Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a323a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a323a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          JxjxiZyNs/ZoVrvh+Gg588VPN5YQTsCgcQo3GUfF/ok=
Subject key identifier:   9F:AB:CF:05:A7:68:7F:D5:89:12:FD:CB:22:5D:61:6D:4C:EF:05:94
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       6C7EC373FD2316C182634EACA905E53DB8C88CC1
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a323a3a2f34382d3438203d3e203534313438.roa
Signing time:             Thu 27 Aug 2026 21:45:57 +0000
ROA not before:           Thu 27 Aug 2026 21:40:57 +0000
ROA not after:            Thu 26 Aug 2027 21:45:57 +0000
asID:                     54148
IP address blocks:        2602:fa43:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 19:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7e:c3:73:fd:23:16:c1:82:63:4e:ac:a9:05:e5:3d:b8:c8:8c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Aug 27 21:40:57 2026 GMT
            Not After : Aug 26 21:45:57 2027 GMT
        Subject: CN=9FABCF05A7687FD58912FDCB225D616D4CEF0594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c7:06:d6:76:08:d7:dc:25:61:ba:47:f4:39:
                    9a:40:6f:a5:c8:ac:45:8d:16:7d:22:8a:89:c6:b8:
                    73:1d:7d:b2:dc:8b:ee:03:22:0c:32:81:9f:df:2a:
                    0b:ea:30:66:d0:c3:73:65:8c:89:c2:e6:ee:9c:9f:
                    2e:91:9c:38:30:c6:7e:72:97:0d:8b:26:47:99:5e:
                    f8:c9:f4:9b:04:67:9d:43:b5:f6:60:6d:52:95:f0:
                    19:ba:9a:10:f3:25:26:e0:a2:45:ca:01:05:47:92:
                    ec:c0:95:ff:7c:e3:6e:c0:f4:41:97:1f:93:14:d4:
                    0c:8c:95:62:94:53:cb:97:d4:ab:e7:51:c7:8a:83:
                    1b:8d:5d:42:b2:c8:53:68:b2:51:69:ec:26:30:3b:
                    70:ce:6b:df:aa:27:6d:22:23:af:74:46:7e:53:3a:
                    44:dc:e8:31:70:9b:f0:7f:ea:e5:e7:2f:74:c6:6a:
                    d4:2d:7b:61:99:e3:74:d9:99:c4:c7:33:ec:90:af:
                    50:e6:1d:16:9b:67:1d:de:af:38:4d:a8:16:a8:63:
                    74:fb:46:36:4d:ba:77:15:66:ca:7d:49:41:9e:06:
                    63:e6:8a:37:5a:da:c5:6e:54:80:c4:c3:34:00:b7:
                    7a:ed:bf:4a:99:41:b5:65:4b:98:db:7c:65:63:3e:
                    fb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AB:CF:05:A7:68:7F:D5:89:12:FD:CB:22:5D:61:6D:4C:EF:05:94
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a323a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:99:ae:fa:b6:2f:d0:e4:c9:7a:a2:e4:04:10:00:de:e7:1b:
         7a:6b:7b:01:f1:78:6f:d3:95:0c:bc:f0:7e:e9:30:79:aa:7b:
