d:
                    bc:45:2a:61:80:24:2c:8d:a7:b8:fe:53:a0:19:14:
                    98:fd:67:bb:0e:5b:28:f3:ba:3e:f2:9c:e7:b4:45:
                    36:24:a5:d2:a4:a3:07:2c:67:71:6c:06:06:64:ae:
                    09:75:b6:c6:3e:bf:b4:a8:65:52:57:21:fd:45:74:
                    c8:19:f0:d1:4e:9c:ef:8c:ac:35:6d:67:c2:ad:74:
                    b6:dd:57:e6:a4:48:4e:ba:37:b3:10:f1:20:ff:56:
                    22:4f:14:78:85:47:a2:4c:62:3b:d9:4c:f7:16:01:
                    66:62:e0:46:eb:b1:fc:a4:e4:5b:dd:b0:0f:a5:19:
                    03:1d:12:3e:40:1d:8f:f0:c2:b6:25:1c:09:d4:db:
                    f0:8e:f9:fa:d0:bb:aa:62:2a:f5:66:60:19:20:ba:
                    86:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FF:C2:80:A9:3F:5B:9B:8B:56:92:2F:97:81:26:C1:5E:BC:2E:EB
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a383a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:0d:6b:0b:88:bc:5c:9a:ec:f2:8b:b5:5a:60:cb:8e:8a:c5:
         0a:d7:e9:12:04:86:12:ba:34:db:4f:10:52:2c:fe:6d:ce:0b:
         3e:22:d5:13:ba:39:ee:6d:0f:22:bb:d3:b8:cb:27:03:27:46:
         dd:a1:56:f7:b5:64:cc:6b:ec:2b:46:7a:26:9e:cb:ae:d5:de:
         55:da:1f:6a:85:af:86:e0:4e:56:bc:f1:f2:a1:0a:99:95:fa:
         28:10:54:fc:1b:83:46:60:d0:1f:a0:79:c6:f0:a2:9e:b0:21:
         4a:3e:6a:fa:34:1b:ec:4a:52:5d:d9:6a:56:bd:ec:4c:3a:fd:
         b1:5f:42:02:5c:4e:45:c3:f6:ed:eb:5e:15:d3:5c:20:b6:2e:
         48:29:27:0c:c4:96:c0:05:a4:49:c7:a6:e4:5e:d4:6f:98:27:
         31:42:cd:d4:28:5e:5c:04:8c:6f:8e:55:76:df:9f:10:74:da:
         c9:35:fc:f3:f9:75:60:e9:7e:9b:ed:90:96:cf:ec:a0:e3:94:
         06:64:53:a0:36:29:34:88:98:30:02:d9:ee:d0:61:3d:06:b5:
         5a:95:bd:ed:c0:26:fa:89:88:7b:2f:71:17:24:14:40:fd:f4:
         e5:78:31:85:b0:12:69:ad:0c:77:6b:52:09:b7:66:b0:87:19:
         69:58:cf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:57:11 2026 by rpki-client