Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a623a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a623a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          WktRKzQDWylmTGGJg9rHIyB2HHg4+nHIm6LQQggM1LI=
Subject key identifier:   5D:8F:76:87:31:89:8C:66:18:EE:F4:58:52:02:8B:7B:28:B7:6D:01
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       647EB795C4ED26824CA1B83B1A84C7E0A77031FD
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a623a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 11 Jun 2026 14:36:06 +0000
ROA not before:           Thu 11 Jun 2026 14:31:06 +0000
ROA not after:            Thu 10 Jun 2027 14:36:06 +0000
asID:                     9009
IP address blocks:        2602:fad4:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7e:b7:95:c4:ed:26:82:4c:a1:b8:3b:1a:84:c7:e0:a7:70:31:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Jun 11 14:31:06 2026 GMT
            Not After : Jun 10 14:36:06 2027 GMT
        Subject: CN=5D8F768731898C6618EEF45852028B7B28B76D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:77:13:f2:8e:59:08:4c:be:69:0d:d8:1a:
                    14:a3:26:e7:b3:9c:2a:5c:18:04:18:73:c3:e6:3f:
                    20:d7:42:f3:a9:d3:9f:79:dc:87:74:a4:ea:00:b5:
                    cc:50:d6:d8:f6:52:c2:2e:5b:44:f2:6c:63:28:b5:
                    1f:05:15:ca:2c:5d:b5:18:b2:48:1d:f1:ea:d9:1e:
                    93:41:81:1e:bb:2e:0f:59:6d:1e:c6:26:58:d1:0a:
                    12:e9:ba:10:a0:a9:0a:64:fd:71:db:71:3c:59:7c:
                    dc:3c:75:5f:6a:e8:95:ff:b6:ee:93:cc:17:42:73:
                    b4:9e:c1:5d:fd:f8:a5:c3:ab:f4:ce:5c:fc:20:5c:
                    dc:6f:b9:61:f7:30:49:b2:29:9e:be:53:80:de:c0:
                    8f:f4:d1:02:e3:b9:df:f2:5d:80:95:cb:81:80:90:
                    d4:96:5a:3c:37:db:b7:ce:91:10:0f:6e:ed:90:fc:
                    cb:f5:ed:3d:49:4a:4b:07:31:31:aa:f6:5a:16:bc:
                    b1:9b:da:16:f0:89:29:a9:92:0e:aa:ae:51:99:1c:
                    51:39:77:78:c6:1c:ed:55:53:15:6e:bd:ae:97:8a:
                    a7:90:98:9b:9e:68:e3:ac:8e:96:76:f4:c2:51:36:
                    db:11:59:b7:b0:40:7c:6d:b5:ab:c5:93:50:98:70:
                    f2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8F:76:87:31:89:8C:66:18:EE:F4:58:52:02:8B:7B:28:B7:6D:01
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a623a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:f9:10:32:8c:17:59:95:67:e6:31:d7:35:78:4e:80:58:12:
         ff:33:1c:04:4c:75:68:e2:3e:27:e5:5c:8c:59:3b:a6:f9:f1:
         11:65:3c:6d:7a:62:fe:6a:67:7e:a9:34:e4:06:f3:64:38:20:
         72:21:ba:19:fc:e2:1e:e4:db:16:40:0f:f9:55:42:0a:cb:8a:
         9b:95:5e:78:57:f5:3c:2b:e7:ad:03:96:04:7b:6f:1b:65:b0:
         f4:43:3c:c9:f4:a4:13:d9:e6:21:d7:7a:44:45:58:d6:f7:8e:
         25:5b:a0:3d:dd:03:e7:e7:b4:e1:51:a4:33:1b:74:cc:a6:51:
         d2:1d:51:3e:a1:d6:ef:1f:ce:da:f0:2e:f0:4a:9f:a6:e9:9c:
         f3:7a:94:65:aa:46:70:c8:49:bd:71:34:fb:cc:8d:66:ad:e6:
         02:7b:ea:ca:c9:71:3b:3a:ca:45:65:09:6d:43:9e:ff:50:52:
         05:a7:4f:a0:17:2d:6c:82:7b:7e:82:30:0f:76:b0:24:ef:54:
         c2:55:30:13:f2:c9:eb:e5:5f:63:a3:ac:50:73:51:9f:e8:27:
         88:df:35:ea:33:da:15:cd:f7:d6:c4:5a:d4:be:09:23:87:06:
         8c:a9:ef:07:0a:3f:14:f4:f9:75:c9:99:fa:63:f4:3e:13:63:
         96:3e:86:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:15:34 2026 by rpki-client