Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38303a3a2f34342d3434203d3e203534313438.roa
File:                     323630323a666134333a38303a3a2f34342d3434203d3e203534313438.roa (raw, json)
Hash identifier:          UmQMuJqHax06XYZwxN/Gje1RX50JbfNifixrSsQANfU=
Subject key identifier:   3A:30:52:5E:31:30:F1:E0:76:A4:A7:8D:22:FC:6C:08:B2:0B:CD:A3
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       12F8FBA23A991AE02D6181FF522E34E630DD316C
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38303a3a2f34342d3434203d3e203534313438.roa
Signing time:             Thu 27 Aug 2026 21:45:56 +0000
ROA not before:           Thu 27 Aug 2026 21:40:56 +0000
ROA not after:            Thu 26 Aug 2027 21:45:56 +0000
asID:                     54148
IP address blocks:        2602:fa43:80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f8:fb:a2:3a:99:1a:e0:2d:61:81:ff:52:2e:34:e6:30:dd:31:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Aug 27 21:40:56 2026 GMT
            Not After : Aug 26 21:45:56 2027 GMT
        Subject: CN=3A30525E3130F1E076A4A78D22FC6C08B20BCDA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:fa:38:f6:8f:13:2b:5f:06:03:48:95:19:
                    02:c3:d5:bd:c4:58:23:d6:bc:c4:5c:a0:2c:e5:b1:
                    da:49:f7:b9:cd:c7:fd:e2:42:97:d5:1f:43:d6:f0:
                    5a:64:7b:21:3f:96:c0:30:69:99:7f:ea:a3:c9:24:
                    1b:78:fe:d6:f5:cb:5b:ee:6f:41:4a:98:71:d6:15:
                    89:c1:70:6f:b1:ed:d5:1b:9b:e0:d1:d9:9d:da:21:
                    23:12:85:95:d7:4f:13:d4:d3:14:aa:c3:b9:e8:45:
                    6f:49:e6:09:15:c3:d8:b7:d8:5f:84:80:ea:58:ec:
                    c9:25:d3:fb:2f:2e:aa:b3:25:f6:a3:c3:2e:90:5d:
                    17:d1:5c:ab:a8:c9:1f:27:c3:43:0a:b9:26:30:e9:
                    df:76:cd:7d:60:8c:1d:dc:2a:8b:4c:03:91:76:fd:
                    c6:89:f5:06:04:a4:9d:a0:cd:23:28:21:0c:ec:f7:
                    2e:00:38:4d:5c:58:41:92:ab:5f:bd:ae:55:55:4a:
                    33:e1:36:8d:08:7c:bd:e6:85:b0:7d:46:69:42:f8:
                    be:a9:cb:38:d4:b6:87:07:b7:31:74:a2:e2:5d:bd:
                    d1:f4:7a:fc:a1:5f:ed:b6:1d:7a:ca:0f:d3:5b:09:
                    67:b1:05:86:f9:f5:f9:b0:c1:df:02:af:3a:25:98:
                    e0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:30:52:5E:31:30:F1:E0:76:A4:A7:8D:22:FC:6C:08:B2:0B:CD:A3
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38303a3a2f34342d3434203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         3e:75:72:2b:c7:1f:5d:8e:6a:2c:cf:f4:d7:b9:68:46:48:c5:
         29:b9:01:92:cd:19:2d:59:55:27:f1:b9:b9:2e:f6:09:37:22:
         79:8e:81:1b:8c:3a:e4:cd:13:61:b8:80:04:3e:f7:0a:f7:84:
         7e:fe:10:8e:07:66:2f:64:d3:ab:a6:e1:4f:f6:c0:98:6e:45:
         ed:70:a8:a4:ac:b7:9d:d1:57:c7:22:ff:90:37:53:f1:28:1a:
         a2:dd:25:95:d2:df:72:5f:5e:08:7e:05:39:c4:91:8d:f7:33:
         54:6e:8f:65:7a:02:d8:ec:31:41:e5:fd:2f:10:ca:46:af:b0:
         02:37:2e:96:c9:20:29:af:42:32:24:9b:b2:a4:cf:96:18:27:
         0a:79:41:d4:f4:16:dd:c7:5a:7d:b9:0a:e2:fb:9d:bc:cb:49:
         93:bb:15:f2:cf:9f:ee:31:ac:27:ff:ec:78:be:2d:3e:60:e7:
         80:9c:cb:4a:e4:67:3e:7f:14:06:d9:0c:fe:ee:8d:7e:31:de:
         a2:18:c8:03:0f:de:1d:f8:a8:3b:b8:71:1d:9b:2d:9a:75:fa:
         dc:3c:53:19:96:31:31:5c:c6:4a:84:9c:5f:da:e6:11:9b:9b:
         c8:6f:96:9c:6b:1a:fc:c5:d4:ff:eb:8d:90:35:76:34:b0:0a:
         e1:71:7e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:59:32 2026 by rpki-client