Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38343a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a38343a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          em5CLM/fEvw+JZ3TXq4IN3qEy7sZZl/y8P4gIE0tAuw=
Subject key identifier:   F4:26:5A:18:0C:2F:EA:2B:DB:E3:B1:89:44:CF:5C:A6:34:2D:48:A2
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       4366FF8C9272B8DA5DA7CAA34AE6DF0C40FF9BC8
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38343a3a2f34382d3438203d3e203534313438.roa
Signing time:             Thu 26 Feb 2026 08:03:21 +0000
ROA not before:           Thu 26 Feb 2026 07:58:21 +0000
ROA not after:            Thu 25 Feb 2027 08:03:21 +0000
asID:                     54148
IP address blocks:        2602:fa43:84::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:66:ff:8c:92:72:b8:da:5d:a7:ca:a3:4a:e6:df:0c:40:ff:9b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Feb 26 07:58:21 2026 GMT
            Not After : Feb 25 08:03:21 2027 GMT
        Subject: CN=F4265A180C2FEA2BDBE3B18944CF5CA6342D48A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:26:75:0d:1c:28:f5:d7:0e:69:13:f5:d9:1c:
                    78:df:1a:f2:25:36:e4:d0:eb:e6:30:ab:18:61:e2:
                    ca:fd:0a:77:a0:36:4c:d5:cf:71:bc:db:55:68:eb:
                    fc:67:0c:ad:f2:91:16:16:97:69:68:eb:b4:af:8c:
                    0a:54:d8:5a:37:a1:83:7b:4a:1d:b3:b5:25:ea:ae:
                    1d:8d:0e:61:b7:ce:9b:e4:7b:d9:00:75:0f:f9:11:
                    5a:c8:57:51:53:8a:59:8f:61:18:07:ee:ae:20:42:
                    ad:2d:af:0c:08:d4:f1:f8:fa:d9:f4:f0:c7:8a:0d:
                    f3:34:7f:7d:a1:63:26:91:70:46:aa:b8:30:95:2a:
                    fe:da:42:5d:d9:c6:d1:5e:34:da:26:1f:cb:9d:1d:
                    7c:09:1f:db:60:50:1b:76:5d:32:72:33:e9:fd:f6:
                    44:40:7a:f8:56:b6:91:e0:9a:a7:85:96:79:de:60:
                    69:2f:b2:47:0f:0b:18:81:e3:e1:9b:f5:43:5d:ca:
                    f3:f3:ab:e8:dd:07:c3:17:d6:83:8b:ed:92:79:30:
                    cd:b5:00:0d:21:2d:7f:e4:8a:4c:7f:ca:83:cc:04:
                    e7:b6:cd:51:29:1e:5b:5e:78:95:d0:aa:45:df:00:
                    40:0e:24:db:df:6d:75:07:27:dc:65:c5:b2:d5:38:
                    cd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:26:5A:18:0C:2F:EA:2B:DB:E3:B1:89:44:CF:5C:A6:34:2D:48:A2
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38343a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:84::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:0e:3c:ef:ab:b0:50:1b:86:84:81:94:db:4f:fc:16:59:8d:
         98:a2:51:fa:da:4c:11:65:b2:37:21:10:d7:4e:7f:25:82:f2:
