Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/323630323a666134613a3a2f34302d3430203d3e203236313935.roa
File:                     323630323a666134613a3a2f34302d3430203d3e203236313935.roa (raw, json)
Hash identifier:          RqD8pf6HIPEUDyUdIFl9s4tn58dWGF8zTrSRKsZSd6U=
Subject key identifier:   2F:9C:3C:D3:7B:65:41:5F:96:1E:A2:D1:2B:83:FF:4A:12:E2:78:5F
Certificate issuer:       /CN=589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1
Certificate serial:       46C567C6E9506BA9D4A0197F7A69506BEA9E5AAA
Authority key identifier: 27:A0:E6:8D:4A:47:87:B2:07:C9:52:03:6C:00:BF:CC:15:AB:F2:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/323630323a666134613a3a2f34302d3430203d3e203236313935.roa
Signing time:             Wed 12 Aug 2026 19:21:09 +0000
ROA not before:           Wed 12 Aug 2026 19:16:09 +0000
ROA not after:            Wed 11 Aug 2027 19:21:09 +0000
asID:                     26195
IP address blocks:        2602:fa4a::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/27A0E68D4A4787B207C952036C00BFCC15ABF226.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/27A0E68D4A4787B207C952036C00BFCC15ABF226.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 02:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c5:67:c6:e9:50:6b:a9:d4:a0:19:7f:7a:69:50:6b:ea:9e:5a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1
        Validity
            Not Before: Aug 12 19:16:09 2026 GMT
            Not After : Aug 11 19:21:09 2027 GMT
        Subject: CN=2F9C3CD37B65415F961EA2D12B83FF4A12E2785F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:e1:45:3f:c2:69:7f:ac:f2:fa:00:ec:65:
                    59:f9:3f:b0:39:69:f1:25:27:7f:61:62:c4:dd:b6:
                    2f:30:92:1e:5a:12:5b:88:1f:66:fc:3c:13:b6:7b:
                    1a:5a:18:0a:f8:64:d5:96:cd:20:b1:a8:4c:d7:dd:
                    d5:0e:16:99:17:b7:94:d1:57:03:75:5f:61:3b:68:
                    ba:8e:9d:92:de:66:97:8a:bf:b8:e7:eb:90:a4:88:
                    65:ed:3a:73:f4:49:0d:1c:1b:0c:9d:f9:3c:eb:b1:
                    81:bf:40:4c:be:85:da:49:a0:2e:56:43:07:2d:d6:
                    e9:b9:5b:13:a0:3b:48:e1:7f:b9:0a:dc:44:0d:ab:
                    85:14:24:d8:8b:f5:d3:2f:91:03:ce:78:88:99:34:
                    ff:1d:e5:ad:fc:71:e8:a1:d5:26:10:29:5c:c4:85:
                    3f:33:44:d2:83:a0:4f:33:7e:6c:35:57:50:25:1e:
                    21:66:8e:60:ea:81:a3:b9:0d:bd:3a:64:4f:0a:3b:
                    7c:06:5f:fb:9d:ed:f8:9f:f6:9c:2e:f0:a9:7c:68:
                    82:1c:2e:0e:ac:de:37:9b:72:f9:05:d2:19:06:d7:
                    6f:f8:a8:8f:96:03:81:1e:9d:ed:9a:87:27:81:fe:
                    90:16:ad:3c:fc:82:da:09:5b:2c:77:bf:19:06:ad:
                    24:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9C:3C:D3:7B:65:41:5F:96:1E:A2:D1:2B:83:FF:4A:12:E2:78:5F
            X509v3 Authority Key Identifier:
