Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a3a2f33392d3339203d3e20323039313039.roa
File:                     323630323a663764633a3a2f33392d3339203d3e20323039313039.roa (raw, json)
Hash identifier:          tV6V65jeVx1j2GZbWLOYKvQbrnKhk/+bAGS3ybBwkf8=
Subject key identifier:   03:EF:27:88:CD:12:15:7B:DF:2B:0C:58:40:E6:65:F5:63:D8:D2:77
Certificate issuer:       /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial:       6EC625594712B8720AFF8B99E66BDFDCC4F2BF6A
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a3a2f33392d3339203d3e20323039313039.roa
Signing time:             Wed 28 Oct 2026 11:45:42 +0000
ROA not before:           Wed 28 Oct 2026 11:40:42 +0000
ROA not after:            Wed 27 Oct 2027 11:45:42 +0000
asID:                     209109
IP address blocks:        2602:f7dc::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c6:25:59:47:12:b8:72:0a:ff:8b:99:e6:6b:df:dc:c4:f2:bf:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
        Validity
            Not Before: Oct 28 11:40:42 2026 GMT
            Not After : Oct 27 11:45:42 2027 GMT
        Subject: CN=03EF2788CD12157BDF2B0C5840E665F563D8D277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e6:45:89:48:53:1b:dd:be:df:17:00:ba:8b:
                    a1:1f:7a:a1:7c:f7:5c:cb:4f:5e:73:1e:c4:92:35:
                    ff:40:d8:ee:28:f7:76:cc:b7:96:1d:6e:c0:e8:16:
                    99:14:e0:e5:b7:fd:4d:b0:7f:46:8f:60:cf:39:90:
                    bd:44:2a:93:80:4a:b9:74:a4:f9:0a:9c:39:24:fa:
                    93:d7:f7:7e:b4:4b:a1:18:31:9a:ad:b5:c3:50:38:
                    b2:17:ac:5a:8b:6c:78:59:a2:e0:c3:e3:ed:cb:6c:
                    06:29:22:7a:7a:c4:5c:fd:cb:f0:f9:b7:d6:cf:fd:
                    af:02:5d:b0:f3:11:13:ea:6f:37:38:51:a2:71:65:
                    91:7d:4f:ce:34:53:be:6f:d9:ca:9e:e9:dd:17:2f:
                    55:29:96:55:bd:dc:2e:31:83:75:ce:71:67:f6:19:
                    1d:94:0b:59:95:48:ae:2d:c8:09:90:2e:3d:f0:aa:
                    47:a2:22:61:8a:63:9e:b3:7d:99:37:22:07:17:d2:
                    eb:1c:e6:f1:15:c3:23:be:19:28:3c:e1:d2:9a:e6:
                    60:29:84:a4:01:cd:c2:4a:ba:66:b6:3c:02:56:03:
                    d4:7c:e8:15:b1:81:bc:86:f0:0c:2b:fc:e7:64:ee:
                    86:1e:a6:14:28:bd:43:ef:ed:70:68:06:2b:17:c5:
                    69:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EF:27:88:CD:12:15:7B:DF:2B:0C:58:40:E6:65:F5:63:D8:D2:77
            X509v3 Authority Key Identifier:
                keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a3a2f33392d3339203d3e20323039313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7dc::/39

    Signature Algorithm: sha256WithRSAEncryption
