Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3330303a3a2f34342d3438203d3e20333935313937.roa
File:                     323630323a666161383a3330303a3a2f34342d3438203d3e20333935313937.roa (raw, json)
Hash identifier:          G6AYkaxd55cMLGpaoz6hYaQDNs9i63Z+rWY06Qq04dk=
Subject key identifier:   31:BA:C6:EE:F5:EB:BB:9E:7C:9E:E0:31:8A:5A:FB:57:51:7C:17:F0
Certificate issuer:       /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial:       538A1650F34C5FD2BCA56E7A4BEE35C0E026B89B
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3330303a3a2f34342d3438203d3e20333935313937.roa
Signing time:             Wed 16 Sep 2026 15:32:30 +0000
ROA not before:           Wed 16 Sep 2026 15:27:30 +0000
ROA not after:            Wed 15 Sep 2027 15:32:30 +0000
asID:                     395197
IP address blocks:        2602:faa8:300::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 23:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8a:16:50:f3:4c:5f:d2:bc:a5:6e:7a:4b:ee:35:c0:e0:26:b8:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
        Validity
            Not Before: Sep 16 15:27:30 2026 GMT
            Not After : Sep 15 15:32:30 2027 GMT
        Subject: CN=31BAC6EEF5EBBB9E7C9EE0318A5AFB57517C17F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d8:9f:14:c8:79:80:ff:80:b1:c1:0b:76:82:
                    9d:fc:7e:2b:08:30:d7:7f:1e:cd:99:9e:c3:97:2c:
                    8c:d7:52:e9:02:f1:71:a2:49:fd:57:a5:dc:10:18:
                    8c:e0:19:09:d5:64:dc:0c:d1:1b:34:ca:17:eb:87:
                    b0:31:00:9d:dc:ca:81:0d:8c:a8:5c:8d:c3:9e:c1:
                    cc:21:b0:95:02:b6:cf:13:d2:6a:88:73:1b:01:d1:
                    60:78:7b:a2:7a:89:2c:6b:3d:31:1e:5b:a2:40:a8:
                    62:1d:c6:69:92:e7:8d:37:3a:b7:44:a7:d8:0a:05:
                    c2:05:7f:b4:fc:39:2d:a1:d4:8c:ab:f0:34:f6:1f:
                    4c:c2:8d:5e:1c:1d:2a:4a:b1:b3:a1:88:93:f0:d5:
                    d7:0b:4c:4d:fa:e6:cd:fc:cd:18:ab:37:51:96:da:
                    28:8e:ed:22:af:ef:54:88:5b:fa:e1:18:df:b0:0d:
                    ed:14:91:8d:10:75:56:33:20:6d:3c:40:60:32:41:
                    b6:75:58:67:67:5c:fd:19:2e:27:37:5f:23:37:35:
                    75:b5:37:9b:bd:12:8a:f6:e8:57:97:3c:b0:e9:61:
                    5b:30:b4:5e:b6:bd:1c:71:f7:7f:37:6b:e0:66:b0:
                    85:46:cd:c9:06:4a:58:40:85:5a:4d:b5:79:a3:81:
                    81:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BA:C6:EE:F5:EB:BB:9E:7C:9E:E0:31:8A:5A:FB:57:51:7C:17:F0
            X509v3 Authority Key Identifier:
                keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3330303a3a2f34342d3438203d3e20333935313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:300::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:1f:4f:fe:28:0d:9c:8e:88:77:9a:e7:5a:c4:88:32:28:2a:
         ad:04:f4:71:e5:03:f7:fe:8b:22:ff:49:f0:89:10:32:25:ca:
         c9:88:fa:22:28:34:6b:71:ff:6d:3b:29:5b:63:ff:ca:c1:d1:
         1f:38:6d:e9:4f:6f:6d:d6:bb:aa:01:d1:81:bc:97:de:85:31:
         bc:3a:64:5e:b8:b7:de:38:d9:8b:6b:3c:92:1c:55:83:9a:6e:
         6b:29:27:7a:49:d7:98:2b:13:ed:17:d7:a8:3b:e3:a4:40:7e:
         d6:80:95:d6:b8:49:da:5b:b1:64:9b:8f:b9:1e:30:34:b6:29:
         a1:4c:83:f2:d0:02:ae:16:e7:27:de:e1:22:f4:c9:7f:5d:53:
         2c:3e:0e:48:81:87:36:6b:ad:ae:78:57:e4:a5:ed:3a:54:95:
         96:f1:d4:02:3a:33:a0:a9:8b:aa:a2:78:8c:52:7d:94:a3:66:
         85:4e:1d:ec:76:19:dd:4a:81:9f:f7:f3:39:31:94:11:e2:d2:
         87:f2:06:5b:95:56:ca:b6:4f:80:6c:52:bc:7c:6a:37:55:5a:
         e6:bd:55:b0:75:15:dd:22:d6:31:0b:ce:e1:14:e9:f9:17:0f:
         94:83:14:53:08:12:fe:7c:c9:b0:02:56:1b:8c:7f:b7:57:a8:
         75:bc:13:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 07:20:06 2026 by rpki-client