Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/AS396356.roa
File:                     AS396356.roa (raw, json)
Hash identifier:          i6DByJ+5gvzJJ699TjcynmZUzSQhvd8MXTSCf5ofMVc=
Subject key identifier:   84:A4:0B:1E:38:03:53:59:BE:9C:D0:4D:EC:48:4D:02:1B:66:9C:9B
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       58F9A665B0E46CF811B7290EB8A2E3B50914A8B2
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/AS396356.roa
Signing time:             Wed 15 Jul 2026 13:58:31 +0000
ROA not before:           Wed 15 Jul 2026 13:53:31 +0000
ROA not after:            Wed 14 Jul 2027 13:58:31 +0000
asID:                     396356
IP address blocks:        2602:ff62:103::/48 maxlen: 48
                          2602:ff62:108::/48 maxlen: 48
                          2602:ff62:109::/48 maxlen: 48
                          2602:ff62:10a::/48 maxlen: 48
                          2602:ff62:10b::/48 maxlen: 48
                          2602:ff62:10c::/48 maxlen: 48
                          2602:ff62:10d::/48 maxlen: 48
                          2602:ff62:10e::/48 maxlen: 48
                          2602:ff62:10f::/48 maxlen: 48
                          2602:ff62:110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f9:a6:65:b0:e4:6c:f8:11:b7:29:0e:b8:a2:e3:b5:09:14:a8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul 15 13:53:31 2026 GMT
            Not After : Jul 14 13:58:31 2027 GMT
        Subject: CN=84A40B1E38035359BE9CD04DEC484D021B669C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a2:ed:98:0c:b4:5a:43:77:59:72:bc:69:a8:
                    05:83:a6:5b:e4:87:5d:24:a0:dc:09:f5:54:ff:a6:
                    ec:19:35:48:e5:d9:ac:46:42:a0:9a:22:73:87:31:
                    60:51:60:fb:20:59:4b:98:8d:3a:6e:b2:3b:e7:20:
                    f0:b6:a6:20:79:e3:9f:b0:a5:e5:90:77:28:de:46:
                    8f:ab:90:20:f7:f6:03:2d:f6:d4:05:53:2a:01:1e:
                    20:be:2a:88:d5:49:4a:4f:2c:6e:8b:78:40:2e:87:
                    13:56:26:65:85:77:04:14:4d:59:28:0a:90:d5:e0:
                    2b:56:2a:e7:a4:c4:31:4f:b7:8b:87:4a:49:f9:06:
                    8c:b8:38:a8:c4:f2:02:cc:27:73:10:91:d3:3d:89:
                    88:8d:3e:b5:71:04:aa:43:a6:20:68:55:3f:b1:67:
                    ff:1f:fa:34:6a:57:22:69:47:39:94:96:61:6a:2f:
                    55:f3:35:53:d2:02:2f:91:38:b9:6c:00:a0:6b:2e:
                    e7:8a:06:e0:36:e7:6b:a4:fa:9d:f7:f8:3d:03:e8:
                    17:74:cb:e4:34:d6:09:8d:f1:ef:31:71:90:78:91:
                    8f:b8:4f:a2:99:de:81:52:4b:fe:61:79:3c:22:2e:
                    84:7c:1a:13:52:81:b3:76:bd:47:db:07:1f:28:79:
                    e3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A4:0B:1E:38:03:53:59:BE:9C:D0:4D:EC:48:4D:02:1B:66:9C:9B
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/AS396356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:103::/48
                  2602:ff62:108::-2602:ff62:110:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         3a:d4:c1:18:64:db:45:50:69:75:91:3f:d3:10:a8:f5:31:f5:
         cb:e2:6f:40:3e:62:c3:29:d5:28:61:95:59:4b:29:a7:37:1e:
         ac:ce:4e:88:18:8b:a5:6c:a2:53:4f:d1:d4:15:3e:6d:b6:3d:
         f0:0b:09:8e:d7:4a:f6:95:50:41:98:8c:e3:72:16:67:45:48:
         30:16:3a:58:ad:21:bf:58:f6:85:7a:6d:e2:d8:a9:be:65:8b:
         ff:f1:7c:a9:47:c5:ac:31:5f:24:0f:a0:0c:e3:14:46:74:27:
         27:0b:0a:cf:39:bd:5a:d4:84:7c:69:03:1a:6e:cc:a7:5a:7c:
         c6:95:cd:5c:33:11:10:49:8c:e3:a6:00:6e:29:52:88:9c:bf:
         5b:8a:61:5e:f6:8c:58:21:d1:db:6a:53:fe:48:1a:44:0d:2b:
         46:d2:82:24:a2:4b:26:fa:e1:27:e9:66:b4:ae:94:94:a7:f9:
         e8:34:cb:e7:9a:69:92:00:eb:62:be:b4:9e:dd:04:3e:4c:c9:
         2c:36:9e:c2:5a:db:d9:18:8e:7f:c4:55:8e:28:b1:4a:60:d3:
         0f:24:1c:46:c9:40:24:fa:84:35:08:c5:05:c8:07:c3:7b:3e:
         e9:ca:36:31:29:70:2f:f3:b4:ec:22:1c:56:02:a6:ca:4a:16:
         f5:fa:30:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:49 2026 by rpki-client