Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61633a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a61633a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          hAEp2GX08FTW5D0ahh89/eTN3X4c52QiSNTN6ra145o=
Subject key identifier:   A4:32:12:36:8C:FC:93:6F:48:FC:D5:B8:4C:A1:72:FA:B4:19:FF:F9
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       02F6F51C61670D84A34CF55FD76A7147B6B8DB3E
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61633a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 27 Aug 2026 21:45:56 +0000
ROA not before:           Thu 27 Aug 2026 21:40:56 +0000
ROA not after:            Thu 26 Aug 2027 21:45:56 +0000
asID:                     54148
IP address blocks:        2602:fa43:ac::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f6:f5:1c:61:67:0d:84:a3:4c:f5:5f:d7:6a:71:47:b6:b8:db:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Aug 27 21:40:56 2026 GMT
            Not After : Aug 26 21:45:56 2027 GMT
        Subject: CN=A43212368CFC936F48FCD5B84CA172FAB419FFF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:22:b3:ba:3c:cd:b9:40:da:bb:db:6b:96:5c:
                    74:f3:85:db:d2:76:b2:6a:91:4e:52:95:e4:08:ba:
                    20:23:dc:b6:b6:14:68:a0:08:ac:e4:7b:38:79:82:
                    16:4b:25:3c:46:15:d5:55:63:73:ff:79:78:da:09:
                    50:8e:96:44:12:95:56:4f:c7:09:54:3a:92:78:ac:
                    c2:a5:30:10:85:9c:12:3d:4f:86:ee:6f:ba:9f:63:
                    b5:ea:47:24:ec:59:e6:29:3f:c4:dd:2a:6d:53:51:
                    e9:a9:30:1d:41:85:22:21:a3:11:e2:cb:3e:16:a6:
                    d6:85:34:46:cb:15:bc:25:26:e8:16:9f:ff:ef:db:
                    12:5c:24:4a:a8:60:e5:14:d7:6a:cf:58:dc:72:19:
                    22:2c:e5:9c:b8:e0:01:75:f8:b8:7d:54:ec:cd:d9:
                    0d:9a:c7:16:49:e3:78:1c:00:18:c7:53:e9:86:57:
                    ab:07:5f:4a:2e:e4:33:35:e8:09:c8:12:29:00:b5:
                    57:17:51:5b:e3:6f:d9:c9:a1:75:a8:b2:bd:55:52:
                    c3:dc:c1:1b:88:1a:74:b1:89:cf:31:29:eb:24:54:
                    28:e6:b4:4a:75:68:ac:4c:1d:bc:b7:cc:c1:60:a4:
                    08:1b:d4:d4:d5:6e:57:e6:88:2f:ec:9c:c2:79:e0:
                    67:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:32:12:36:8C:FC:93:6F:48:FC:D5:B8:4C:A1:72:FA:B4:19:FF:F9
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61633a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:ac::/46

    Signature Algorithm: sha256WithRSAEncryption
         a8:03:08:a6:ca:ec:f1:fd:ed:d8:af:c6:bd:b8:7c:ad:f9:be:
         60:90:ee:92:1c:6c:42:ba:80:cd:99:7c:c1:74:65:fc:d5:88:
         3e:6f:32:29:5c:52:8c:c3:0d:eb:b4:cb:87:f2:27:ce:00:75:
         04:2a:c6:a2:70:81:e2:34:68:9f:a8:b3:6d:56:97:e0:52:fa:
         68:df:b4:d3:9e:11:29:94:c1:fc:d0:24:04:97:0c:fb:21:5b:
         bf:06:20:c4:20:fa:d2:92:fc:00:61:e7:01:ba:40:33:6f:38:
         9e:9c:48:8d:7d:a9:28:ee:cd:f1:f3:e4:58:2b:d3:cb:8c:af:
         d7:f0:dc:d8:ec:f7:1e:7c:cb:b7:13:95:9f:81:b1:e3:df:cb:
         51:82:7d:ac:6d:91:b7:a8:37:e1:6a:9c:cb:15:26:cf:87:cd:
         ee:29:b7:3f:f0:bf:c7:43:a1:46:77:8d:b6:ed:52:ca:58:32:
         f4:4f:3b:1d:01:bc:7f:d2:e5:b5:37:55:56:c1:87:41:e2:fd:
         a0:1c:b5:2e:70:2b:93:6c:d8:1e:ae:b5:c6:72:8e:e8:d0:27:
         c8:15:66:0f:4f:71:7c:64:0f:45:d4:33:5a:12:3b:c2:ee:d3:
         22:16:c0:68:8b:b5:42:dc:b1:6b:4f:41:32:57:1f:d1:75:a3:
         38:2d:69:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:31:39 2026 by rpki-client