Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/323630353a643638303a3a2f33322d3332203d3e203633333133.roa
File:                     323630353a643638303a3a2f33322d3332203d3e203633333133.roa (raw, json)
Hash identifier:          GSS55MXyjE6LAicm24zyEAIPZdGYk0JEgWoGUIs4A3g=
Subject key identifier:   9C:46:39:1D:F4:C9:94:A6:BE:13:D0:1A:04:DC:24:14:36:71:09:19
Certificate issuer:       /CN=98eab7485ad707cd27e7a50e79cff2d6a62a5e30af4760c808
Certificate serial:       2A057B671E4A171C0B9B40CAF7DCB560CC9A402A
Authority key identifier: FE:09:09:84:0E:0B:9E:54:6B:93:59:35:21:2C:E4:FA:64:85:E0:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036/98eab7485ad707cd27e7a50e79cff2d6a62a5e30af4760c808.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/323630353a643638303a3a2f33322d3332203d3e203633333133.roa
Signing time:             Wed 09 Sep 2026 10:27:09 +0000
ROA not before:           Wed 09 Sep 2026 10:22:09 +0000
ROA not after:            Wed 08 Sep 2027 10:27:09 +0000
asID:                     63313
IP address blocks:        2605:d680::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/FE0909840E0B9E546B935935212CE4FA6485E0F7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/FE0909840E0B9E546B935935212CE4FA6485E0F7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036/98eab7485ad707cd27e7a50e79cff2d6a62a5e30af4760c808.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036/317008f4-3048-4330-a34b-2a36dfe0f036.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036/317008f4-3048-4330-a34b-2a36dfe0f036.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:15:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:05:7b:67:1e:4a:17:1c:0b:9b:40:ca:f7:dc:b5:60:cc:9a:40:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98eab7485ad707cd27e7a50e79cff2d6a62a5e30af4760c808
        Validity
            Not Before: Sep  9 10:22:09 2026 GMT
            Not After : Sep  8 10:27:09 2027 GMT
        Subject: CN=9C46391DF4C994A6BE13D01A04DC241436710919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c1:43:40:60:39:8b:c2:d1:82:0d:da:40:48:
                    be:31:45:c0:e5:8c:d2:69:f0:ab:ac:1c:95:f7:b5:
                    99:c9:7b:99:c7:ff:98:28:68:15:b9:54:93:0f:44:
                    a9:02:8b:7e:63:2a:52:fe:9b:ac:ce:53:90:22:bf:
                    34:ed:20:68:39:b2:4e:cb:9a:74:55:73:b0:9b:94:
                    36:91:0e:8d:24:c7:d4:eb:d9:c2:de:33:01:13:58:
                    79:78:8e:08:f7:e3:02:4f:e1:ee:07:ff:15:18:1e:
                    c7:ea:94:12:9b:ef:e3:92:b5:28:0f:24:57:dc:7c:
                    0d:34:e5:9c:f1:31:cf:0c:7e:7b:6c:ae:10:5b:40:
                    21:37:d4:20:d4:56:f8:e8:42:a4:5e:3a:61:f6:c7:
                    cf:d5:e3:2f:7a:e8:b2:6c:a5:d6:88:af:52:5c:41:
                    06:82:ca:43:60:7a:bf:11:31:10:bb:6d:98:31:cb:
                    e7:d9:12:27:24:e0:14:21:ca:d8:0a:86:88:d7:d4:
                    87:49:ee:c8:82:4b:94:25:fc:8e:d4:7a:f2:3f:c5:
                    e0:8f:f9:4c:77:0e:51:7f:f4:f7:6a:e1:f9:fe:ee:
                    12:36:d0:5d:08:ba:21:82:16:51:96:c2:64:7e:8d:
                    4f:81:61:b4:9f:82:84:96:c3:45:eb:9a:13:ca:75:
                    d4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:46:39:1D:F4:C9:94:A6:BE:13:D0:1A:04:DC:24:14:36:71:09:19
            X509v3 Authority Key Identifier:
                keyid:FE:09:09:84:0E:0B:9E:54:6B:93:59:35:21:2C:E4:FA:64:85:E0:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/FE0909840E0B9E546B935935212CE4FA6485E0F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036/98eab7485ad707cd27e7a50e79cff2d6a62a5e30af4760c808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/323630353a643638303a3a2f33322d3332203d3e203633333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:d680::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:b7:ad:8b:59:f3:16:a9:9c:ea:92:47:af:b9:0a:bf:9d:0b:
         27:cd:4e:9b:6b:30:e3:5c:99:dd:3b:41:b0:ad:67:9c:bb:8d:
         39:80:fa:4d:39:ef:b7:d4:19:58:9e:1d:e4:4f:31:a4:7b:bc:
         c9:a8:70:25:52:7c:94:ce:43:86:75:48:90:bf:6b:0a:0a:0e:
         ac:75:81:93:75:c3:fa:76:6b:44:a0:10:c8:bf:c5:d5:d5:df:
         2a:24:02:f7:55:d9:d0:0b:ac:97:1c:be:db:f2:41:3c:44:b6:
         ec:da:9e:fa:02:02:9f:1b:6e:88:51:88:75:73:cf:f3:7b:a7:
         da:ac:1b:e1:96:69:37:95:73:83:14:7e:86:07:33:7b:b7:8d:
         b2:04:e4:10:38:a6:3a:dd:a1:d9:50:eb:b9:9f:e1:11:88:56:
         56:fa:0a:ac:4a:a9:15:0a:eb:3b:d4:89:5b:ed:a0:2e:cb:3c:
         f3:70:2b:ce:d1:89:4b:a5:27:eb:11:db:c6:30:6d:32:af:10:
         d3:ed:16:b7:65:ff:af:11:7e:87:51:fb:3d:73:cd:70:07:03:
         a2:5b:00:4a:0b:c0:73:f6:61:8b:9c:90:66:33:e9:6b:d2:0a:
         ce:d0:14:bf:6d:9e:d6:15:c4:d0:ab:8f:83:1f:ee:9f:d9:fa:
         a5:86:28:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:20:54 2026 by rpki-client