Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32383a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a32383a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          zyYYEujh2sOsnUi9u7LettNN4PrELnr83zb6/jnLASY=
Subject key identifier:   50:51:52:52:F8:F8:F9:2E:14:B5:91:63:B9:7E:61:05:7C:98:DB:16
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       6B5832B384AF06E4F5B2D28698421AEF8F9AC3F1
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32383a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 27 Aug 2026 21:45:57 +0000
ROA not before:           Thu 27 Aug 2026 21:40:57 +0000
ROA not after:            Thu 26 Aug 2027 21:45:57 +0000
asID:                     54148
IP address blocks:        2602:fa43:28::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 19:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:58:32:b3:84:af:06:e4:f5:b2:d2:86:98:42:1a:ef:8f:9a:c3:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Aug 27 21:40:57 2026 GMT
            Not After : Aug 26 21:45:57 2027 GMT
        Subject: CN=50515252F8F8F92E14B59163B97E61057C98DB16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:db:b3:f7:32:9b:c2:6a:67:65:b2:55:09:
                    f4:11:0d:1d:97:35:cb:0d:59:3e:a1:18:40:3b:15:
                    31:cc:74:7d:e0:2a:73:f7:42:08:cf:ae:c0:2a:26:
                    82:13:72:7a:a6:4e:6f:44:c1:65:83:8c:0b:38:56:
                    03:fc:cf:83:ea:0a:e8:fc:3a:b8:4e:c8:15:a0:f4:
                    df:74:80:15:57:3d:57:12:f2:a7:25:2f:66:24:8f:
                    bf:7c:78:99:ed:7f:71:f7:b5:a6:8c:34:de:c9:3c:
                    5b:c5:1b:8e:ed:90:99:7c:3e:3e:4d:d0:6d:e5:70:
                    15:8e:7f:53:7a:d8:78:8b:e3:27:51:c7:b8:18:99:
                    8f:73:37:07:d3:b5:8f:02:ee:6f:0b:88:f1:b5:e2:
                    1f:9c:88:94:b1:79:91:fd:9f:96:63:1f:33:9c:f1:
                    4c:da:82:15:05:ad:b4:c7:cc:41:93:a8:a1:8f:34:
                    36:c9:4f:fd:37:38:ae:3b:16:5c:14:a8:5f:aa:26:
                    4b:c0:dc:7a:95:86:ea:a8:86:58:32:ae:56:90:22:
                    c9:a8:92:30:30:64:d3:a3:c8:a3:98:55:50:12:d0:
                    8f:de:eb:be:2b:8d:70:b7:64:00:99:5a:b7:98:b8:
                    ba:74:b3:88:16:c6:6f:28:82:5f:7b:1a:16:38:65:
                    f5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:51:52:52:F8:F8:F9:2E:14:B5:91:63:B9:7E:61:05:7C:98:DB:16
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32383a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:28::/46

    Signature Algorithm: sha256WithRSAEncryption
         70:00:2e:d5:ed:bd:e1:3b:c8:09:72:c4:35:4b:c3:53:d1:9e:
         b7:84:a9:71:89:ee:69:6c:9b:d6:40:c9:c1:3f:bd:b9:5c:ac:
         8d:b9:ee:f3:3b:f4:e9:2d:5a:c6:e6:ba:a9:3a:43:10:8a:8b:
         01:eb:11:c3:85:65:f3:a8:12:52:6c:63:37:97:c8:03:13:15:
         40:62:34:31:16:7e:60:d2:a1:e3:ea:e0:d3:7d:f7:9f:a6:fd:
         66:31:87:38:f8:b6:17:cc:f3:54:0a:f2:02:17:13:b9:d8:71:
         bf:e3:6a:41:60:c1:8c:7d:45:1d:d3:52:06:a1:a9:3a:ea:c6:
         0a:ea:84:e8:ce:ae:a8:45:30:06:03:b8:f2:66:53:d1:2f:75:
         b7:3b:99:e7:ea:56:ef:0c:59:c3:64:72:7a:12:69:14:9d:24:
         23:cb:37:9f:de:55:7d:6b:02:52:ae:31:5a:e6:88:b6:90:ee:
         9b:36:78:c1:5b:3d:5b:74:66:29:e4:d0:81:a9:6b:f4:ad:8f:
         65:49:82:2a:65:aa:69:87:b8:0c:6f:c8:6f:3d:84:12:67:bc:
         9c:9b:e7:f1:bb:9c:19:bf:e7:bb:40:dc:74:08:5f:c7:06:e6:
         d5:8a:f0:b2:0a:ec:43:b1:49:97:e3:f5:79:bf:20:1b:fe:15:
         70:36:7a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:53:21 2026 by rpki-client