Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39303a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a39303a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          VqtMKdg/PZEG1h7rlIy7c1/NqFVA8+MAZQW4DytSeVw=
Subject key identifier:   D3:3E:99:A7:99:F6:D2:6D:51:C6:34:97:1F:D0:B9:0B:3B:F6:F0:B8
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       72162DBB499C2373094CCF27EC6E9E864AC44DA1
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39303a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 27 Aug 2026 21:45:56 +0000
ROA not before:           Thu 27 Aug 2026 21:40:56 +0000
ROA not after:            Thu 26 Aug 2027 21:45:56 +0000
asID:                     54148
IP address blocks:        2602:fa43:90::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:16:2d:bb:49:9c:23:73:09:4c:cf:27:ec:6e:9e:86:4a:c4:4d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Aug 27 21:40:56 2026 GMT
            Not After : Aug 26 21:45:56 2027 GMT
        Subject: CN=D33E99A799F6D26D51C634971FD0B90B3BF6F0B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:f5:10:c6:dd:9c:a9:79:f8:8a:14:b2:f8:
                    70:d1:cb:2a:b9:4e:86:e3:47:e9:c3:93:67:a2:1e:
                    ba:08:46:80:5e:4b:f0:f7:75:34:06:d1:94:46:52:
                    30:76:e4:fe:b4:a5:4d:65:c4:40:c1:3d:30:6f:8e:
                    a3:50:56:09:f0:74:13:d9:8f:cc:8e:7a:77:f9:4e:
                    82:7b:21:13:94:37:f0:cf:a2:3c:f4:40:75:42:68:
                    a1:93:57:b2:0a:56:54:4d:82:87:f8:ad:13:ba:12:
                    94:ad:32:c7:54:8e:01:c1:89:88:1a:b0:69:28:c7:
                    1d:8a:ff:ef:90:38:15:97:ab:52:6f:8e:cf:fa:a9:
                    f6:94:23:73:d4:8e:e0:c0:80:f6:13:7c:a4:b8:f3:
                    f4:86:8d:2e:e5:ae:ad:42:32:7b:52:6c:e0:26:a0:
                    59:b3:a6:e4:82:9e:a5:a6:7f:d0:c9:61:a3:b9:26:
                    15:41:20:ec:cb:c6:82:92:ec:1c:03:f9:de:5b:3f:
                    32:3b:4b:dd:27:05:e0:e1:dd:00:e8:e3:c8:34:7c:
                    c1:f1:71:03:66:94:a8:ec:1f:7d:fd:86:59:c3:7a:
                    76:2a:65:ac:39:fa:0b:ea:c0:83:a3:32:2f:89:44:
                    41:50:25:c5:eb:56:89:11:ea:69:a0:66:21:34:37:
                    3a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3E:99:A7:99:F6:D2:6D:51:C6:34:97:1F:D0:B9:0B:3B:F6:F0:B8
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39303a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:90::/46

    Signature Algorithm: sha256WithRSAEncryption
         54:ad:95:d9:5c:0c:68:b3:ab:ab:f8:9c:a4:b7:e5:18:a0:8b:
         01:dc:7e:51:81:94:cd:64:24:c8:84:8a:f0:4b:ad:d7:dd:b4:
         fe:6c:35:02:90:a0:2c:95:cc:77:5b:05:a3:aa:f1:43:3e:c3:
         6a:71:70:e6:ca:57:8a:2b:ee:34:14:20:ff:f5:30:05:9c:f8:
         d9:09:ff:fb:e7:93:ad:a0:12:24:6c:d0:66:cf:40:8c:1e:15:
         57:a7:26:76:67:3d:4e:4a:bb:2d:ed:19:12:92:7c:f2:fc:15:
         63:58:47:14:f8:d5:27:34:1a:12:8e:f3:4f:2e:fd:67:81:a5:
         b6:5e:b3:2f:d5:e1:ab:20:8c:ab:2c:cc:e8:9f:89:da:18:a4:
         78:d8:fc:fb:fc:ac:07:6a:3e:a0:36:13:5b:81:e1:eb:84:25:
         76:8d:c1:13:0b:d2:cc:1d:87:f4:15:a9:12:5c:f5:74:38:f7:
         8b:0f:92:95:4a:08:b2:f6:5e:0c:69:32:b5:dc:15:e7:bb:6b:
         26:7c:7f:30:f5:ee:72:4f:35:62:d3:15:41:d1:10:1b:5b:45:
         47:e2:63:93:01:0b:33:24:97:a5:c7:0f:34:37:b7:59:dd:0f:
         91:b4:d7:68:6c:98:20:97:d1:35:59:ed:c4:80:7d:d8:88:d8:
         d7:bc:d8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:10:10 2026 by rpki-client