Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a333030303a3a2f33362d3336203d3e203138383534.roa
File:                     323630363a616563303a333030303a3a2f33362d3336203d3e203138383534.roa (raw, json)
Hash identifier:          nGlnZYVGul4sGW5QTKVNYPVtngzuUfVGtXFYrsDrhIs=
Subject key identifier:   8A:D2:79:E0:1B:17:E4:42:0D:35:AC:B7:E7:7D:11:6D:17:43:D0:27
Certificate issuer:       /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Certificate serial:       13A1EA185E188C23DC367224419738F993C619ED
Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a333030303a3a2f33362d3336203d3e203138383534.roa
Signing time:             Wed 22 Apr 2026 06:11:03 +0000
ROA not before:           Wed 22 Apr 2026 06:06:03 +0000
ROA not after:            Wed 21 Apr 2027 06:11:03 +0000
asID:                     18854
IP address blocks:        2606:aec0:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
                          rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 08:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a1:ea:18:5e:18:8c:23:dc:36:72:24:41:97:38:f9:93:c6:19:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
        Validity
            Not Before: Apr 22 06:06:03 2026 GMT
            Not After : Apr 21 06:11:03 2027 GMT
        Subject: CN=8AD279E01B17E4420D35ACB7E77D116D1743D027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:65:31:34:47:1a:2a:d9:e1:e3:33:56:32:89:
                    4b:2d:20:73:29:38:dd:74:41:6d:98:3b:bf:44:bb:
                    b4:4b:b0:68:fb:a8:54:79:f4:07:da:56:9a:f6:8d:
                    35:63:e0:99:c3:e7:52:5a:b3:48:cc:30:5a:c7:5b:
                    8d:04:51:2b:8d:8c:71:31:18:d6:38:03:d0:94:a4:
                    dc:c9:03:2c:07:dd:9f:4d:a9:b9:6c:66:99:1d:af:
                    8c:99:70:ec:0e:5d:3c:cd:64:c3:ba:37:e9:50:12:
                    2e:83:af:65:93:2d:2f:17:89:d2:2d:de:ba:6d:0b:
                    7a:52:21:98:6d:ff:90:c6:67:6f:de:9d:84:b4:af:
                    45:a7:2b:10:68:1d:40:1e:79:b9:9e:f5:3c:5e:13:
                    3d:2b:b5:69:8f:eb:9e:a1:a9:95:3d:6a:67:72:ea:
                    dd:e4:7d:43:07:0c:a8:b0:0e:e8:03:ef:92:99:48:
                    39:97:57:86:64:63:d0:8e:da:7a:ec:f5:09:7f:12:
                    ba:69:9a:06:52:47:b8:f9:ba:41:53:e7:65:69:fc:
                    64:bf:6a:95:f8:58:f8:64:ce:41:1c:c5:b0:b1:23:
                    84:29:08:9d:e3:da:67:a6:0d:aa:d4:78:c5:c1:f0:
                    19:4f:72:c5:38:08:42:bb:dd:8f:70:a4:9a:fa:d4:
                    e2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D2:79:E0:1B:17:E4:42:0D:35:AC:B7:E7:7D:11:6D:17:43:D0:27
            X509v3 Authority Key Identifier:
                keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a333030303a3a2f33362d3336203d3e203138383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:aec0:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a1:ff:3a:cb:c1:f4:39:52:d0:2d:1c:a7:bd:4b:fa:3c:ee:a0:
         bd:59:62:7b:54:0e:2f:f4:65:e8:9c:fd:8c:dd:e2:7b:32:02:
         47:74:a0:2c:0b:36:b8:bb:4d:9d:bc:fb:64:53:1a:c5:bc:21:
         7e:4c:c2:ea:f0:32:16:c7:62:a4:28:80:fc:91:b5:c6:d5:2c:
         8e:56:1b:df:86:e4:03:16:3c:19:e2:c0:c3:b9:c3:dc:79:92:
         39:f7:d6:c3:ce:8b:71:7c:fc:af:b9:35:cf:96:50:e9:15:82:
         e1:00:cd:ab:9d:8c:42:c2:f5:c9:8a:69:94:75:d6:8f:b9:2e:
         08:18:74:26:3e:29:39:57:33:e3:38:ce:66:5d:27:a6:8a:05:
         a4:db:39:56:39:a8:a2:cb:65:26:ef:e8:5d:e0:44:be:a1:d0:
         02:85:ff:2a:2f:4d:2e:94:88:f2:ae:70:00:1f:fb:f4:d1:ca:
         6d:02:04:dd:67:40:3e:f7:57:ac:7e:e5:39:74:cc:3e:a8:9d:
         5d:86:7f:ec:3c:1d:a5:a8:44:2a:ce:8f:cb:51:56:d2:0f:f7:
         f3:b6:aa:6e:17:3a:b0:a2:7e:e2:63:33:e8:c6:37:d1:2f:54:
         71:1f:cf:a2:a2:5f:68:ce:88:da:8d:31:ed:3c:1e:07:f8:37:
         54:15:18:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:37 2026 by rpki-client