Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3830303a3a2f34302d3430203d3e203534323138.roa
File:                     323630323a666139623a3830303a3a2f34302d3430203d3e203534323138.roa (raw, json)
Hash identifier:          QxYKHEOzNLwepYQ4eklSkEDP5WLfIL1S3+HQHS8dTAk=
Subject key identifier:   47:23:FC:69:DC:C0:E5:F0:12:3E:0D:66:FF:BD:2A:FE:F2:50:15:1F
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       67A086E37E5F49987F617112211113680BD61D53
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3830303a3a2f34302d3430203d3e203534323138.roa
Signing time:             Tue 27 Jan 2026 21:01:07 +0000
ROA not before:           Tue 27 Jan 2026 20:56:07 +0000
ROA not after:            Tue 26 Jan 2027 21:01:07 +0000
asID:                     54218
IP address blocks:        2602:fa9b:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 08:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a0:86:e3:7e:5f:49:98:7f:61:71:12:21:11:13:68:0b:d6:1d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Jan 27 20:56:07 2026 GMT
            Not After : Jan 26 21:01:07 2027 GMT
        Subject: CN=4723FC69DCC0E5F0123E0D66FFBD2AFEF250151F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:01:73:26:e3:16:dd:ef:91:de:2c:7b:1d:87:
                    c3:22:fc:32:8a:49:3c:58:d6:bb:e1:3e:ee:05:74:
                    1c:c7:69:43:2a:86:16:a4:1a:07:94:a0:44:b9:a9:
                    4f:87:31:60:4d:a5:a1:76:69:63:95:80:f3:78:1a:
                    f6:0f:dd:84:53:36:c3:67:31:63:ef:10:5e:5d:e4:
                    c2:35:88:23:50:20:0f:f8:2d:24:60:94:bf:81:fe:
                    d0:61:86:e6:8a:62:bd:cf:26:7e:7d:71:0e:b9:0f:
                    a5:1e:6c:3e:09:6c:56:ac:fc:a3:32:6d:b9:32:48:
                    52:c9:a5:d0:ec:50:b1:00:2a:58:be:54:be:92:9c:
                    d8:8f:80:f1:36:79:cb:2a:7d:f1:7a:a6:29:91:95:
                    0c:4e:b6:1e:10:89:56:9f:6b:b6:b4:eb:65:00:01:
                    f1:8f:2a:09:17:3c:72:26:30:66:50:de:e3:9e:31:
                    2e:9a:03:ce:fe:cd:b0:85:c9:3a:f4:b4:dd:0e:3d:
                    96:f6:de:48:09:28:71:d8:16:54:78:6e:3d:6d:40:
                    be:cb:0b:30:e4:7c:43:00:16:81:fd:64:79:a3:e6:
                    ff:68:e5:55:8f:e5:0b:fd:70:0f:a1:29:94:a2:c8:
                    91:19:de:ab:23:d9:97:0d:ed:a5:3b:20:6f:f7:cf:
                    9e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:23:FC:69:DC:C0:E5:F0:12:3E:0D:66:FF:BD:2A:FE:F2:50:15:1F
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3830303a3a2f34302d3430203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:38:b8:ad:da:7b:16:3b:9e:58:27:9b:2c:15:e5:ca:19:9f:
         b1:45:b6:bc:8f:29:28:66:e8:0d:5c:07:f3:e9:ac:3b:26:4c:
         cd:dc:22:c2:89:ec:de:15:81:42:41:70:52:29:01:5d:00:39:
         2e:42:f9:77:9f:6b:c1:7c:d7:49:76:39:b1:33:22:13:50:f7:
         dd:bc:ed:e5:b8:e6:12:51:d9:ff:6a:dd:5d:b0:8f:bf:4d:96:
         d3:2b:35:b1:64:77:9f:55:d4:d0:39:ca:e2:e1:6d:56:c5:07:
         88:7e:f7:24:2d:2e:e9:75:f4:60:f1:0b:61:32:5b:fe:eb:90:
         10:a1:22:a8:21:86:81:5b:52:6f:89:84:e6:99:e0:82:55:89:
         a0:bc:7d:7d:9a:3c:38:6a:30:d2:48:e4:0f:d9:52:02:2d:d0:
         ee:07:5c:c8:32:a3:80:f4:fa:ed:36:96:6b:19:62:e2:5d:87:
         c2:bf:9c:86:ab:53:c6:ca:e2:90:1b:1a:23:d9:3a:cb:88:b2:
         38:b5:36:37:93:6e:55:a3:78:78:d2:b6:95:1d:22:49:83:37:
         09:90:c5:64:6a:33:69:c5:d7:dd:a8:10:a5:57:90:1e:0e:c2:
         98:34:ef:84:4e:1e:cf:9f:d1:d5:7c:ad:7c:73:12:06:a5:ab:
         5d:41:26:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:23:48 2026 by rpki-client