Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61353a3a2f34382d3438203d3e20323139343132.roa
File:                     323630323a663962613a61353a3a2f34382d3438203d3e20323139343132.roa (raw, json)
Hash identifier:          yqM4Ub9aMu6Ef0NLpcMG81xV7qyYOne5DTmJaRrO3Oo=
Subject key identifier:   8A:A4:93:B2:77:E1:8B:26:C3:1D:17:F5:51:1E:D4:4B:DA:DC:D7:BC
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       7732BA07B6011913C87E15784CB488A858CDBB6F
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61353a3a2f34382d3438203d3e20323139343132.roa
Signing time:             Sat 19 Sep 2026 23:25:02 +0000
ROA not before:           Sat 19 Sep 2026 23:20:02 +0000
ROA not after:            Sat 18 Sep 2027 23:25:02 +0000
asID:                     219412
IP address blocks:        2602:f9ba:a5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:32:ba:07:b6:01:19:13:c8:7e:15:78:4c:b4:88:a8:58:cd:bb:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Sep 19 23:20:02 2026 GMT
            Not After : Sep 18 23:25:02 2027 GMT
        Subject: CN=8AA493B277E18B26C31D17F5511ED44BDADCD7BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2f:b6:39:14:b9:a0:c3:73:39:5f:6b:5a:fb:
                    51:37:64:21:09:c8:78:93:2a:93:07:2c:af:9e:a1:
                    a9:db:bc:13:e7:d9:ed:b7:d4:49:ed:b1:2b:e6:a4:
                    81:5b:d9:be:89:88:cc:f8:56:ee:27:e6:dd:94:21:
                    18:13:27:c5:f5:b9:c9:65:b9:bd:14:ea:02:d8:8a:
                    63:85:77:c0:c9:c2:61:8a:e1:7d:7a:f3:31:57:04:
                    e1:c1:8d:34:45:60:17:aa:39:2e:31:a6:6a:b8:91:
                    7d:cb:ac:b0:db:07:c7:1e:4e:fd:9c:f2:14:ed:a4:
                    99:7e:17:ee:2e:31:df:f0:d1:36:27:76:ef:3b:a2:
                    01:61:b3:04:32:d9:ad:c0:e6:2b:e2:24:37:f6:ca:
                    9b:7b:28:0c:4b:05:44:05:ea:c6:c0:27:ab:07:09:
                    fb:9d:03:cc:e0:73:78:10:5a:e2:fe:c7:64:77:29:
                    25:6f:88:59:0b:b9:92:03:9a:0d:c7:d3:9c:7a:99:
                    9c:04:0c:56:ee:e3:13:6e:12:b6:68:3d:7c:16:f8:
                    f1:bd:7b:05:ea:cb:3a:ca:55:48:a9:8b:01:78:ca:
                    20:45:ef:70:3b:0b:56:b3:fb:62:27:3e:0f:8b:8a:
                    bd:ba:58:df:f7:75:df:1a:b5:9c:7d:22:62:34:05:
                    28:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A4:93:B2:77:E1:8B:26:C3:1D:17:F5:51:1E:D4:4B:DA:DC:D7:BC
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61353a3a2f34382d3438203d3e20323139343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:a5::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:35:a6:bc:c3:b1:e3:1f:81:40:f0:4b:79:7a:59:2b:53:38:
         f9:b5:ce:85:2c:5d:b7:84:42:62:78:00:5a:90:40:98:a0:03:
         5f:d3:8a:77:6d:fb:fa:e5:d5:c3:b9:bd:d5:c0:34:12:c7:e2:
         78:a6:29:4e:9e:20:50:d7:76:15:f1:96:4e:60:a0:40:eb:e0:
         2e:c7:eb:04:52:a3:ce:92:c0:55:96:3e:3e:f8:26:4a:6b:8d:
         9d:73:d6:e9:17:aa:bd:1d:ef:ef:c8:8e:a8:89:1f:b5:0c:8d:
         57:f1:96:30:b3:3b:cd:26:7d:58:c7:35:b6:ec:85:fa:62:c7:
         16:90:f9:30:fb:c6:ce:39:5d:83:78:36:10:aa:fb:d2:0d:fd:
         67:88:fd:7c:ca:26:9c:a7:14:3b:4c:4f:c7:7c:9b:84:54:b0:
         ca:9c:e6:72:d9:0c:7e:03:40:fe:34:0e:cf:20:06:d7:83:1b:
         25:9b:6f:c9:e6:94:6f:06:9e:48:e4:1f:2f:d9:7c:e4:7d:e7:
         3a:4c:5b:8c:35:a5:70:12:9a:cc:95:a5:95:55:1f:1a:d3:f5:
         e5:3f:a9:dc:93:20:14:24:f4:eb:5d:2c:97:aa:16:b5:76:b1:
         73:cb:d5:ba:40:a0:f5:d5:de:4f:8f:aa:58:1b:dc:d9:63:12:
         cb:bc:f3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:16:14 2026 by rpki-client