Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3136363a3a2f34382d3438203d3e203534323836.roa
File:                     323630323a666161383a3136363a3a2f34382d3438203d3e203534323836.roa (raw, json)
Hash identifier:          O1en27YiLNGzAx6+JOd/xDGFZsVf3ka6pvR1nmrOjsU=
Subject key identifier:   1F:40:DB:24:01:6E:7F:2E:FA:EA:F6:AC:6B:E5:18:84:24:FE:A2:A8
Certificate issuer:       /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial:       0B82C27AF6B96C913A16FACE288D1CDC23C56B58
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3136363a3a2f34382d3438203d3e203534323836.roa
Signing time:             Wed 12 Aug 2026 15:01:55 +0000
ROA not before:           Wed 12 Aug 2026 14:56:55 +0000
ROA not after:            Wed 11 Aug 2027 15:01:55 +0000
asID:                     54286
IP address blocks:        2602:faa8:166::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 03:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:82:c2:7a:f6:b9:6c:91:3a:16:fa:ce:28:8d:1c:dc:23:c5:6b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
        Validity
            Not Before: Aug 12 14:56:55 2026 GMT
            Not After : Aug 11 15:01:55 2027 GMT
        Subject: CN=1F40DB24016E7F2EFAEAF6AC6BE5188424FEA2A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:93:e5:95:e3:e9:fc:0e:fa:15:01:11:e4:
                    6c:3b:1f:aa:0c:9f:a6:10:14:fe:af:24:ec:a0:f7:
                    e1:75:4e:2b:a0:6a:8e:e4:64:cd:c1:40:78:68:df:
                    79:d7:9a:a1:71:65:01:51:6e:46:57:ef:79:0c:5c:
                    70:dd:79:ff:3f:94:6b:e9:94:51:c4:e9:38:d1:1d:
                    12:31:a7:e8:d6:5b:d2:f3:38:81:94:97:f2:15:17:
                    94:1e:72:4c:1d:13:33:8f:ac:f4:b1:c3:20:e6:e0:
                    f3:d7:02:a3:09:e5:08:c7:88:83:f1:38:c5:25:80:
                    54:fe:b1:3a:fb:39:fe:12:d0:49:61:a7:b8:f5:95:
                    34:d0:e0:8b:99:a5:cb:69:8e:87:8e:ef:7d:76:cd:
                    f4:69:fd:d2:4d:3f:91:b6:b9:f5:38:78:1f:b0:fb:
                    ec:fa:40:45:1f:6d:3e:76:80:2f:ff:1a:bf:1a:f8:
                    5d:4d:58:0b:89:da:2a:a7:47:31:8c:9b:9e:f8:48:
                    c1:68:08:4b:a7:e6:7c:9b:06:a0:70:b9:70:0c:86:
                    f2:0f:86:52:15:0e:65:70:9c:95:ca:b4:90:a4:ac:
                    9a:3d:bd:a6:d6:66:16:bb:ae:5d:5e:f5:8e:22:07:
                    97:a6:ba:1c:97:8a:bd:e4:e2:60:b6:d3:f4:f2:ca:
                    2c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:40:DB:24:01:6E:7F:2E:FA:EA:F6:AC:6B:E5:18:84:24:FE:A2:A8
            X509v3 Authority Key Identifier:
                keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3136363a3a2f34382d3438203d3e203534323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:166::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:8a:9b:93:84:cd:02:ff:b4:33:47:80:1b:10:fd:ca:9f:1d:
         e3:21:37:5b:c2:a2:25:cf:50:96:c6:7f:b4:99:ad:5c:e5:61:
         1d:e0:0b:44:9a:64:04:97:81:68:aa:c2:b7:dd:ed:a8:b3:c9:
         6b:bc:b8:9d:be:d7:71:06:28:2c:93:f6:cf:f1:ef:be:32:a6:
         0e:42:1e:a1:c9:83:c0:67:c4:34:45:7f:dc:3c:d8:30:d5:aa:
         45:9a:bd:c3:70:57:79:15:1d:dc:97:ba:ed:7d:a3:2d:b2:58:
         77:84:20:7c:a2:a5:66:a9:db:c8:7c:c7:71:4f:4a:e9:f4:d1:
         b1:3b:77:14:52:34:2c:22:a5:b9:19:0b:66:81:1b:da:92:11:
         d0:37:9d:95:c4:1e:42:d8:0a:56:90:28:75:55:9f:d2:17:ab:
         79:29:0f:8e:51:1a:40:26:19:de:38:77:48:92:bf:61:9d:60:
         34:d0:3d:de:1e:69:e3:03:ce:18:1f:76:ce:3f:04:81:c2:c6:
         07:a7:a3:49:37:46:6a:45:c8:5f:0a:81:9c:02:aa:e3:cc:0c:
         8c:31:13:99:c2:e5:af:6f:4b:cd:6d:f4:e0:83:9d:1d:35:40:
         1b:4f:36:cc:69:7d:b9:2e:e9:44:2c:cd:fa:90:50:98:9c:7e:
         1d:75:c7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:33:52 2026 by rpki-client