         86:7e:e5:e6:c6:00:be:0d:3a:fc:6f:45:7c:1f:17:24:bd:3c:
         a8:ab:64:05:d3:71:dc:e8:9e:c7:c7:cc:e6:fd:8f:d1:10:40:
         b7:4f:d3:7c:ae:6c:16:58:77:2e:91:21:cd:99:fc:a2:77:d9:
         7f:c8:78:3a:38:83:00:02:cc:bb:d2:43:39:d9:61:ab:0d:e5:
         a4:0e:72:15:03:0d:88:59:69:f2:61:ad:49:6e:99:a3:24:e6:
         0b:f7:91:0d:b2:e9:47:e5:2b:13:86:09:b7:d2:7a:b5:0e:95:
         38:09:06:5f:ed:d5:44:dc:92:13:20:e2:ee:88:9f:b9:c4:59:
         9f:7b:51:46:d9:48:c6:99:a7:7f:a3:7e:40:44:74:67:48:99:
         5f:4b:e3:f6:28:f2:9d:37:f1:92:80:cd:66:7d:0c:61:de:c6:
         7a:df:2b:bd:b2:06:bf:59:62:31:80:31:72:f0:5a:42:97:06:
         ac:ff:87:36:cc:52:29:8d:b2:d2:fe:bd:83:1a:be:03:8e:0f:
         57:1c:72:1b:89:5a:a0:c9:55:49:b0:57:55:a8:b0:a3:56:1c:
         1e:42:23:d4
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUQ2b/jJJyuNpdp8qjSubfDED/m8gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2VjYWUzMjA0OTUyZGE3NGViMWI5MzcxNGI2N2NjNjFi
YzRmN2IxNTk1YTIxMzI3ODgwHhcNMjYwMjI2MDc1ODIxWhcNMjcwMjI1MDgwMzIx
WjAzMTEwLwYDVQQDEyhGNDI2NUExODBDMkZFQTJCREJFM0IxODk0NENGNUNBNjM0
MkQ0OEEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyZ1DRwo9dcO
aRP12Rx43xryJTbk0OvmMKsYYeLK/Qp3oDZM1c9xvNtVaOv8Zwyt8pEWFpdpaOu0
r4wKVNhaN6GDe0ods7Ul6q4djQ5ht86b5HvZAHUP+RFayFdRU4pZj2EYB+6uIEKt
La8MCNTx+PrZ9PDHig3zNH99oWMmkXBGqrgwlSr+2kJd2cbRXjTaJh/LnR18CR/b
YFAbdl0ycjPp/fZEQHr4VraR4JqnhZZ53mBpL7JHDwsYgePhm/VDXcrz86vo3QfD
F9aDi+2SeTDNtQANIS1/5IpMf8qDzATnts1RKR5bXniV0KpF3wBADiTb3211Byfc
ZcWy1TjNgwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFPQmWhgML+or2+OxiUTPXKY0
LUiiMB8GA1UdIwQYMBaAFARA7JGuBOgEkb9mFzYJfzVpx9sbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyYmFjYjdhYmI3YTI4LzMv
MDQ0MEVDOTFBRTA0RTgwNDkxQkY2NjE3MzYwOTdGMzU2OUM3REIxQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiL2VlMWJkZmY4LWRiYjUtNGYwZi05OGU2LWM4ZTEzMjZiYTc5Yi83ZWNh
ZTMyMDQ5NTJkYTc0ZWIxYjkzNzE0YjY3Y2M2MWJjNGY3YjE1OTVhMjEzMjc4OC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5MmJh
Y2I3YWJiN2EyOC8zLzMyMzYzMDMyM2E2NjYxMzQzMzNhMzgzNDNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDM1MzQzMTM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvpDAIQwDQYJKoZI
hvcNAQELBQADggEBAJ4OPO+rsFAbhoSBlNtP/BZZjZiiUfraTBFlsjchENdOfyWC
8oZ+5ebGAL4NOvxvRXwfFyS9PKirZAXTcdzonsfHzOb9j9EQQLdP03yubBZYdy6R
Ic2Z/KJ32X/IeDo4gwACzLvSQznZYasN5aQOchUDDYhZafJhrUlumaMk5gv3kQ2y
6UflKxOGCbfSerUOlTgJBl/t1UTckhMg4u6In7nEWZ97UUbZSMaZp3+jfkBEdGdI
mV9L4/Yo8p038ZKAzWZ9DGHexnrfK72yBr9ZYjGAMXLwWkKXBqz/hzbMUimNstL+
vYMavgOOD1ccchuJWqDJVUmwV1WosKNWHB5CI9Q=
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:39 2026 by rpki-client