Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a633a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a633a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          dsbm0COu2s4x+zWbPx6JwFdorLCkLUWCYqVrXsh9Zks=
Subject key identifier:   E0:B8:99:2E:A2:4A:79:2B:67:32:3C:8A:A8:E0:89:23:20:40:96:F9
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       65D036C35EB5FB90A0316DF24A099D55B95DEEC6
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a633a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 17 Sep 2026 12:36:20 +0000
ROA not before:           Thu 17 Sep 2026 12:31:20 +0000
ROA not after:            Thu 16 Sep 2027 12:36:20 +0000
asID:                     9009
IP address blocks:        2602:fad4:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:57:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d0:36:c3:5e:b5:fb:90:a0:31:6d:f2:4a:09:9d:55:b9:5d:ee:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Sep 17 12:31:20 2026 GMT
            Not After : Sep 16 12:36:20 2027 GMT
        Subject: CN=E0B8992EA24A792B67323C8AA8E08923204096F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:82:c4:8d:e4:b2:6f:ea:09:19:40:b8:3c:
                    52:f2:14:2d:f6:30:58:b6:c5:d4:47:a9:16:08:50:
                    a6:06:b6:50:dc:f8:8d:2d:13:c9:07:6a:5e:b3:94:
                    75:49:85:d0:a4:79:b4:69:b0:05:d0:14:b5:c5:41:
                    c0:b1:2b:ae:18:07:fa:71:6c:cf:ca:60:ec:c4:47:
                    43:22:64:1f:35:14:0b:a9:18:fe:c2:6e:8f:15:c3:
                    00:79:86:05:2b:dd:49:6c:62:7b:f6:cd:1a:cd:da:
                    dc:89:e6:f1:95:29:2e:77:99:ae:0c:77:e7:09:73:
                    ae:54:e5:1b:01:83:af:81:45:24:4a:de:e4:9a:2b:
                    bf:7e:25:d4:b2:f6:dd:8e:7b:69:ae:8f:e3:b1:d7:
                    0a:52:8a:2e:c0:9b:bc:cf:ac:20:75:61:f7:76:c1:
                    55:a9:fe:4a:8f:9a:a1:6f:fa:d2:5c:72:27:81:89:
                    86:92:a2:39:02:2a:f7:69:e8:2a:40:f2:d9:86:b0:
                    7c:09:7f:bd:dd:e3:0f:ad:67:31:ee:c1:eb:b9:7c:
                    4b:90:b3:04:ad:b8:dd:db:2c:54:ba:34:26:99:a5:
                    a9:67:5a:96:37:c0:07:9c:c8:8f:c0:e3:7b:da:cd:
                    77:11:53:51:0e:e0:cd:c8:c5:1e:92:31:cd:50:ec:
                    7b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B8:99:2E:A2:4A:79:2B:67:32:3C:8A:A8:E0:89:23:20:40:96:F9
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a633a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:91:7e:ac:f0:5e:25:e0:16:64:a4:29:0c:1b:e7:e4:84:71:
         09:0b:1d:14:93:2e:16:17:59:66:31:cb:04:a4:9b:1b:0e:85:
