Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a663a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a663a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          ETFO7qwWBsKdIARV+cLPGzbse4C3P71O2K53KkpY5mw=
Subject key identifier:   CE:F5:A2:71:74:8A:B0:2C:96:B8:0E:6A:01:BA:34:4E:B6:B8:1F:5D
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       41C321DA4E22FEB6897FA7B09184B3F487F8C375
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a663a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 17 Sep 2026 12:36:20 +0000
ROA not before:           Thu 17 Sep 2026 12:31:20 +0000
ROA not after:            Thu 16 Sep 2027 12:36:20 +0000
asID:                     9009
IP address blocks:        2602:fad4:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:57:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c3:21:da:4e:22:fe:b6:89:7f:a7:b0:91:84:b3:f4:87:f8:c3:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Sep 17 12:31:20 2026 GMT
            Not After : Sep 16 12:36:20 2027 GMT
        Subject: CN=CEF5A271748AB02C96B80E6A01BA344EB6B81F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a8:4e:01:5d:21:6f:83:5c:27:94:ee:36:bd:
                    b0:f7:40:1a:6a:7a:17:cf:4b:21:c0:d3:97:b5:f3:
                    63:42:1a:fe:b5:48:21:ef:62:99:9b:17:db:da:af:
                    c8:41:56:e1:7b:b1:8d:27:de:af:38:4a:0d:75:d7:
                    a8:e3:ab:02:df:9b:86:59:0a:ba:fa:24:64:8a:b7:
                    d4:5c:50:69:2d:27:de:d3:42:6c:1b:12:28:b4:db:
                    8f:14:ae:57:82:3d:6f:7e:86:73:32:48:31:00:bd:
                    b2:02:48:e5:99:6b:bd:98:9d:55:01:c7:bb:50:ac:
                    80:cc:37:d8:50:ca:a0:80:15:6b:a1:89:9a:cb:99:
                    d3:28:d3:7c:d2:fd:34:4a:64:03:f1:e1:01:e0:de:
                    a6:8d:7b:d0:88:49:50:4d:73:5a:41:8a:bc:6a:89:
                    ab:d2:b8:68:9f:9e:fd:27:14:4b:25:03:e9:d6:a7:
                    6d:c4:f7:ca:a4:ae:66:e4:c1:69:c3:d0:81:12:5c:
                    1f:b4:7c:ff:46:cd:23:19:36:83:cf:e6:37:a8:4e:
                    e5:3d:b4:ef:a4:24:e4:5a:0d:b8:93:2d:66:ee:ec:
                    0f:eb:09:ee:91:89:14:55:f3:fb:bb:fb:01:9d:09:
                    03:a9:37:6c:2c:2f:72:4c:83:46:f3:67:03:b2:27:
                    56:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F5:A2:71:74:8A:B0:2C:96:B8:0E:6A:01:BA:34:4E:B6:B8:1F:5D
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a663a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:d9:87:e2:5a:07:6c:d9:dd:87:bd:2e:0c:eb:30:3e:35:74:
         e5:67:7b:42:87:e8:b2:0d:a2:c2:30:ff:58:0c:31:04:c8:c3:
