Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a323030303a3a2f33362d3336203d3e203138383534.roa
File:                     323630363a616563303a323030303a3a2f33362d3336203d3e203138383534.roa (raw, json)
Hash identifier:          tKywoXJ/dFK7psjWunb6Tdn/rv3eTS1tgNWiLdP5vdw=
Subject key identifier:   E0:D0:43:D6:59:D4:13:A8:9A:21:CE:A0:39:AF:0E:E6:96:74:07:F0
Certificate issuer:       /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Certificate serial:       433591558697AB6A11A0F1C2324991BD3CA4483D
Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a323030303a3a2f33362d3336203d3e203138383534.roa
Signing time:             Wed 22 Apr 2026 06:10:51 +0000
ROA not before:           Wed 22 Apr 2026 06:05:51 +0000
ROA not after:            Wed 21 Apr 2027 06:10:51 +0000
asID:                     18854
IP address blocks:        2606:aec0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
                          rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 08:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:35:91:55:86:97:ab:6a:11:a0:f1:c2:32:49:91:bd:3c:a4:48:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
        Validity
            Not Before: Apr 22 06:05:51 2026 GMT
            Not After : Apr 21 06:10:51 2027 GMT
        Subject: CN=E0D043D659D413A89A21CEA039AF0EE6967407F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ad:b9:24:44:9f:f3:f5:58:16:f6:8f:46:0a:
                    4d:b4:0b:9e:c7:e6:ce:64:5f:91:68:50:14:e7:03:
                    58:69:0a:88:36:5d:85:30:15:76:02:d3:2e:cb:32:
                    1f:ed:1b:f6:57:1b:8c:16:05:c4:e6:2a:9c:b2:3a:
                    1d:90:c2:24:4a:3c:16:2f:35:32:45:2f:58:ce:cb:
                    f4:67:af:39:06:92:89:76:aa:e4:e4:41:bb:7d:9c:
                    b7:9c:1e:20:7a:69:b4:f3:59:e6:b8:d8:0e:b6:3d:
                    42:87:dc:f9:63:86:37:cc:3c:6e:4c:0a:d1:d1:88:
                    c0:27:41:73:e7:65:ce:a1:12:48:86:a0:2d:58:4a:
                    63:f8:fe:31:a4:0d:e9:6a:9a:5b:2b:95:b6:83:b5:
                    b4:39:27:ed:bb:1c:2c:3f:25:a0:3b:09:f7:bf:d4:
                    40:56:ce:0c:4c:01:ad:fe:3e:ee:84:c1:f0:d1:11:
                    ba:a0:c5:70:07:46:9a:2c:9c:b9:c3:de:35:e0:e0:
                    15:4c:b3:22:12:e3:df:9a:90:ed:f8:67:a9:a1:d2:
                    a5:86:ef:d3:5d:cb:87:ec:05:61:5c:16:ba:ca:47:
                    25:fc:10:b9:96:5e:67:ab:f9:c5:83:28:0a:12:aa:
                    78:02:a2:fe:b2:8f:b1:bb:13:1f:e4:7a:85:35:06:
                    b1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D0:43:D6:59:D4:13:A8:9A:21:CE:A0:39:AF:0E:E6:96:74:07:F0
            X509v3 Authority Key Identifier:
                keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a323030303a3a2f33362d3336203d3e203138383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:aec0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         10:af:d6:b7:82:df:c0:54:82:9f:14:b0:bc:c7:28:c8:9b:98:
         21:e9:b4:20:87:f5:33:10:a3:38:59:d1:68:23:7b:8e:18:6a:
         e8:af:4d:ad:89:1e:d1:6a:02:8b:94:95:9e:1c:04:ee:c6:4b:
         4d:de:ea:b1:47:ba:8d:b0:28:ea:53:84:68:55:56:c4:d4:75:
         4a:71:ac:f3:c3:a2:27:47:a2:ed:fb:48:22:ea:f5:49:5a:1f:
         cd:a3:6a:27:43:f5:fb:d6:6a:07:96:e4:7a:e3:35:c1:3d:ec:
         48:c9:b9:3a:91:e4:b7:47:69:c3:9b:1e:0f:03:44:31:00:10:
         28:e4:c0:42:40:e0:e0:1e:a3:b3:fb:66:e4:5c:0f:c2:f1:56:
         d1:8f:36:4a:8e:d7:31:44:7a:fa:2d:18:58:b3:ef:ad:1b:53:
         d4:12:51:0d:a8:7b:eb:0c:e9:8a:bf:fb:9c:bb:f4:c1:ff:f9:
         40:9f:bb:56:0a:7c:8d:09:66:a6:fc:5a:ad:6a:c7:68:ac:57:
         02:a6:f5:7c:53:74:26:76:5c:1f:46:eb:1d:bf:b8:59:22:2a:
         7c:fc:aa:09:3e:b7:c8:c0:10:f9:57:ce:05:a4:92:4c:6f:60:
         dc:9f:ba:21:f6:88:9d:37:d7:8c:a8:87:90:b7:cf:ad:5a:44:
         4c:b0:97:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:38 2026 by rpki-client