Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/323630323a666134613a3a2f34302d3430203d3e203236313935.roa
File:                     323630323a666134613a3a2f34302d3430203d3e203236313935.roa (raw, json)
Hash identifier:          Ya5e9Pp0ir6hHMw5AawUoG1rnJjLKXgUNprm9v9lVqE=
Subject key identifier:   2B:86:61:96:C9:EF:D3:15:A7:B6:8D:16:10:F5:7B:68:A3:45:3E:45
Certificate issuer:       /CN=589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1
Certificate serial:       165DB6CFB9213CE532EAD00BD74273E7B90B3150
Authority key identifier: 27:A0:E6:8D:4A:47:87:B2:07:C9:52:03:6C:00:BF:CC:15:AB:F2:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/323630323a666134613a3a2f34302d3430203d3e203236313935.roa
Signing time:             Wed 10 Sep 2025 19:06:20 +0000
ROA not before:           Wed 10 Sep 2025 19:01:20 +0000
ROA not after:            Wed 09 Sep 2026 19:06:20 +0000
asID:                     26195
IP address blocks:        2602:fa4a::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/27A0E68D4A4787B207C952036C00BFCC15ABF226.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/27A0E68D4A4787B207C952036C00BFCC15ABF226.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 15:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5d:b6:cf:b9:21:3c:e5:32:ea:d0:0b:d7:42:73:e7:b9:0b:31:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1
        Validity
            Not Before: Sep 10 19:01:20 2025 GMT
            Not After : Sep  9 19:06:20 2026 GMT
        Subject: CN=2B866196C9EFD315A7B68D1610F57B68A3453E45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:5c:1c:5e:68:2a:8a:2a:dc:25:a2:7e:fe:
                    52:7b:cc:0c:34:7a:a1:15:84:35:78:c9:c7:22:1a:
                    e1:ba:ff:93:bd:0c:96:4e:aa:1d:f7:7b:d0:e2:04:
                    88:c0:3c:b8:c0:41:bb:53:4d:8c:b0:72:a0:6d:9d:
                    0f:a7:62:3f:ca:5d:04:67:6f:8b:5e:82:33:9d:5e:
                    1b:dc:f4:3c:f2:19:cf:ae:9b:86:4d:72:97:57:ec:
                    58:28:e1:73:10:8e:78:21:58:e9:fc:d2:75:b6:33:
                    f2:24:21:47:58:94:84:c6:b8:30:d2:7d:2f:31:f0:
                    c0:28:77:d0:a6:79:45:e6:c4:c3:65:4a:5b:07:c4:
                    06:70:c1:9e:89:a3:73:5e:ae:64:50:1d:14:4a:46:
                    97:7b:d6:67:31:35:24:3f:7a:45:29:1d:4f:99:ce:
                    60:c2:f8:5a:c5:5c:ee:14:a3:0e:59:ae:83:ee:60:
                    71:44:8d:ff:db:c0:33:dd:6a:1d:24:da:ca:50:46:
                    ef:81:4a:c2:d5:c6:cb:3b:5e:db:0d:bb:9e:56:88:
                    16:60:7d:c8:c0:53:e5:67:82:09:8e:90:72:c7:9c:
                    44:a1:90:11:aa:4d:b1:67:a5:88:16:eb:3f:b6:af:
                    ec:7c:1b:6b:79:a1:dd:ce:80:59:ec:f4:55:2a:14:
                    d5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:86:61:96:C9:EF:D3:15:A7:B6:8D:16:10:F5:7B:68:A3:45:3E:45
            X509v3 Authority Key Identifier:
                keyid:27:A0:E6:8D:4A:47:87:B2:07:C9:52:03:6C:00:BF:CC:15:AB:F2:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/27A0E68D4A4787B207C952036C00BFCC15ABF226.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/323630323a666134613a3a2f34302d3430203d3e203236313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4a::/40

    Signature Algorithm: sha256WithRSAEncryption
         a7:44:dc:3f:2e:34:0c:95:0b:3e:04:76:5b:41:58:66:91:0b:
         6b:d5:48:c3:e2:df:00:85:42:b4:6f:66:db:bc:28:e6:ed:36:
         44:a0:01:b4:19:b0:c1:93:8b:39:ca:bc:54:ca:5f:ac:e7:ae:
         36:94:2b:61:2f:6f:97:f2:6b:e8:ab:5b:04:0f:ab:e7:e3:b6:
         1c:83:84:31:c6:45:69:52:cd:bc:0b:c2:98:db:e9:8a:20:ee:
         d7:ab:01:c6:3d:f9:5e:d5:50:34:be:cc:23:b7:1b:b5:2e:ef:
         5e:92:15:77:3f:33:81:cb:6e:fb:e9:03:79:a3:cf:bc:e1:35:
         b5:75:f6:d2:c0:57:fd:82:7f:33:f2:db:c3:b2:43:76:4c:f9:
         8a:ef:87:2e:c2:fa:21:12:da:4d:7d:4d:03:e4:cf:ca:ea:ed:
         61:ed:2e:c3:a9:4a:d6:31:d2:c5:1d:55:66:69:35:0a:7b:70:
         2c:41:44:b1:43:a4:a3:31:ec:00:1f:20:ed:40:82:c9:ee:cd:
         92:e2:01:38:94:f4:d2:b6:42:e4:ff:4e:98:11:5d:4e:94:b2:
         c6:d6:f8:3d:54:4a:0f:e6:99:8d:9d:08:c6:63:e9:7a:eb:4e:
         6e:f3:33:66:30:46:d4:b2:dc:6c:78:17:c0:55:87:04:78:93:
         18:a2:45:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 05:49:44 2025 by rpki-client