         66:87:6b:8a:ea:fc:4a:f8:64:06:01:5f:b1:6f:40:f8:47:92:
         06:4d:87:6e:87:44:18:09:66:4c:8b:37:d1:f4:48:af:7a:9f:
         16:9f:45:2f:19:93:f0:e4:f7:cd:a3:47:a9:97:73:40:68:6c:
         f1:91:42:f9:ec:96:eb:7c:66:ba:73:3a:0a:47:f9:72:04:e7:
         99:3b:80:a1:b7:9a:01:e8:60:88:a2:fc:a8:8c:4b:5a:fd:b6:
         79:08:44:99:4d:15:4a:2a:e0:20:a1:1f:06:c5:b2:f2:6d:f0:
         c8:e5:b5:6f:2b:dd:7d:69:17:75:d5:a2:af:8b:af:28:95:b0:
         26:5e:2d:51:35:16:00:a7:1e:c5:86:a5:6a:9b:d9:73:a8:92:
         62:1d:e2:09:d9:b2:c2:3a:6a:76:be:b3:6e:b9:19:e6:13:26:
         3e:76:f1:16:a3:e7:ab:9c:dd:13:8b:73:00:b8:00:b6:3a:52:
         5f:e4:e6:e9:d1:d3:e2:29:82:08:1c:c8:6d:64:30:b2:71:79:
         da:c4:5e:7c:4a:76:b7:a5:c0:21:f7:08:26:37:35:59:ff:25:
         dd:77:f8:7c:18:90:e2:af:c6:f7:34:9f:90:9d:d0:b0:69:27:
         9b:8c:58:44:d3:77:44:6e:03:13:10:12:6d:52:a2:42:c4:dc:
         b6:c1:f1:25
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUbsYlWUcSuHIK/4uZ5mvf3MTyv2owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMGNjODU3ZDA1ZWZiYjM1MDIzMDUyMGQwOGM4ZDdmNDVl
MzRlM2JmZjNjYjUxNmU1NTYwHhcNMjYxMDI4MTE0MDQyWhcNMjcxMDI3MTE0NTQy
WjAzMTEwLwYDVQQDEygwM0VGMjc4OENEMTIxNTdCREYyQjBDNTg0MEU2NjVGNTYz
RDhEMjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOZFiUhTG92+
3xcAuouhH3qhfPdcy09ecx7EkjX/QNjuKPd2zLeWHW7A6BaZFODlt/1NsH9Gj2DP
OZC9RCqTgEq5dKT5Cpw5JPqT1/d+tEuhGDGarbXDUDiyF6xai2x4WaLgw+Pty2wG
KSJ6esRc/cvw+bfWz/2vAl2w8xET6m83OFGicWWRfU/ONFO+b9nKnundFy9VKZZV
vdwuMYN1znFn9hkdlAtZlUiuLcgJkC498KpHoiJhimOes32ZNyIHF9LrHObxFcMj
vhkoPOHSmuZgKYSkAc3CSrpmtjwCVgPUfOgVsYG8hvAMK/znZO6GHqYUKL1D7+1w
aAYrF8Vp3QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFAPvJ4jNEhV73ysMWEDmZfVj
2NJ3MB8GA1UdIwQYMBaAFKsu+I8kdJ9aEg363mfJGOTHEMU+MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyOTA4YjNlMjg1MTRhLzAv
QUIyRUY4OEYyNDc0OUY1QTEyMERGQURFNjdDOTE4RTRDNzEwQzUzRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1L2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2LWQxM2JlOTdkOTFhMi8wY2M4
NTdkMDVlZmJiMzUwMjMwNTIwZDA4YzhkN2Y0NWUzNGUzYmZmM2NiNTE2ZTU1Ni5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5Mjkw
OGIzZTI4NTE0YS8wLzMyMzYzMDMyM2E2NjM3NjQ2MzNhM2EyZjMzMzkyZDMzMzky
MDNkM2UyMDMyMzAzOTMxMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGASYC99wAMA0GCSqGSIb3DQEB
CwUAA4IBAQBmh2uK6vxK+GQGAV+xb0D4R5IGTYduh0QYCWZMizfR9Eivep8Wn0Uv
GZPw5PfNo0epl3NAaGzxkUL57JbrfGa6czoKR/lyBOeZO4Cht5oB6GCIovyojEta
/bZ5CESZTRVKKuAgoR8GxbLybfDI5bVvK919aRd11aKvi68olbAmXi1RNRYApx7F
hqVqm9lzqJJiHeIJ2bLCOmp2vrNuuRnmEyY+dvEWo+ernN0Ti3MAuAC2OlJf5Obp
0dPiKYIIHMhtZDCycXnaxF58Sna3pcAh9wgmNzVZ/yXdd/h8GJDir8b3NJ+QndCw
aSebjFhE03dEbgMTEBJtUqJCxNy2wfEl
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:05:12 2026 by rpki-client