Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32343a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a32343a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          QVY4mr94/KpSYhjy+IXy8fT8b9e7oOKP5ip74YtDVKg=
Subject key identifier:   FD:EC:BC:A5:92:F6:55:91:7C:38:5B:5B:DF:EE:F3:B5:2A:AD:D2:F2
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       3BE220D0AB2E01648B8BAC0FA1E4EB160F4AB385
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32343a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 27 Aug 2026 21:45:56 +0000
ROA not before:           Thu 27 Aug 2026 21:40:56 +0000
ROA not after:            Thu 26 Aug 2027 21:45:56 +0000
asID:                     54148
IP address blocks:        2602:fa43:24::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 19:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e2:20:d0:ab:2e:01:64:8b:8b:ac:0f:a1:e4:eb:16:0f:4a:b3:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Aug 27 21:40:56 2026 GMT
            Not After : Aug 26 21:45:56 2027 GMT
        Subject: CN=FDECBCA592F655917C385B5BDFEEF3B52AADD2F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:97:2c:64:b6:36:c9:f3:fc:d7:c5:50:21:63:
                    4f:95:96:6c:ec:68:5e:e5:b4:9f:77:6e:7c:ba:3a:
                    db:c0:b6:74:e9:46:e0:f6:e5:75:2e:9d:06:31:da:
                    9a:a4:3a:6d:c4:ad:91:48:d5:67:f5:6f:2f:99:c7:
                    4e:30:9b:71:ad:2c:6e:4f:73:f1:33:a7:14:6b:74:
                    80:c6:e0:c0:93:f2:35:cc:ac:6f:3c:43:df:f1:02:
                    ba:0e:1c:a9:fb:f8:ad:15:4a:94:dd:61:cc:cc:ed:
                    48:f7:05:a5:8b:d7:6b:bd:e1:1b:5c:18:41:bb:fe:
                    3a:01:74:a7:d5:46:d5:89:3a:d7:c9:2b:8a:3c:37:
                    38:db:64:cf:b9:a2:e1:88:f5:c9:8b:18:e7:c1:25:
                    f7:49:66:b9:b7:cf:b1:58:57:d4:80:4f:83:4f:bf:
                    d1:fd:96:f6:f1:91:d5:57:da:b2:f6:b0:5e:5a:57:
                    4e:96:2a:f7:1a:56:17:bc:d9:70:d8:47:a7:8b:aa:
                    a6:d6:08:2f:c3:5e:9b:0e:27:fe:1e:4b:ba:49:a1:
                    62:35:a2:18:32:69:77:66:ed:f2:fa:89:9c:29:d8:
                    11:30:c5:ba:93:ff:2d:43:1e:b7:c7:53:b5:18:b3:
                    ab:d3:58:74:11:10:54:3c:56:8f:de:a7:25:4f:de:
                    1c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EC:BC:A5:92:F6:55:91:7C:38:5B:5B:DF:EE:F3:B5:2A:AD:D2:F2
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32343a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:24::/46

    Signature Algorithm: sha256WithRSAEncryption
         1c:37:e0:e0:af:8d:7b:36:e8:db:ae:a3:b7:38:87:8e:0b:7d:
         12:2a:db:30:ec:b1:cf:b2:6a:10:dd:2d:0d:78:d6:da:e1:20:
         56:12:d0:71:96:ef:55:3a:13:72:2d:b7:b1:95:e9:23:4e:d4:
         c7:92:54:3a:ee:c6:47:cb:9c:88:c3:da:b1:4e:54:ff:40:4c:
         6f:fb:b0:89:e8:e5:03:be:1d:e7:20:45:4c:c5:1a:8c:9d:fa:
         87:5e:93:6b:05:f5:b9:1f:31:ad:38:84:61:10:9b:52:88:07:
         1c:b4:48:1d:02:fe:8c:39:d1:21:1f:ef:59:a4:b6:db:93:96:
         98:fa:1a:9d:3f:d6:ac:b5:dd:46:a1:7a:56:0f:fc:df:f0:a6:
         07:24:65:f4:e5:6e:75:13:1a:1c:b2:00:93:40:8a:f5:a3:a0:
         7e:88:08:c5:a5:d5:62:b4:b4:9e:d4:5b:d2:fe:af:d7:c8:f6:
         73:60:30:40:34:6e:ba:f8:69:75:7d:f9:64:76:cd:f7:aa:72:
         de:ac:23:ec:fa:73:fc:40:b4:c1:dc:94:be:fc:75:3f:eb:f7:
         c7:b5:bc:60:a2:b7:43:4c:7b:05:54:f0:5e:1b:f4:3c:fb:0b:
         d6:69:51:23:b5:a2:d2:85:e6:a7:cd:9b:b0:bd:25:fc:d8:61:
         fb:9f:e1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 09:23:52 2026 by rpki-client