Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61343a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a61343a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          DLJEAfxZo4VcYDPmMHAx/QrTmbZH2KNbD7JgjzewY4o=
Subject key identifier:   8B:DB:BC:78:A3:A2:A4:8C:BB:86:9C:E2:A5:45:43:62:AE:76:EE:43
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       4B209920E458AC2D80510083BE0C0428F075A2E3
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61343a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 27 Aug 2026 21:45:56 +0000
ROA not before:           Thu 27 Aug 2026 21:40:56 +0000
ROA not after:            Thu 26 Aug 2027 21:45:56 +0000
asID:                     54148
IP address blocks:        2602:fa43:a4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 19:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:20:99:20:e4:58:ac:2d:80:51:00:83:be:0c:04:28:f0:75:a2:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Aug 27 21:40:56 2026 GMT
            Not After : Aug 26 21:45:56 2027 GMT
        Subject: CN=8BDBBC78A3A2A48CBB869CE2A5454362AE76EE43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f1:64:a4:e9:0f:a7:ea:c8:c3:fa:42:69:de:
                    58:39:74:2c:24:5e:86:85:1e:7a:74:0e:61:19:0d:
                    2a:43:45:6c:8f:dc:9b:3a:5f:84:f5:8f:51:5b:58:
                    d1:4b:c1:ef:3b:7e:52:90:4f:70:b4:5e:56:a0:85:
                    ce:48:9a:d8:e5:5e:a9:74:ad:01:2d:c5:12:3e:b8:
                    ee:0d:9d:a7:a9:f4:c7:c7:10:85:48:b3:11:5c:54:
                    7b:93:1d:1a:83:e6:7d:fb:74:c1:6b:e9:e0:5f:62:
                    f8:ef:63:87:be:0d:6a:69:37:70:b7:9b:18:58:f9:
                    e8:44:6d:be:7f:82:30:3c:d5:4c:55:dd:0d:6e:2d:
                    2c:0f:cb:f8:2b:b9:22:67:de:50:99:e8:42:a2:31:
                    7f:81:85:45:59:b4:b4:cb:3c:34:be:09:a5:60:a8:
                    73:52:dd:46:44:68:20:94:63:c6:3b:9f:ff:a1:31:
                    fa:5c:8c:e1:51:49:1a:97:93:0d:30:c8:48:ed:76:
                    1b:1e:1b:66:08:62:bd:8e:d6:5b:dc:91:fa:e6:b7:
                    6f:de:25:cb:a7:52:83:c5:55:86:31:44:fd:8c:d8:
                    6b:13:f5:d6:57:cf:7e:39:59:4e:1b:50:dd:65:17:
                    5d:56:0f:7c:5a:00:ed:d6:3d:0a:7f:d5:19:cc:00:
                    ce:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DB:BC:78:A3:A2:A4:8C:BB:86:9C:E2:A5:45:43:62:AE:76:EE:43
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61343a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:a4::/46

    Signature Algorithm: sha256WithRSAEncryption
         7b:3a:72:f6:c7:45:cf:16:8d:53:50:0c:79:5b:ef:a5:bc:1a:
         63:f0:1f:87:b1:6a:bc:1c:13:6f:53:53:4a:38:37:f3:8c:bd:
         f0:7f:8d:d3:e7:a7:2b:8b:5b:bd:28:c0:ad:d7:bb:78:16:71:
         17:4e:23:39:de:1f:71:63:18:27:df:89:76:47:03:1e:9e:42:
         f3:3b:ba:29:c2:91:b9:94:60:50:87:ae:5e:d1:78:ee:5c:5a:
         1d:30:af:40:76:4a:ca:1c:e6:b0:37:44:ee:d9:39:c5:53:7f:
         d3:d8:88:8e:23:0c:03:1f:db:b0:5c:7a:5f:cc:a1:bd:4d:f8:
         d7:b8:df:61:7b:ba:84:f9:75:c6:a4:f2:e1:05:6d:d6:22:ee:
         a6:be:4e:33:54:5d:ac:63:d0:ae:33:5b:99:08:de:fd:90:f7:
         73:bf:0b:63:7c:46:0c:91:cf:7c:ce:9a:c3:c8:2b:11:b1:b9:
         b1:11:58:a5:fd:00:09:db:06:fc:1e:04:25:6a:2e:06:1a:ba:
         17:3f:e6:88:5a:4c:75:dc:e7:6a:b6:5a:7c:2e:12:38:5a:65:
         cd:0d:8c:10:01:c0:5d:e9:be:28:b7:fd:8b:60:b4:35:87:ab:
         13:a0:d1:57:9c:e1:82:d9:df:d5:27:6e:be:f7:17:c3:a5:88:
         11:05:1e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:49:56 2026 by rpki-client