Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61383a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a61383a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          H6dUJ4722wMRcO5V9iAcXdSIf254w7cGWHP40E1J//k=
Subject key identifier:   35:6D:76:2F:DC:B5:01:3E:60:91:2C:F1:E7:3F:71:01:5F:5C:F7:A7
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       1F0E8A64B3B714FF8BDF69155B4B448F07C1A1AB
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61383a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 27 Aug 2026 21:45:56 +0000
ROA not before:           Thu 27 Aug 2026 21:40:56 +0000
ROA not after:            Thu 26 Aug 2027 21:45:56 +0000
asID:                     54148
IP address blocks:        2602:fa43:a8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0e:8a:64:b3:b7:14:ff:8b:df:69:15:5b:4b:44:8f:07:c1:a1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Aug 27 21:40:56 2026 GMT
            Not After : Aug 26 21:45:56 2027 GMT
        Subject: CN=356D762FDCB5013E60912CF1E73F71015F5CF7A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:14:81:8a:1e:00:65:cd:87:c3:2a:58:7d:
                    5e:d9:59:1a:46:9d:d5:2f:23:1d:24:90:b3:c1:fb:
                    71:b4:6b:69:a9:7c:43:e5:2f:e5:b4:dc:87:f9:68:
                    d5:8e:a1:72:4a:0a:78:06:75:de:bb:29:73:5a:23:
                    31:03:ac:8a:92:ff:c2:1c:64:fa:4b:43:32:0f:4c:
                    1d:cc:fd:9b:ca:c9:81:0c:14:2f:87:8e:5e:2f:47:
                    a4:5e:04:36:ee:62:49:5f:df:18:06:ec:93:fd:6a:
                    6c:f2:dd:7b:30:5d:63:ed:f9:c8:a9:e0:cc:75:e2:
                    b7:b4:dc:d7:d6:74:83:47:c4:3a:b2:5e:4b:dc:ba:
                    84:3d:29:bb:54:e5:b3:65:60:5e:9e:dc:ee:7b:e7:
                    d7:32:71:ee:38:26:72:f9:5b:8b:66:03:09:63:cb:
                    c5:92:bf:0e:42:86:de:83:f9:10:79:76:70:7d:47:
                    2f:5d:ed:3a:e3:6a:f6:50:2a:d3:ef:8c:29:b2:91:
                    13:46:87:c0:d1:93:bd:69:48:06:a2:99:dd:1c:c0:
                    06:28:4f:81:05:2b:19:b6:3f:46:45:e1:8a:ed:88:
                    7f:b8:02:41:a5:06:61:d0:f0:d3:62:f8:7d:82:d4:
                    c2:3b:55:1b:59:bb:d9:94:07:d6:06:63:05:2b:e9:
                    cb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6D:76:2F:DC:B5:01:3E:60:91:2C:F1:E7:3F:71:01:5F:5C:F7:A7
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61383a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:a8::/46

    Signature Algorithm: sha256WithRSAEncryption
         93:65:f8:0d:16:98:bd:da:0e:86:46:0f:13:75:a9:9d:ae:4b:
         0c:df:35:99:50:17:91:8f:b4:d5:d2:20:8f:71:b2:ea:22:63:
         43:f1:0a:15:06:40:b3:83:75:67:0e:26:8b:30:2f:e8:3a:0b:
         b4:ef:a7:dd:25:23:e3:d5:9e:70:e6:57:ae:de:99:35:de:f5:
         63:e0:95:42:eb:5d:72:5a:39:0e:b4:c7:fb:62:8f:a9:34:aa:
         b9:93:42:d2:66:f7:1c:2c:20:bd:94:5f:22:d9:0b:9c:f7:d5:
         45:8b:4c:b6:42:9c:bd:48:90:2f:31:da:5a:df:13:13:4d:85:
         e9:35:cc:2f:8b:bd:e9:b1:d1:6c:c0:96:0e:da:fa:14:19:37:
         88:8e:76:be:83:f7:b7:54:8c:46:11:2f:54:3b:1d:92:26:b8:
         27:55:9b:74:54:dc:1d:bf:d6:30:af:db:8f:ad:31:22:4f:21:
         6c:8c:77:7a:dd:77:7b:85:43:a0:2c:f7:4a:71:34:d9:91:62:
         3a:69:2d:9b:40:de:14:ef:01:af:ef:ee:fc:3a:16:6d:5d:5f:
         af:e8:8d:49:06:4a:4e:7c:0d:cb:85:a8:37:64:c9:43:1f:1f:
         fd:8e:9f:fa:9e:de:d7:2a:ae:bb:da:72:97:2e:c5:31:b4:be:
         a3:27:6a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:08:01 2026 by rpki-client