Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a313a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a313a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          paLq9EMf9cFazhyn/WsGuSwdK0zS9Yb8VkPJYpMaOk0=
Subject key identifier:   B8:26:BE:3F:B4:16:0F:C7:E5:DE:B1:0C:C7:B3:CA:CC:F5:3E:3C:83
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       29E30AA134D5C823ED4E83613188E82FF8F9694B
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a313a3a2f34382d3438203d3e203534313438.roa
Signing time:             Thu 27 Aug 2026 21:45:56 +0000
ROA not before:           Thu 27 Aug 2026 21:40:56 +0000
ROA not after:            Thu 26 Aug 2027 21:45:56 +0000
asID:                     54148
IP address blocks:        2602:fa43:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 19:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e3:0a:a1:34:d5:c8:23:ed:4e:83:61:31:88:e8:2f:f8:f9:69:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Aug 27 21:40:56 2026 GMT
            Not After : Aug 26 21:45:56 2027 GMT
        Subject: CN=B826BE3FB4160FC7E5DEB10CC7B3CACCF53E3C83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:d4:62:01:d5:27:8b:f8:3f:78:1c:d2:c7:
                    96:7f:94:67:6b:57:a5:f3:9e:f9:56:05:9a:a0:e4:
                    cd:a4:8d:77:35:6f:be:98:ad:a0:3e:c8:e1:b0:3b:
                    04:25:03:34:8e:7e:64:46:5c:c1:4f:4c:0d:ab:1f:
                    15:16:de:34:8f:65:31:04:b2:d6:61:d9:ad:43:d5:
                    d6:08:64:a2:1c:09:09:df:a2:cf:94:ca:2b:e5:3a:
                    69:09:e7:db:e7:20:2e:5e:4a:2c:ab:17:dc:2b:24:
                    ba:b0:a3:df:48:28:64:cd:6d:ae:ac:d9:44:5e:f1:
                    84:a7:e6:9d:10:18:f0:88:97:78:99:62:73:b9:f9:
                    a1:59:ca:71:f2:87:30:a9:fd:92:75:da:c2:e2:74:
                    47:bf:e0:34:75:51:48:94:b2:5f:cf:87:98:e6:c8:
                    7e:68:1c:84:ec:fb:5e:7b:99:69:22:60:ab:6e:5a:
                    e9:70:aa:a9:33:e8:a3:39:63:9e:c0:0f:57:91:0d:
                    1f:f8:47:bc:97:3f:be:af:f9:7b:59:a8:cd:02:6e:
                    c5:b7:87:6f:0c:84:99:51:70:d1:25:24:55:ee:1e:
                    83:b2:d2:1c:46:37:e0:73:29:18:d9:ff:bb:05:de:
                    ff:c5:fc:14:36:30:ac:e9:59:95:6e:d4:99:06:c6:
                    6c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:26:BE:3F:B4:16:0F:C7:E5:DE:B1:0C:C7:B3:CA:CC:F5:3E:3C:83
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a313a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:26:3b:a8:91:6c:b5:3a:15:7a:08:3c:10:2a:71:2f:d6:d9:
         07:71:97:be:9b:0d:0d:ca:3d:25:cf:9c:b7:84:d2:e4:bf:54:
         fc:dc:0b:7c:a1:2a:f0:b1:80:37:67:49:0d:22:d2:ca:fa:df:
         7f:de:32:e9:3a:99:8d:94:7b:4b:5d:d0:c4:ea:35:30:bf:0b:
         43:8b:17:5b:49:03:98:41:03:f5:87:a6:26:75:e1:e9:d0:e4:
         f5:87:f9:6c:ab:a6:91:d5:7b:e5:33:f2:95:21:e3:a1:28:a9:
         0d:ad:55:6d:42:c2:c8:28:15:f9:8f:82:50:a2:bd:2a:d7:48:
         2b:12:4f:15:52:1d:1c:68:b4:9a:5c:bc:b4:d2:08:05:bc:b1:
         92:96:70:a4:3e:87:3d:63:93:1c:cf:4a:80:30:b0:e3:70:d6:
         53:57:e7:38:2a:e6:6d:d2:c7:15:74:77:5a:9c:91:ed:77:96:
         1d:6e:9e:21:90:e5:6d:6a:f5:4c:20:06:01:8c:d1:c0:fc:55:
         fc:3c:fe:35:3d:21:49:92:31:2a:61:a0:e2:4d:12:d4:27:b0:
         cf:54:7a:27:06:d1:a7:5a:bb:70:f3:53:68:d5:63:40:0a:d5:
         8a:bc:bf:8d:09:1f:48:d6:cc:bc:e5:64:53:cd:84:d4:59:7a:
         03:f5:87:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:52:41 2026 by rpki-client