Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a313030303a3a2f33362d3336203d3e203138383534.roa
File:                     323630363a616563303a313030303a3a2f33362d3336203d3e203138383534.roa (raw, json)
Hash identifier:          j6ax1BLLYdyAGt+yzj7CKKPJc7YqFjn6Hz2bxy8kPHo=
Subject key identifier:   E7:AD:6A:59:7B:24:F1:A3:E0:CD:C8:71:3E:ED:00:80:41:F5:76:93
Certificate issuer:       /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Certificate serial:       636C058046145680DA6DF02A147D4F303FDB34EA
Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a313030303a3a2f33362d3336203d3e203138383534.roa
Signing time:             Wed 22 Apr 2026 06:10:44 +0000
ROA not before:           Wed 22 Apr 2026 06:05:44 +0000
ROA not after:            Wed 21 Apr 2027 06:10:44 +0000
asID:                     18854
IP address blocks:        2606:aec0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
                          rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 08:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:6c:05:80:46:14:56:80:da:6d:f0:2a:14:7d:4f:30:3f:db:34:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
        Validity
            Not Before: Apr 22 06:05:44 2026 GMT
            Not After : Apr 21 06:10:44 2027 GMT
        Subject: CN=E7AD6A597B24F1A3E0CDC8713EED008041F57693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:64:b4:41:7b:cc:bd:3e:ad:f6:70:c6:0a:
                    f2:53:e5:4c:88:72:d6:d5:86:80:7e:d5:00:d0:fb:
                    33:dd:02:f7:8b:e0:ae:e7:ce:4f:70:80:55:f7:aa:
                    e3:91:6c:25:30:97:95:00:8a:55:b1:b6:79:83:87:
                    0d:47:72:c3:6d:fe:ff:af:c7:03:3a:1c:f2:d8:09:
                    9d:75:23:81:6e:e2:b8:08:cf:d5:34:d2:b9:bd:08:
                    e4:12:3d:23:45:b5:fa:89:e8:33:fa:61:b2:bd:71:
                    3f:9d:8e:9e:15:63:a3:e5:7a:2e:d5:86:ca:8e:ea:
                    27:22:0a:76:95:35:83:e0:0d:da:d7:78:32:58:ac:
                    49:7f:f5:7b:d0:b1:fc:46:2f:f1:b9:bb:47:79:fe:
                    5c:a6:41:19:19:c5:bb:d0:24:ee:cd:4c:34:ff:81:
                    59:45:f1:59:bb:4d:fa:51:83:15:2c:e0:4d:0d:d3:
                    d1:91:5b:10:31:59:1c:35:e0:10:9f:53:ee:37:7e:
                    98:ab:a2:fe:13:be:a5:42:60:2a:f8:6f:26:fe:96:
                    fa:98:3e:4f:b4:09:c5:3a:fc:75:c9:94:3a:e8:cb:
                    b5:b3:5e:35:38:92:8d:2c:be:82:1e:98:7d:37:5b:
                    e7:d7:2b:c5:30:4d:d2:0e:1b:42:30:41:f6:b0:41:
                    6b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AD:6A:59:7B:24:F1:A3:E0:CD:C8:71:3E:ED:00:80:41:F5:76:93
            X509v3 Authority Key Identifier:
                keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a313030303a3a2f33362d3336203d3e203138383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:aec0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c3:55:ef:a1:e3:33:81:bf:fc:8f:45:35:fe:e8:f8:0a:b9:9b:
         54:1b:50:8b:96:3a:89:27:cf:06:1a:07:8d:8c:9f:20:47:c3:
         6e:1e:96:bc:3e:2b:5d:d1:c6:bb:6b:3c:22:43:46:b3:9f:03:
         7a:59:55:86:04:ba:74:9e:3c:b9:3d:1c:63:7a:d3:46:93:99:
         a9:cb:33:20:05:4c:da:90:52:ed:d4:ba:65:cc:8d:3b:c5:64:
         80:33:e5:b1:86:8d:5e:ac:7c:2a:46:8d:28:9c:35:0b:2d:22:
         d0:80:00:64:ca:ef:2e:32:6b:e7:73:4f:ae:f2:d3:f2:4e:42:
         66:f4:a7:bd:5a:c1:fd:b2:d9:f8:6e:04:e6:90:c3:1d:ca:ee:
         8f:e8:85:83:22:62:e0:b6:85:c5:8c:86:cb:c9:8c:33:59:ef:
         53:da:73:95:77:b8:77:5b:42:97:b3:d0:e9:08:f1:d6:34:f2:
         dc:f7:4c:a6:d3:71:e0:f7:55:3b:9c:18:2d:1c:86:23:ce:82:
         f0:19:65:c6:30:ae:e4:d2:e1:31:a0:6e:56:18:8a:7b:42:ce:
         1a:3a:67:80:ae:f2:58:79:de:35:58:49:ef:68:67:8b:7e:ee:
         24:e0:46:b6:c3:d9:1c:2b:76:cc:98:95:8a:cb:70:f1:9d:a7:
         64:e1:01:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:36 2026 by rpki-client