Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a31313a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a31313a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          rsdhykxPMkRDzbI6mhjSPjLwcSw+o8dYWZEQGNrSoDI=
Subject key identifier:   46:0E:93:27:52:BD:D9:3F:DE:F1:D8:53:C7:CA:96:62:E2:1D:36:E4
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       14172C62301FE38934FC4BC0892572B83A4A8C50
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a31313a3a2f34382d3438203d3e203534313438.roa
Signing time:             Thu 27 Aug 2026 21:45:57 +0000
ROA not before:           Thu 27 Aug 2026 21:40:57 +0000
ROA not after:            Thu 26 Aug 2027 21:45:57 +0000
asID:                     54148
IP address blocks:        2602:fa43:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 16:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:17:2c:62:30:1f:e3:89:34:fc:4b:c0:89:25:72:b8:3a:4a:8c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Aug 27 21:40:57 2026 GMT
            Not After : Aug 26 21:45:57 2027 GMT
        Subject: CN=460E932752BDD93FDEF1D853C7CA9662E21D36E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:7c:b0:e5:93:26:19:69:12:2d:97:ce:da:
                    0a:94:e1:3a:93:e6:fd:d2:9f:39:64:c5:ab:88:03:
                    fa:f1:c0:b1:23:3a:88:38:aa:ba:0f:a0:c2:67:14:
                    a1:28:cb:f4:5f:f3:35:fe:77:f2:df:41:22:5c:0c:
                    3b:6c:57:54:95:e7:fc:7d:45:ac:be:e2:b2:58:7f:
                    2b:b8:06:36:24:5e:46:df:03:c0:51:e8:97:f9:6c:
                    a4:94:70:56:1c:8f:4c:51:89:1b:5a:35:86:3d:18:
                    5f:29:61:21:7d:3f:cc:38:f5:9b:c6:81:67:e0:d4:
                    5f:24:ff:20:3b:0f:5d:18:cb:33:58:b4:6f:40:cd:
                    14:06:29:49:c2:6c:c4:26:a0:db:f0:57:9e:33:2a:
                    ce:47:bb:64:ae:5e:03:70:a0:85:d1:26:c7:72:48:
                    bd:b8:6b:fb:1e:98:48:56:84:90:1a:6b:b7:48:61:
                    a9:79:a4:1b:50:d7:e1:d5:7c:ee:3e:dc:02:e4:bc:
                    bd:34:e2:8b:97:dd:07:de:62:56:6f:48:ea:4d:5f:
                    e6:30:ed:ae:5c:e5:9b:b5:c7:d7:1d:67:e0:a6:bb:
                    55:90:0f:ca:e8:f0:6a:2d:6b:75:02:0e:fc:73:3e:
                    c3:1d:39:2e:fe:fb:af:be:a7:9c:0e:13:cc:c0:45:
                    c2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0E:93:27:52:BD:D9:3F:DE:F1:D8:53:C7:CA:96:62:E2:1D:36:E4
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a31313a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:7d:fb:f6:e5:a5:b7:fe:ca:c4:72:75:a7:73:f0:de:1f:c8:
         3e:6c:63:99:98:25:17:57:0e:4a:07:e2:e2:0e:97:cf:34:f5:
         6a:e0:95:18:ce:58:cf:37:06:2a:1c:59:74:2d:c9:e0:64:f3:
         3a:65:a5:42:75:a6:71:ec:e6:87:76:44:13:c3:b0:77:52:0d:
         f3:b5:0e:eb:95:33:97:82:ae:59:b9:20:c8:3d:df:c1:31:0b:
         6e:65:60:4b:bc:36:94:5c:2d:15:01:a9:f6:3f:34:e2:ed:90:
         b5:7f:2e:77:6a:36:72:0f:7b:fc:f6:fa:70:fa:24:06:8c:77:
         c2:56:0d:61:c0:a3:6c:2f:9e:80:85:2f:48:01:cb:53:18:ed:
         ca:ba:76:00:00:c9:ac:f2:a9:80:fb:de:05:f1:29:7e:72:60:
         5d:24:db:3b:01:da:96:44:f0:87:ce:96:f5:9b:c7:62:4f:0e:
         41:f9:3e:fc:d3:02:b2:5c:a9:74:ff:72:ba:4d:3b:29:ca:21:
         88:90:c7:da:bf:7b:d3:45:cd:99:44:82:60:51:e2:bd:5c:fe:
         79:db:3e:74:3b:26:64:cd:7e:e6:09:06:12:d7:e2:e5:74:6e:
         db:0a:e2:30:1d:e4:1f:b8:2b:ee:e0:3e:d7:b5:b0:f4:88:4f:
         93:f7:af:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:49:30 2026 by rpki-client