Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a34303a3a2f34342d3434203d3e203534313438.roa
File:                     323630323a666134333a34303a3a2f34342d3434203d3e203534313438.roa (raw, json)
Hash identifier:          krWUYlc0JQEVNTp8YVhhXMwoQbKd911/Mz702FtxMCY=
Subject key identifier:   98:89:B7:DF:2E:72:EF:11:82:DD:F2:26:83:5D:B4:02:D1:D7:5D:89
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       7CC909F7D8448D65B66C5708F928A159DFCE2B3E
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a34303a3a2f34342d3434203d3e203534313438.roa
Signing time:             Thu 27 Aug 2026 21:45:57 +0000
ROA not before:           Thu 27 Aug 2026 21:40:57 +0000
ROA not after:            Thu 26 Aug 2027 21:45:57 +0000
asID:                     54148
IP address blocks:        2602:fa43:40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c9:09:f7:d8:44:8d:65:b6:6c:57:08:f9:28:a1:59:df:ce:2b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Aug 27 21:40:57 2026 GMT
            Not After : Aug 26 21:45:57 2027 GMT
        Subject: CN=9889B7DF2E72EF1182DDF226835DB402D1D75D89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:ee:bc:64:c3:b1:95:20:a1:0e:2f:b5:0b:
                    ee:34:21:00:d1:93:64:ca:40:7d:a4:48:22:46:e5:
                    08:18:17:4f:c4:93:4a:f6:96:02:11:fb:fc:b9:8f:
                    79:2e:96:bf:fe:8b:2d:6c:21:b4:64:80:4b:2b:0b:
                    be:2b:b2:3a:9c:89:e9:04:8f:79:bb:6d:ac:f0:72:
                    c1:32:1d:ca:b3:c0:c3:66:70:5d:fe:b8:ca:92:86:
                    fc:ae:55:d9:b9:1f:39:d5:82:85:53:eb:c3:85:97:
                    46:37:55:56:d4:2d:27:34:ee:32:d7:d8:f2:40:3d:
                    16:b4:83:ea:29:d5:6f:f9:c2:7d:2a:97:92:40:10:
                    ea:e4:7d:b1:84:e4:b2:e2:c0:5c:df:58:08:3f:76:
                    0b:5e:b3:93:5f:aa:bb:d0:2f:10:f7:2f:6d:e3:47:
                    2e:71:d7:6f:17:7e:92:49:10:59:45:a2:6b:03:ca:
                    14:bf:58:af:62:9f:8d:c5:ef:96:9c:a0:8a:7f:a3:
                    37:bf:23:40:99:57:a5:c3:7f:99:68:f3:69:11:80:
                    1e:18:45:82:8c:3a:62:a0:6a:0a:2a:48:cf:a5:0e:
                    06:63:d8:8b:9b:91:88:91:8d:21:1b:52:25:7b:99:
                    ff:f0:bf:22:4a:ff:30:36:49:1f:b6:4e:db:b6:b0:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:89:B7:DF:2E:72:EF:11:82:DD:F2:26:83:5D:B4:02:D1:D7:5D:89
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a34303a3a2f34342d3434203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         8e:a1:45:cb:0a:58:48:64:3f:d0:c0:23:96:f6:a3:36:15:89:
         1c:af:6d:85:34:4f:77:1e:eb:68:0f:f0:c8:0d:c3:44:0f:ca:
         42:03:17:c4:67:c5:3a:38:18:eb:09:12:a5:f0:cd:b8:65:f1:
         5e:91:06:16:a6:29:e1:30:20:a7:22:fc:80:66:b1:25:07:d3:
         43:8d:3d:14:62:89:a7:44:d3:75:bf:b1:e7:53:0d:8a:84:17:
         c3:1d:02:ca:42:7d:77:d5:61:b8:b3:c8:36:e6:9b:64:43:44:
         68:37:27:ce:7f:59:c7:9b:b2:89:c5:5b:f2:19:4d:fb:ba:d2:
         38:47:7c:4a:f8:69:2a:00:b6:8a:55:6c:69:21:6a:ca:64:8b:
         4e:8d:7f:53:10:0e:06:ba:f0:62:95:0d:bc:47:b8:89:94:de:
         9c:8a:b8:e9:4e:ce:48:14:73:19:eb:68:c4:93:ed:78:de:29:
         d6:de:86:83:c9:69:a6:eb:37:4f:34:91:ac:22:d8:5b:83:d7:
         06:f9:02:9b:7c:66:fd:32:3e:63:6c:3d:e8:7e:96:50:46:ef:
         a2:8b:3b:26:fe:da:78:76:37:fb:5a:b4:88:d9:36:20:04:92:
         7c:a4:06:e6:61:78:4f:e3:5e:73:55:25:59:2b:e8:d0:c9:a4:
         60:b7:dc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:34:54 2026 by rpki-client