         ff:13:f0:37:79:34:24:75:e7:7d:45:99:32:ff:f2:59:5d:36:
         df:d2:60:62:76:ca:e4:5b:12:e3:44:11:65:66:2c:de:01:c9:
         09:1e:2a:eb:01:f2:a1:fa:ea:5d:ef:ef:4b:d1:3e:f5:6f:1d:
         47:c0:8f:62:dd:57:6c:a0:39:c1:18:62:93:53:cf:62:5d:95:
         c7:83:55:7b:04:f5:6c:bc:85:9d:fb:26:df:9a:79:3e:83:f6:
         03:32:10:bc:42:47:65:db:f9:3e:5d:fc:f5:64:9b:b2:ab:d0:
         60:59:02:82:a0:06:65:91:10:49:f2:91:34:0b:28:33:d7:ff:
         a2:f7:0a:b6:51:c8:9b:de:2c:52:be:e8:da:89:f7:05:77:a5:
         ce:f4:c3:15:bd:77:6d:5c:c3:cd:63:1b:ec:d2:c8:68:fe:a1:
         97:fd:e2:80:61:eb:ea:ea:3c:e3:21:2a:a9:fa:48:2c:71:44:
         18:5b:31:2b:57:fa:b6:bb:79:9a:e3:13:bb:a3:68:76:f5:80:
         71:8e:41:fc:f0:05:c5:b2:0c:72:82:6f:24:ae:5d:cd:93:9f:
         ec:be:c3:1f
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUbH7Dc/0jFsGCY06sqQXlPbjIjMEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2VjYWUzMjA0OTUyZGE3NGViMWI5MzcxNGI2N2NjNjFi
YzRmN2IxNTk1YTIxMzI3ODgwHhcNMjYwODI3MjE0MDU3WhcNMjcwODI2MjE0NTU3
WjAzMTEwLwYDVQQDEyg5RkFCQ0YwNUE3Njg3RkQ1ODkxMkZEQ0IyMjVENjE2RDRD
RUYwNTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ccG1nYI19wl
YbpH9DmaQG+lyKxFjRZ9IoqJxrhzHX2y3IvuAyIMMoGf3yoL6jBm0MNzZYyJwubu
nJ8ukZw4MMZ+cpcNiyZHmV74yfSbBGedQ7X2YG1SlfAZupoQ8yUm4KJFygEFR5Ls
wJX/fONuwPRBlx+TFNQMjJVilFPLl9Sr51HHioMbjV1CsshTaLJRaewmMDtwzmvf
qidtIiOvdEZ+UzpE3OgxcJvwf+rl5y90xmrULXthmeN02ZnExzPskK9Q5h0Wm2cd
3q84TagWqGN0+0Y2Tbp3FWbKfUlBngZj5oo3WtrFblSAxMM0ALd67b9KmUG1ZUuY
23xlYz77tQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFJ+rzwWnaH/ViRL9yyJdYW1M
7wWUMB8GA1UdIwQYMBaAFARA7JGuBOgEkb9mFzYJfzVpx9sbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyYmFjYjdhYmI3YTI4LzMv
MDQ0MEVDOTFBRTA0RTgwNDkxQkY2NjE3MzYwOTdGMzU2OUM3REIxQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiL2VlMWJkZmY4LWRiYjUtNGYwZi05OGU2LWM4ZTEzMjZiYTc5Yi83ZWNh
ZTMyMDQ5NTJkYTc0ZWIxYjkzNzE0YjY3Y2M2MWJjNGY3YjE1OTVhMjEzMjc4OC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5MmJh
Y2I3YWJiN2EyOC8zLzMyMzYzMDMyM2E2NjYxMzQzMzNhMzIzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzNTM0MzEzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6QwACMA0GCSqGSIb3
DQEBCwUAA4IBAQAOma76ti/Q5Ml6ouQEEADe5xt6a3sB8Xhv05UMvPB+6TB5qnv/
E/A3eTQkded9RZky//JZXTbf0mBidsrkWxLjRBFlZizeAckJHirrAfKh+upd7+9L
0T71bx1HwI9i3VdsoDnBGGKTU89iXZXHg1V7BPVsvIWd+ybfmnk+g/YDMhC8Qkdl
2/k+Xfz1ZJuyq9BgWQKCoAZlkRBJ8pE0Cygz1/+i9wq2Ucib3ixSvujaifcFd6XO
9MMVvXdtXMPNYxvs0sho/qGX/eKAYevq6jzjISqp+kgscUQYWzErV/q2u3ma4xO7
o2h29YBxjkH88AXFsgxygm8krl3Nk5/svsMf
-----END CERTIFICATE-----
Generated at Sun Sep 20 11:52:49 2026 by rpki-client