                keyid:27:A0:E6:8D:4A:47:87:B2:07:C9:52:03:6C:00:BF:CC:15:AB:F2:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/27A0E68D4A4787B207C952036C00BFCC15ABF226.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/323630323a666134613a3a2f34302d3430203d3e203236313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4a::/40

    Signature Algorithm: sha256WithRSAEncryption
         04:10:27:74:6b:3b:34:39:f6:d8:09:56:92:03:56:88:a9:d1:
         ca:75:44:e0:63:39:0e:2c:72:7b:4e:94:4e:ca:6b:30:25:ad:
         60:8a:27:bf:c3:0e:76:16:a7:20:6a:1b:e8:d0:59:8b:4c:d1:
         cd:e5:64:70:55:26:de:32:29:f3:59:39:4b:37:e4:40:fd:08:
         75:7a:15:81:6e:4c:00:e3:06:b1:1b:ac:1b:cc:81:c1:c4:05:
         79:2f:e8:3c:02:ec:9a:a4:f6:18:e8:6e:34:a4:8b:8e:1a:ab:
         10:ce:92:84:90:56:d6:9a:28:f0:e3:f2:35:11:9d:b8:9b:d5:
         1a:5d:18:39:34:1e:2d:4d:42:f3:01:c5:b3:56:ae:8c:48:7a:
         7c:be:6f:bf:1f:0a:9a:2e:e9:88:97:0b:f6:df:ff:24:96:43:
         b9:e3:ea:69:87:48:0e:56:b3:44:12:e9:3a:ba:52:ea:17:58:
         dc:e3:9e:30:20:6e:b1:f5:03:2f:77:46:84:0a:35:fc:59:ac:
         a6:4b:6c:41:2d:39:60:78:8c:3d:34:1d:9d:1a:e7:fa:f6:c4:
         46:d4:39:6c:db:7c:8d:79:66:f5:63:e3:11:94:f9:d7:f8:e4:
         fc:ec:38:6e:ea:59:ea:03:49:46:a7:be:6e:e4:32:e7:23:70:
         f8:91:f1:d1
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIURsVnxulQa6nUoBl/emlQa+qeWqowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTg5Yjc5NGExNjRmMzA2NmY1Y2NhMDNjZTc4ZDVlYWE4
NWUwMWU2NmI2MTgzNzVjZjEwHhcNMjYwODEyMTkxNjA5WhcNMjcwODExMTkyMTA5
WjAzMTEwLwYDVQQDEygyRjlDM0NEMzdCNjU0MTVGOTYxRUEyRDEyQjgzRkY0QTEy
RTI3ODVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHLhRT/CaX+s
8voA7GVZ+T+wOWnxJSd/YWLE3bYvMJIeWhJbiB9m/DwTtnsaWhgK+GTVls0gsahM
193VDhaZF7eU0VcDdV9hO2i6jp2S3maXir+45+uQpIhl7Tpz9EkNHBsMnfk867GB
v0BMvoXaSaAuVkMHLdbpuVsToDtI4X+5CtxEDauFFCTYi/XTL5EDzniImTT/HeWt
/HHoodUmEClcxIU/M0TSg6BPM35sNVdQJR4hZo5g6oGjuQ29OmRPCjt8Bl/7ne34
n/acLvCpfGiCHC4OrN43m3L5BdIZBtdv+KiPlgOBHp3tmocngf6QFq08/ILaCVss
d78ZBq0klwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFC+cPNN7ZUFflh6i0SuD/0oS
4nhfMB8GA1UdIwQYMBaAFCeg5o1KR4eyB8lSA2wAv8wVq/ImMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODlkMDk1YWUwMTg5ZDMwODdmZGQwMzI2LzAv
MjdBMEU2OEQ0QTQ3ODdCMjA3Qzk1MjAzNkMwMEJGQ0MxNUFCRjIyNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdm
MDA5OWIyLzMzZWNhYWI5LTE4MDctNDc4MC04MGQwLTZhOGRmOTU0MDYwZS81ODli
Nzk0YTE2NGYzMDY2ZjVjY2EwM2NlNzhkNWVhYTg1ZTAxZTY2YjYxODM3NWNmMS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg5ZDA5NWFlMDE4OWQz
MDg3ZmRkMDMyNi8wLzMyMzYzMDMyM2E2NjYxMzQ2MTNhM2EyZjM0MzAyZDM0MzAy
MDNkM2UyMDMyMzYzMTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAmAvpKADANBgkqhkiG9w0BAQsF
AAOCAQEABBAndGs7NDn22AlWkgNWiKnRynVE4GM5Dixye06UTsprMCWtYIonv8MO
dhanIGob6NBZi0zRzeVkcFUm3jIp81k5SzfkQP0IdXoVgW5MAOMGsRusG8yBwcQF
eS/oPALsmqT2GOhuNKSLjhqrEM6ShJBW1poo8OPyNRGduJvVGl0YOTQeLU1C8wHF
s1aujEh6fL5vvx8Kmi7piJcL9t//JJZDuePqaYdIDlazRBLpOrpS6hdY3OOeMCBu
sfUDL3dGhAo1/FmspktsQS05YHiMPTQdnRrn+vbERtQ5bNt8jXlm9WPjEZT51/jk
/Ow4bupZ6gNJRqe+buQy5yNw+JHx0Q==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:20:03 2026 by rpki-client