         76:ed:c5:ee:82:5e:eb:d0:4e:0d:87:f9:60:ba:da:6b:b7:8b:
         70:5f:10:3c:f3:30:ef:23:93:ac:30:f8:d0:b4:5c:94:51:41:
         63:fd:fd:35:04:21:e3:65:de:d2:1f:d3:ba:5c:5a:15:fb:89:
         47:e3:e3:4d:e0:01:ef:b4:b1:76:c5:14:5f:dc:11:9e:fb:37:
         9a:df:08:4e:1d:d0:8a:ee:36:62:d5:85:fb:c8:a9:83:ec:29:
         82:5e:e5:d7:cd:3f:44:60:d3:26:4f:65:39:d4:df:59:0a:10:
         c5:67:f0:06:47:85:89:97:fd:0c:33:ae:c0:61:85:0b:9b:cd:
         33:5c:de:6e:bc:fd:d2:57:41:89:e1:5a:a0:d8:89:e1:d2:76:
         a4:07:4c:57:ba:85:6d:c1:c8:13:b8:66:e5:77:25:a4:87:2d:
         ac:79:50:5f:44:57:20:26:84:e6:c0:53:08:54:98:3f:71:40:
         c5:7a:3e:88:f2:9e:e3:39:09:0e:ac:ac:ba:06:33:f5:45:20:
         5b:77:43:b5:fc:ed:70:06:a2:17:35:b0:5d:88:17:fc:6e:fa:
         9e:13:7b:ff
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgIUQcMh2k4i/raJf6ewkYSz9If4w3UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTNlMTM1MjE2YTM3NTU0MGJlNWVmMzQ1MmU2YWEzMmEw
YTAzZWFjNjY3Y2I5ZmU2NGUwHhcNMjYwOTE3MTIzMTIwWhcNMjcwOTE2MTIzNjIw
WjAzMTEwLwYDVQQDEyhDRUY1QTI3MTc0OEFCMDJDOTZCODBFNkEwMUJBMzQ0RUI2
QjgxRjVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqhOAV0hb4Nc
J5TuNr2w90AaanoXz0shwNOXtfNjQhr+tUgh72KZmxfb2q/IQVbhe7GNJ96vOEoN
ddeo46sC35uGWQq6+iRkirfUXFBpLSfe00JsGxIotNuPFK5Xgj1vfoZzMkgxAL2y
AkjlmWu9mJ1VAce7UKyAzDfYUMqggBVroYmay5nTKNN80v00SmQD8eEB4N6mjXvQ
iElQTXNaQYq8aomr0rhon579JxRLJQPp1qdtxPfKpK5m5MFpw9CBElwftHz/Rs0j
GTaDz+Y3qE7lPbTvpCTkWg24ky1m7uwP6wnukYkUVfP7u/sBnQkDqTdsLC9yTING
82cDsidW3wIDAQABo4ICtTCCArEwHQYDVR0OBBYEFM71onF0irAslrgOagG6NE62
uB9dMB8GA1UdIwQYMBaAFJB1EYPkO6TqsWr2BLUEHo/+8x3yMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODg5YzNlYWUwMTg4YWZmNjY3MzQwOTRkLzAv
OTA3NTExODNFNDNCQTRFQUIxNkFGNjA0QjUwNDFFOEZGRUYzMURGMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjLzA3NDNlYWNmLWJjNGYtNGM4YS05MTQwLTEzNDdiNmZhNmVlNS9hM2Ux
MzUyMTZhMzc1NTQwYmU1ZWYzNDUyZTZhYTMyYTBhMDNlYWM2NjdjYjlmZTY0ZS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4OWMzZWFlMDE4OGFm
ZjY2NzM0MDk0ZC8wLzMyMzYzMDMyM2E2NjYxNjQzNDNhNjYzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzOTMwMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+tQADzANBgkqhkiG9w0B
AQsFAAOCAQEANtmH4loHbNndh70uDOswPjV05Wd7Qofosg2iwjD/WAwxBMjDdu3F
7oJe69BODYf5YLraa7eLcF8QPPMw7yOTrDD40LRclFFBY/39NQQh42Xe0h/Tulxa
FfuJR+PjTeAB77SxdsUUX9wRnvs3mt8ITh3Qiu42YtWF+8ipg+wpgl7l180/RGDT
Jk9lOdTfWQoQxWfwBkeFiZf9DDOuwGGFC5vNM1zebrz90ldBieFaoNiJ4dJ2pAdM
V7qFbcHIE7hm5XclpIctrHlQX0RXICaE5sBTCFSYP3FAxXo+iPKe4zkJDqysugYz
9UUgW3dDtfztcAaiFzWwXYgX/G76nhN7/w==
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:31:48 2026 by rpki-client