         0a:dc:28:a7:e9:fa:e3:db:e9:cf:41:8e:97:c6:cf:0d:d2:c6:
         56:63:72:ea:3a:f9:12:9f:01:61:20:aa:64:47:a0:4d:d1:3a:
         ae:75:28:cb:2b:a3:d4:1f:72:29:0e:7b:5e:af:77:50:8a:b9:
         28:f8:c4:33:81:9d:e0:7d:a0:ae:fe:f2:65:8a:81:d7:7a:50:
         29:29:92:11:33:32:b4:64:29:f1:e1:20:ec:27:2b:a7:51:eb:
         bc:a9:a0:9d:df:64:b6:13:3a:50:0a:ab:10:2e:f9:78:49:99:
         50:ad:97:46:b1:fb:09:cf:e5:00:3e:79:24:80:c2:88:13:42:
         d7:6a:07:98:59:a5:0d:df:3c:6a:b5:4e:ec:8e:44:c2:25:c0:
         4c:96:89:5c:9e:e9:a8:2c:fa:c7:2d:eb:46:fb:84:43:bc:65:
         ab:44:43:ff:42:72:13:21:cb:bc:21:2a:96:fd:20:e0:03:c5:
         a7:fb:3c:67:a7:5a:21:74:8c:a4:bc:7d:06:0c:91:49:7e:b2:
         2d:d3:29:54:63:50:53:8c:ff:94:d5:a7:41:6c:be:51:35:f2:
         da:86:8e:59
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgIUZdA2w161+5CgMW3ySgmdVbld7sYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTNlMTM1MjE2YTM3NTU0MGJlNWVmMzQ1MmU2YWEzMmEw
YTAzZWFjNjY3Y2I5ZmU2NGUwHhcNMjYwOTE3MTIzMTIwWhcNMjcwOTE2MTIzNjIw
WjAzMTEwLwYDVQQDEyhFMEI4OTkyRUEyNEE3OTJCNjczMjNDOEFBOEUwODkyMzIw
NDA5NkY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9WCxI3ksm/q
CRlAuDxS8hQt9jBYtsXUR6kWCFCmBrZQ3PiNLRPJB2pes5R1SYXQpHm0abAF0BS1
xUHAsSuuGAf6cWzPymDsxEdDImQfNRQLqRj+wm6PFcMAeYYFK91JbGJ79s0azdrc
iebxlSkud5muDHfnCXOuVOUbAYOvgUUkSt7kmiu/fiXUsvbdjntpro/jsdcKUoou
wJu8z6wgdWH3dsFVqf5Kj5qhb/rSXHIngYmGkqI5Air3aegqQPLZhrB8CX+93eMP
rWcx7sHruXxLkLMErbjd2yxUujQmmaWpZ1qWN8AHnMiPwON72s13EVNRDuDNyMUe
kjHNUOx70wIDAQABo4ICtTCCArEwHQYDVR0OBBYEFOC4mS6iSnkrZzI8iqjgiSMg
QJb5MB8GA1UdIwQYMBaAFJB1EYPkO6TqsWr2BLUEHo/+8x3yMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODg5YzNlYWUwMTg4YWZmNjY3MzQwOTRkLzAv
OTA3NTExODNFNDNCQTRFQUIxNkFGNjA0QjUwNDFFOEZGRUYzMURGMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjLzA3NDNlYWNmLWJjNGYtNGM4YS05MTQwLTEzNDdiNmZhNmVlNS9hM2Ux
MzUyMTZhMzc1NTQwYmU1ZWYzNDUyZTZhYTMyYTBhMDNlYWM2NjdjYjlmZTY0ZS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4OWMzZWFlMDE4OGFm
ZjY2NzM0MDk0ZC8wLzMyMzYzMDMyM2E2NjYxNjQzNDNhNjMzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzOTMwMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+tQADDANBgkqhkiG9w0B
AQsFAAOCAQEAkZF+rPBeJeAWZKQpDBvn5IRxCQsdFJMuFhdZZjHLBKSbGw6FCtwo
p+n649vpz0GOl8bPDdLGVmNy6jr5Ep8BYSCqZEegTdE6rnUoyyuj1B9yKQ57Xq93
UIq5KPjEM4Gd4H2grv7yZYqB13pQKSmSETMytGQp8eEg7Ccrp1HrvKmgnd9kthM6
UAqrEC75eEmZUK2XRrH7Cc/lAD55JIDCiBNC12oHmFmlDd88arVO7I5EwiXATJaJ
XJ7pqCz6xy3rRvuEQ7xlq0RD/0JyEyHLvCEqlv0g4APFp/s8Z6daIXSMpLx9BgyR
SX6yLdMpVGNQU4z/lNWnQWy+UTXy2oaOWQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:31:28 2026 by rpki-client