Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a35313a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a35313a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          FAj/Xq38C/Zc0Kml6Qj9Aje7NMve5CrOcMiXefXdfWI=
Subject key identifier:   CF:E6:13:B9:02:28:C2:BE:9E:68:70:35:39:0E:15:C9:69:D6:EC:70
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       6B5AD06710F846D41B17F996E5AEEA2BE39DBB49
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a35313a3a2f34382d3438203d3e203534313438.roa
Signing time:             Wed 04 Nov 2026 09:46:07 +0000
ROA not before:           Wed 04 Nov 2026 09:41:07 +0000
ROA not after:            Wed 03 Nov 2027 09:46:07 +0000
asID:                     54148
IP address blocks:        2602:fa43:51::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 09:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5a:d0:67:10:f8:46:d4:1b:17:f9:96:e5:ae:ea:2b:e3:9d:bb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Nov  4 09:41:07 2026 GMT
            Not After : Nov  3 09:46:07 2027 GMT
        Subject: CN=CFE613B90228C2BE9E687035390E15C969D6EC70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a4:45:a5:28:08:53:73:3f:86:13:02:7d:0d:
                    a3:f3:12:3f:78:65:52:39:20:e5:04:f5:17:e1:63:
                    f9:3e:e1:f5:ea:da:b4:85:cb:1f:02:2d:87:65:2e:
                    d1:2f:65:92:09:7b:51:8d:ec:04:11:b2:5b:cc:c4:
                    f1:e0:25:2a:29:b2:ba:04:33:94:65:60:81:de:7b:
                    69:46:46:4c:df:01:e6:21:88:7c:2b:21:c3:95:5b:
                    c5:c0:50:b0:8c:8a:df:4e:79:50:05:e0:a9:e3:89:
                    31:14:d8:25:86:69:82:cb:d1:95:ff:9c:e5:a3:1e:
                    77:72:fb:cb:e5:76:49:26:5a:4d:71:46:f4:f6:d6:
                    81:09:b1:a2:dd:4e:39:a7:6d:51:d9:6d:e1:85:ce:
                    b8:82:d7:21:d3:19:98:ca:e5:2f:fa:d3:73:90:19:
                    01:9d:78:33:ad:c5:19:cc:35:b1:f7:d6:09:dd:87:
                    f7:7d:6b:28:00:f5:fe:50:74:a9:07:05:2d:49:c9:
                    82:af:af:27:46:62:df:e2:7a:bb:d6:e8:78:8a:53:
                    88:bd:cc:77:7f:b0:88:55:e5:dc:e7:58:1a:4f:e7:
                    07:e9:3a:f5:ca:39:d6:60:a5:a5:0d:7e:ab:55:b0:
                    eb:35:cb:d4:8b:10:3a:39:ae:05:d5:16:1b:4c:eb:
                    56:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E6:13:B9:02:28:C2:BE:9E:68:70:35:39:0E:15:C9:69:D6:EC:70
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a35313a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:51::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:49:79:1c:f7:bf:a1:41:f2:63:70:be:a6:4f:6d:be:7f:92:
         90:f2:bd:ae:cb:97:e3:c5:44:47:30:f6:21:93:5c:0d:b2:9f:
         c4:0e:ed:f0:c8:56:ef:8c:28:fd:d0:45:3b:6d:fe:49:49:0c:
         bf:2d:67:58:89:67:aa:44:1c:a9:95:11:3d:33:eb:84:a6:63:
         8b:60:40:21:75:fd:3e:62:c3:3b:91:f8:f4:2a:ec:e5:9b:1d:
         12:2c:e3:a8:ac:2e:a9:a8:87:96:01:f8:33:71:5e:04:27:45:
         16:2b:fe:38:f6:a3:e5:45:2e:b5:f9:59:75:7a:f0:fb:f5:3f:
         f5:7c:fc:70:e9:f1:92:4a:b0:29:af:6c:3b:3c:50:4f:5b:5f:
         12:86:96:11:26:b2:ca:d9:44:86:53:1b:10:67:87:4b:fc:65:
         4f:ef:b2:55:ff:77:43:df:e1:87:61:f8:51:a5:3d:0f:3b:0e:
         50:e8:10:91:30:6f:d6:7b:ca:f1:c7:11:6c:1e:24:da:b4:b1:
         09:a9:7f:27:76:a5:e1:56:c3:4a:be:38:f2:a4:28:a0:76:82:
         51:6c:1f:54:7a:af:08:50:39:34:e2:df:62:50:a3:f7:2d:91:
         03:d8:68:e7:df:0d:3f:fa:c0:e0:3a:3d:64:55:0d:a5:45:e6:
         cd:1f:35:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:51:12 2026 by rpki-client