Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61633a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a61633a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          YOQroCPIvkY1MUsiX5NCW1pvN3r5uIes2PYRVDZ5/K8=
Subject key identifier:   BA:B8:ED:6C:9C:37:C8:B7:E0:FF:19:38:36:4A:D3:57:BC:78:D6:F8
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       229B3252BB9D44CE947DDD3DFC26129151AF2DF8
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61633a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 25 Sep 2025 21:45:13 +0000
ROA not before:           Thu 25 Sep 2025 21:40:13 +0000
ROA not after:            Thu 24 Sep 2026 21:45:13 +0000
asID:                     54148
IP address blocks:        2602:fa43:ac::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:9b:32:52:bb:9d:44:ce:94:7d:dd:3d:fc:26:12:91:51:af:2d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Sep 25 21:40:13 2025 GMT
            Not After : Sep 24 21:45:13 2026 GMT
        Subject: CN=BAB8ED6C9C37C8B7E0FF1938364AD357BC78D6F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:36:de:5c:e7:89:65:42:81:7f:e5:1f:ce:49:
                    f7:1f:23:2b:73:b0:7e:78:51:c6:1d:a0:91:c1:9e:
                    de:34:b1:a3:53:7f:7d:c2:d0:ab:c1:26:03:6b:8c:
                    f6:b1:b1:d4:b1:17:3e:20:ce:cc:1f:a6:4b:2c:51:
                    31:a6:1c:17:f9:0d:ae:12:f4:40:28:ee:f3:43:7c:
                    48:53:76:87:21:65:85:e4:92:e2:df:d8:41:bd:1d:
                    d5:b2:8f:0d:69:2e:6d:7e:77:20:b0:98:77:d2:72:
                    88:05:df:9a:8f:e3:3e:01:e8:af:c4:38:d2:b8:11:
                    21:f8:dd:65:17:f7:55:a2:cb:4a:76:3d:7d:2d:82:
                    3b:fa:12:f8:5d:13:b3:46:80:49:70:2a:61:7d:1f:
                    3a:39:59:23:9a:6f:f0:df:1f:9a:3f:25:a4:c9:0d:
                    ef:2f:24:6d:06:06:72:29:b8:8e:c7:36:60:ca:a6:
                    a0:7c:b3:16:3b:d9:c1:c9:dc:be:fc:e4:0f:26:87:
                    30:25:9d:a0:fa:81:5a:61:e9:6c:3f:6d:3a:e5:4d:
                    0f:5a:9f:8e:fc:54:6b:a7:56:cb:c4:b0:20:95:3c:
                    ad:82:53:a0:45:e8:06:11:32:be:c3:eb:15:52:a1:
                    73:c0:c7:30:49:a1:0e:c7:fd:48:08:04:9e:c4:4f:
                    d4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B8:ED:6C:9C:37:C8:B7:E0:FF:19:38:36:4A:D3:57:BC:78:D6:F8
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61633a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:ac::/46

    Signature Algorithm: sha256WithRSAEncryption
         45:0a:57:78:b8:75:2c:33:5b:28:0a:ff:94:d3:97:77:34:6c:
         36:76:20:92:b9:28:2c:d0:40:e3:e2:5b:b0:b0:68:16:93:a9:
