Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/323630373a613534303a3a2f33332d3333203d3e20333938393931.roa
File:                     323630373a613534303a3a2f33332d3333203d3e20333938393931.roa (raw, json)
Hash identifier:          PlvbEtVxVeLYNJu6XVnk8Ot0TZuksju3aHnFNM67H00=
Subject key identifier:   E5:88:0D:FF:2E:76:55:05:82:DB:59:DF:96:4C:EA:04:FC:4C:55:1D
Certificate issuer:       /CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Certificate serial:       7DE15B9438008B9DA8761B47BFDC6BF6BD5D9F18
Authority key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/323630373a613534303a3a2f33332d3333203d3e20333938393931.roa
Signing time:             Thu 16 Jul 2026 16:39:38 +0000
ROA not before:           Thu 16 Jul 2026 16:34:38 +0000
ROA not after:            Thu 15 Jul 2027 16:39:38 +0000
asID:                     398991
IP address blocks:        2607:a540::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl
                          rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e1:5b:94:38:00:8b:9d:a8:76:1b:47:bf:dc:6b:f6:bd:5d:9f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
        Validity
            Not Before: Jul 16 16:34:38 2026 GMT
            Not After : Jul 15 16:39:38 2027 GMT
        Subject: CN=E5880DFF2E76550582DB59DF964CEA04FC4C551D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:51:56:5b:65:ae:51:85:db:6d:65:f0:3f:77:
                    74:ab:26:f0:85:ef:ab:dc:8a:dc:67:fc:a3:7d:2a:
                    db:93:e3:01:49:7a:10:41:c5:82:59:0e:01:12:b7:
                    f5:fa:ab:8f:a0:3c:95:bd:3b:bd:0f:2d:2d:00:c6:
                    ae:48:47:cb:2f:17:a5:be:e3:2f:10:68:8d:3c:50:
                    13:7f:b7:c2:84:05:6b:a7:d4:92:94:7f:0d:af:28:
                    41:04:04:12:d4:05:7b:d0:92:45:8e:62:94:ea:36:
                    5c:4c:ca:7b:8e:9a:c4:4c:51:98:cd:7f:4b:20:74:
                    18:b0:20:00:84:fe:f4:ba:44:07:6b:3f:f6:59:5e:
                    f0:79:ea:c2:11:e3:d8:bd:00:dc:78:b9:0e:55:d7:
                    4b:a3:e1:06:27:29:f0:10:e8:c1:3f:9a:46:08:ca:
                    fb:11:d7:d8:9e:f4:a6:47:d3:51:6e:34:7d:8f:87:
                    79:b1:48:1d:f7:4c:76:99:38:78:63:b7:36:fd:62:
                    e4:48:32:90:69:ed:2c:6c:66:59:41:fd:b2:d7:c6:
                    c9:d2:e2:94:8d:f6:d8:6d:29:27:84:15:f1:14:58:
                    e3:a9:cf:1f:1b:ab:9e:0f:20:51:5d:ac:01:fa:a9:
                    20:ba:b9:ea:31:46:31:58:9f:60:6b:63:c5:4d:4f:
                    cb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:88:0D:FF:2E:76:55:05:82:DB:59:DF:96:4C:EA:04:FC:4C:55:1D
            X509v3 Authority Key Identifier:
                keyid:E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/323630373a613534303a3a2f33332d3333203d3e20333938393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a540::/33

    Signature Algorithm: sha256WithRSAEncryption
         2c:51:9e:4e:53:09:f8:c7:2b:ec:26:4c:b5:8b:31:a8:96:aa:
         52:c4:20:a4:89:b8:87:02:4a:3a:c4:be:32:e7:47:d7:fc:1d:
         6b:20:e9:c1:59:da:50:d0:f3:e4:f1:d7:f9:f9:43:ab:2d:0a:
         87:70:5c:a7:ff:71:90:a2:6c:31:70:e0:a0:18:e7:54:75:71:
         1b:66:b0:00:e9:30:a7:c9:de:0e:17:50:8c:6e:46:5c:ca:f4:
         38:8e:7e:f1:c5:5e:0f:7d:3d:ad:c8:14:55:79:23:f5:35:11:
         eb:a3:20:de:ce:47:18:06:c6:6d:b3:82:35:4a:47:ae:6b:27:
         ce:fd:6c:3f:b9:3e:7a:33:c6:2b:f7:71:1b:86:17:57:ba:6f:
         c3:0a:26:c0:09:7e:e4:fe:d1:0f:cf:a6:64:91:da:65:91:eb:
         3c:3f:d7:b2:93:f7:00:f7:b1:51:72:7a:ee:84:66:42:8a:07:
         10:f9:5c:d4:42:19:6c:98:d1:d5:62:20:09:24:e6:72:eb:81:
         82:8b:a0:5a:81:fc:50:ef:e7:91:23:9a:70:81:ec:d7:e6:a6:
         74:39:96:66:69:3a:e7:5a:6a:51:da:1c:53:f8:91:78:c2:51:
         e4:96:7e:ff:35:f0:3f:0e:af:ef:0a:ad:69:c4:4b:67:66:ef:
         bd:5e:5d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:49:52 2026 by rpki-client