Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3a2f33322d3332203d3e203137313339.roa
File:                     323630373a666361383a3a2f33322d3332203d3e203137313339.roa (raw, json)
Hash identifier:          7KOXdX6jxz9J5CaBXye7mp+S2GeFZEjlyPHvSl0CluA=
Subject key identifier:   D6:11:38:A8:A8:BA:76:C6:6D:46:E8:BF:4A:29:62:B1:3E:34:55:41
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       6A8A3ACF59F3D7597B3DA0A6CCC55400AE6968DA
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3a2f33322d3332203d3e203137313339.roa
Signing time:             Sat 13 Jun 2026 06:36:06 +0000
ROA not before:           Sat 13 Jun 2026 06:31:06 +0000
ROA not after:            Sat 12 Jun 2027 06:36:06 +0000
asID:                     17139
IP address blocks:        2607:fca8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8a:3a:cf:59:f3:d7:59:7b:3d:a0:a6:cc:c5:54:00:ae:69:68:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jun 13 06:31:06 2026 GMT
            Not After : Jun 12 06:36:06 2027 GMT
        Subject: CN=D61138A8A8BA76C66D46E8BF4A2962B13E345541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:11:16:6a:c0:8f:4f:83:f7:9f:ba:6d:6f:0b:
                    a5:1f:1d:f0:02:0e:ae:d6:5b:47:3d:21:ce:9d:4e:
                    06:09:30:74:1e:f7:ee:bc:5e:16:8c:13:4a:5d:25:
                    22:7c:4c:9d:21:53:65:f3:b4:c5:98:1f:db:4a:8b:
                    d9:7b:8d:3b:a0:cc:76:3b:9d:7e:98:bf:9c:c4:f6:
                    4d:ca:80:64:1c:90:63:08:e3:4f:97:b8:e3:78:8b:
                    26:ce:28:c1:e0:cb:85:f4:a1:9c:d9:26:90:64:b1:
                    09:0d:2f:f8:16:6e:b7:01:c9:41:1b:d0:3c:c6:e4:
                    08:af:8f:5d:59:76:e9:55:97:2d:85:81:39:97:eb:
                    90:eb:f1:f2:b1:37:73:86:9c:7c:e6:6c:24:8c:0d:
                    fc:fb:c6:da:ab:a9:5e:17:61:89:30:55:a7:69:c0:
                    02:71:1c:5f:72:99:83:fa:37:c4:fb:34:1c:1b:80:
                    66:94:ba:9e:e9:84:35:de:3b:2f:38:86:6d:cf:44:
                    20:1f:0e:98:52:e4:5a:d5:b2:1b:2e:b8:a9:9f:dd:
                    31:b7:d9:e3:49:66:a5:e0:a0:da:43:05:95:12:c9:
                    a5:07:9a:9c:bc:39:b0:58:20:3d:0f:39:3e:eb:09:
                    cc:d1:15:6e:c3:96:cd:7f:ca:73:15:43:b4:c6:ac:
                    a8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:11:38:A8:A8:BA:76:C6:6D:46:E8:BF:4A:29:62:B1:3E:34:55:41
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3a2f33322d3332203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fca8::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:ce:99:4b:53:5f:3c:d2:29:bb:39:9d:f7:90:e1:45:99:5c:
         a8:19:3a:d1:6b:1d:85:5b:78:f2:39:30:d4:7f:c9:58:ee:73:
         2e:48:c5:ef:8c:c2:7b:61:11:5f:1f:22:31:96:5f:66:48:a3:
         75:7e:e5:c2:c9:22:6c:65:c5:f4:14:d5:78:bc:95:dd:af:e0:
         05:32:79:ca:ed:14:7b:59:4b:81:93:16:1e:59:06:13:4a:a3:
         41:71:7e:3b:b7:7b:79:cb:fb:0c:47:99:8c:86:17:4c:6b:8f:
         2b:05:8e:18:05:5d:ce:14:95:18:2f:e2:40:89:87:25:74:42:
         5a:51:78:56:44:b4:23:36:ba:e8:7e:fe:24:31:4c:0b:04:43:
         da:07:a5:69:98:ab:c3:e0:e3:9a:05:06:69:b3:df:dd:80:7e:
         dc:e6:f4:93:99:57:66:c0:d9:c7:be:bb:e9:d2:b8:13:a6:67:
         75:af:53:7d:1b:77:8a:ec:d1:05:cc:a7:a4:28:8c:fb:0f:d9:
         39:26:cc:f7:b4:e7:bf:07:c5:23:5e:2b:3d:44:b5:f0:48:b2:
         b6:da:11:86:e3:20:d9:c5:ce:4b:41:2d:98:de:ef:49:22:e8:
         f9:16:dc:52:fa:9c:ff:ea:19:96:a3:55:c1:a5:14:3f:f7:71:
         d9:82:a4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:28:41 2026 by rpki-client