         08:6a:86:fa:89:2c:9a:67:29:77:ac:75:b7:3f:a4:62:f2:9a:
         57:f2:a0:6a:ab:d6:3e:f5:cc:be:76:c6:9d:33:1d:52:0f:32:
         cc:fd:65:fc:c6:e0:67:f7:1e:77:6f:19:20:49:6c:ac:95:ae:
         bc:56:fc:6a:46:cd:5e:25:42:04:cc:66:e0:52:72:4c:5d:0c:
         6c:90:bd:34:24:76:b0:00:f2:80:37:fe:d2:10:1e:3d:81:c6:
         46:a8:32:39:de:84:15:75:6a:ed:08:3b:6a:13:ba:50:ee:66:
         ab:49:77:7e:1f:ce:d5:d1:a2:f8:8d:cf:17:3a:91:82:52:2b:
         54:4e:b6:22:9a:79:84:a7:a5:1a:ff:d6:68:36:1d:35:cf:24:
         ed:ad:94:de:23:14:85:e0:4e:09:3d:0a:fa:ac:2f:af:4b:d5:
         c6:db:0a:4e:a7:dd:c5:e4:6d:7e:f6:12:1a:57:bc:56:e6:c6:
         71:86:aa:c5:bc:b7:fb:ef:6a:3c:9c:2a:12:ca:93:66:47:00:
         f6:94:6a:14:84:52:c0:17:fe:dc:76:44:3e:1f:a6:36:ef:c6:
         44:4c:6b:52
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUIpsyUrudRM6Ufd09/CYSkVGvLfgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2VjYWUzMjA0OTUyZGE3NGViMWI5MzcxNGI2N2NjNjFi
YzRmN2IxNTk1YTIxMzI3ODgwHhcNMjUwOTI1MjE0MDEzWhcNMjYwOTI0MjE0NTEz
WjAzMTEwLwYDVQQDEyhCQUI4RUQ2QzlDMzdDOEI3RTBGRjE5MzgzNjRBRDM1N0JD
NzhENkY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TbeXOeJZUKB
f+Ufzkn3HyMrc7B+eFHGHaCRwZ7eNLGjU399wtCrwSYDa4z2sbHUsRc+IM7MH6ZL
LFExphwX+Q2uEvRAKO7zQ3xIU3aHIWWF5JLi39hBvR3Vso8NaS5tfncgsJh30nKI
Bd+aj+M+AeivxDjSuBEh+N1lF/dVostKdj19LYI7+hL4XROzRoBJcCphfR86OVkj
mm/w3x+aPyWkyQ3vLyRtBgZyKbiOxzZgyqagfLMWO9nBydy+/OQPJocwJZ2g+oFa
YelsP2065U0PWp+O/FRrp1bLxLAglTytglOgRegGETK+w+sVUqFzwMcwSaEOx/1I
CASexE/UwwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFLq47WycN8i34P8ZODZK01e8
eNb4MB8GA1UdIwQYMBaAFARA7JGuBOgEkb9mFzYJfzVpx9sbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyYmFjYjdhYmI3YTI4LzMv
MDQ0MEVDOTFBRTA0RTgwNDkxQkY2NjE3MzYwOTdGMzU2OUM3REIxQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiL2VlMWJkZmY4LWRiYjUtNGYwZi05OGU2LWM4ZTEzMjZiYTc5Yi83ZWNh
ZTMyMDQ5NTJkYTc0ZWIxYjkzNzE0YjY3Y2M2MWJjNGY3YjE1OTVhMjEzMjc4OC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5MmJh
Y2I3YWJiN2EyOC8zLzMyMzYzMDMyM2E2NjYxMzQzMzNhNjE2MzNhM2EyZjM0MzYy
ZDM0MzYyMDNkM2UyMDM1MzQzMTM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwImAvpDAKwwDQYJKoZI
hvcNAQELBQADggEBAEUKV3i4dSwzWygK/5TTl3c0bDZ2IJK5KCzQQOPiW7CwaBaT
qQhqhvqJLJpnKXesdbc/pGLymlfyoGqr1j71zL52xp0zHVIPMsz9ZfzG4Gf3Hndv
GSBJbKyVrrxW/GpGzV4lQgTMZuBSckxdDGyQvTQkdrAA8oA3/tIQHj2BxkaoMjne
hBV1au0IO2oTulDuZqtJd34fztXRoviNzxc6kYJSK1ROtiKaeYSnpRr/1mg2HTXP
JO2tlN4jFIXgTgk9CvqsL69L1cbbCk6n3cXkbX72EhpXvFbmxnGGqsW8t/vvajyc
KhLKk2ZHAPaUahSEUsAX/tx2RD4fpjbvxkRMa1I=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:30:36 2025 by rpki-client