Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          bGYa6ee4jVoFTtVRTb+Otl8UWRiZxpm30gUzSRP/dOY=
Subject key identifier:   BA:F9:9E:A5:12:AB:2E:27:45:1D:37:0E:4D:A0:40:82:C7:6A:4F:DB
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       7E34ECBA64E1A3613D02EE1ADC06DBD6976F9D70
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a3a2f34382d3438203d3e203534313438.roa
Signing time:             Thu 27 Aug 2026 21:45:57 +0000
ROA not before:           Thu 27 Aug 2026 21:40:57 +0000
ROA not after:            Thu 26 Aug 2027 21:45:57 +0000
asID:                     54148
IP address blocks:        2602:fa43::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:34:ec:ba:64:e1:a3:61:3d:02:ee:1a:dc:06:db:d6:97:6f:9d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Aug 27 21:40:57 2026 GMT
            Not After : Aug 26 21:45:57 2027 GMT
        Subject: CN=BAF99EA512AB2E27451D370E4DA04082C76A4FDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0a:4d:f8:07:5e:e5:b3:f4:56:1c:82:11:68:
                    51:8e:1b:fe:b7:17:6b:7e:22:e9:f3:fd:04:a4:c4:
                    bc:04:fe:92:72:36:42:e5:e4:46:13:1a:fd:82:0e:
                    cb:e4:69:88:88:ec:65:59:4f:30:cd:ef:8c:71:e1:
                    4f:f8:fd:02:89:2e:8d:4e:c6:5e:5f:f2:f1:41:50:
                    42:1c:f8:d9:61:a3:50:d8:da:cc:3b:d0:a5:f1:d3:
                    05:ef:8c:66:0d:12:b5:50:2c:7d:12:24:ad:e6:71:
                    24:f7:fa:3c:0d:bd:f8:66:39:28:1d:83:9b:18:03:
                    49:2b:64:d5:45:d9:2d:33:1d:b0:08:79:58:5d:02:
                    27:a7:23:62:34:74:61:b4:a1:a1:71:63:ff:dd:da:
                    4b:d8:19:7b:30:b7:03:b8:58:72:4a:09:ae:63:d9:
                    c8:b4:ec:94:37:1e:a0:cf:7c:0c:75:6a:d2:45:b9:
                    5d:ba:27:bb:6a:32:0c:d9:8b:f2:c5:67:6e:f7:4e:
                    76:96:be:df:2e:a4:b3:66:05:b8:ad:5a:14:f6:dd:
                    b1:b3:92:a0:f4:b5:2b:e7:37:87:3b:d8:89:ea:d8:
                    ca:a0:a6:ca:1b:c3:79:90:52:2c:53:98:19:e4:5b:
                    45:f2:a5:6c:1b:6c:71:ae:dc:40:c6:a8:6d:b8:4d:
                    13:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F9:9E:A5:12:AB:2E:27:45:1D:37:0E:4D:A0:40:82:C7:6A:4F:DB
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:c6:6c:de:89:0c:6e:00:c5:22:bf:2c:35:9e:9f:5a:74:6b:
         34:56:48:c8:e1:44:a8:ad:5d:cd:7c:f0:c3:7a:2b:c7:d5:a9:
         09:55:c2:97:e2:10:be:f1:03:32:6c:d8:f4:ea:51:3f:45:06:
         11:09:8e:06:c3:f6:43:eb:ca:f7:a5:98:2b:1f:df:57:a4:4d:
         be:ad:dc:85:e4:5f:62:d2:ea:15:58:85:83:ec:ac:ee:76:9b:
         b8:b1:2b:3c:7c:38:b0:66:8a:45:e1:91:a2:64:79:a6:a5:ca:
         62:d0:30:5b:2f:7a:6b:b4:65:0c:19:fd:f6:ef:8c:2c:c0:64:
         d0:8c:d5:81:d9:62:ba:fb:5b:55:8b:18:50:28:0b:f2:bf:a4:
         47:aa:e7:82:42:d8:9b:dd:87:28:c9:d1:2a:de:76:7c:22:74:
         94:2e:94:d6:1c:e5:04:ac:7f:75:fb:8e:ae:9e:d6:f3:21:69:
         8a:c4:e1:65:a2:de:db:5e:c2:04:24:a9:3b:b6:38:58:fb:d7:
         71:d8:20:c4:56:d0:68:89:97:5e:a8:54:ac:4e:be:f9:b6:49:
         c3:c4:f1:af:8b:73:b7:ca:08:20:5d:da:b2:6b:76:42:8c:0a:
         ad:a8:5d:14:65:b0:7b:b1:82:0e:45:8b:89:84:83:89:e1:e4:
         8b:5e:06:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:58:52 2026 by rpki-client