Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3630393a3a2f34382d3438203d3e203534323836.roa
File:                     323630323a666161383a3630393a3a2f34382d3438203d3e203534323836.roa (raw, json)
Hash identifier:          gCGasbAz0FdU9Sg2HYTKjUazztxapsvY/yBCmi3dtwY=
Subject key identifier:   89:F9:17:0B:F2:8F:12:E7:82:35:28:85:1C:3C:23:66:AD:E0:38:8C
Certificate issuer:       /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial:       6A730DF8018624BFEBC1D44F943A564BF8FA5FA1
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3630393a3a2f34382d3438203d3e203534323836.roa
Signing time:             Mon 29 Jun 2026 12:36:14 +0000
ROA not before:           Mon 29 Jun 2026 12:31:14 +0000
ROA not after:            Mon 28 Jun 2027 12:36:14 +0000
asID:                     54286
IP address blocks:        2602:faa8:609::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:73:0d:f8:01:86:24:bf:eb:c1:d4:4f:94:3a:56:4b:f8:fa:5f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
        Validity
            Not Before: Jun 29 12:31:14 2026 GMT
            Not After : Jun 28 12:36:14 2027 GMT
        Subject: CN=89F9170BF28F12E7823528851C3C2366ADE0388C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5a:af:4a:fc:f5:87:c1:83:e0:e3:4d:38:e1:
                    77:7d:1b:cc:ee:6b:e4:f0:9b:26:9b:94:97:8c:3d:
                    d5:35:67:49:d6:58:fa:c1:e4:e8:03:24:fd:0f:74:
                    6b:4b:be:3c:f4:9b:e8:24:3e:c5:1e:fc:d0:58:5b:
                    69:03:c7:3a:ae:01:57:2a:e2:b3:ec:52:93:41:f3:
                    15:87:ab:e9:cc:b8:fc:3a:09:a5:71:19:09:1f:5e:
                    24:62:6e:5d:98:85:64:96:07:09:ca:da:36:62:d9:
                    87:f3:75:31:a2:ed:d5:93:7b:fc:52:c9:86:93:fd:
                    8a:f2:85:77:ce:62:a3:f8:9b:08:b9:e7:35:78:26:
                    97:d3:76:81:b2:b5:79:bb:3f:26:41:54:18:e6:4e:
                    a0:2f:21:73:be:86:86:28:87:31:4d:29:67:dd:c3:
                    f3:f4:a5:fb:d2:9d:05:aa:3b:8b:45:64:0b:ee:71:
                    02:0b:51:ed:71:75:77:8e:8f:76:97:28:e3:a1:83:
                    28:bf:df:a3:51:42:61:c5:e4:bf:82:43:0a:ff:ba:
                    1a:fe:8b:ff:02:5f:ad:dd:78:93:fd:89:a0:a6:58:
                    db:b3:1a:f6:09:d9:a5:18:99:68:38:5b:98:6f:e2:
                    aa:98:71:c1:21:7f:28:2c:62:75:73:6d:7d:0c:cd:
                    8e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F9:17:0B:F2:8F:12:E7:82:35:28:85:1C:3C:23:66:AD:E0:38:8C
            X509v3 Authority Key Identifier:
                keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3630393a3a2f34382d3438203d3e203534323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:609::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:d6:8e:86:75:d7:d8:ca:62:47:2d:53:a5:64:db:18:a3:a3:
         15:8e:1c:bd:38:51:16:13:3c:34:55:9d:47:73:75:87:63:d7:
         d6:80:19:6c:95:23:73:95:e6:f7:32:fe:25:af:18:9f:fc:59:
         a1:a9:14:ac:20:33:0f:58:a3:87:49:86:51:db:83:36:3a:46:
         f4:df:95:95:98:0c:a7:e7:21:2b:8f:2f:7c:d9:33:a0:75:47:
         83:74:c4:f4:8f:1f:f7:75:73:24:80:96:03:9b:15:c8:b9:15:
         20:b3:d5:e2:48:3c:93:c5:ac:51:50:bc:7d:1a:0f:71:f9:87:
         6a:ed:00:4d:80:93:b9:55:e1:10:52:ed:21:e7:57:e0:c0:cf:
         2e:04:62:21:5e:ef:57:79:73:1d:d3:9d:11:d7:17:35:f8:54:
         2d:8c:04:f8:3f:4f:ed:0c:f9:77:18:47:94:65:85:42:c8:b4:
         40:1c:82:af:6c:25:3d:b1:6f:0d:ac:02:a4:55:f9:9d:cf:b7:
         39:5b:c7:e9:a5:c0:9f:c0:c7:65:f5:1e:57:81:6b:00:d6:d1:
         e9:61:34:31:9c:fe:67:a9:27:03:9b:13:6f:44:ec:8b:39:87:
         13:0f:38:eb:d2:fb:19:e4:6c:53:1e:bf:58:79:25:b0:ad:a2:
         68:67:b1:61
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUanMN+AGGJL/rwdRPlDpWS/j6X6EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMmE1YWY3NGRiYjA2YzRlMDBiYTM0OGVjY2RjOTRiZDRl
NzUxY2MzN2FkZmY2YjdkNDQwHhcNMjYwNjI5MTIzMTE0WhcNMjcwNjI4MTIzNjE0
WjAzMTEwLwYDVQQDEyg4OUY5MTcwQkYyOEYxMkU3ODIzNTI4ODUxQzNDMjM2NkFE
RTAzODhDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FqvSvz1h8GD
4ONNOOF3fRvM7mvk8Jsmm5SXjD3VNWdJ1lj6weToAyT9D3RrS7489JvoJD7FHvzQ
WFtpA8c6rgFXKuKz7FKTQfMVh6vpzLj8OgmlcRkJH14kYm5dmIVklgcJyto2YtmH
83Uxou3Vk3v8UsmGk/2K8oV3zmKj+JsIuec1eCaX03aBsrV5uz8mQVQY5k6gLyFz
voaGKIcxTSln3cPz9KX70p0FqjuLRWQL7nECC1HtcXV3jo92lyjjoYMov9+jUUJh
xeS/gkMK/7oa/ov/Al+t3XiT/Ymgpljbsxr2CdmlGJloOFuYb+KqmHHBIX8oLGJ1
c219DM2OmQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFIn5FwvyjxLngjUohRw8I2at
4DiMMB8GA1UdIwQYMBaAFKNNW+y4AcKoWphbvD+edOQHepVHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODcyODk4ODgwMTg3NjAyYTUwYTAzOTEwLzAv
QTM0RDVCRUNCODAxQzJBODVBOTg1QkJDM0Y5RTc0RTQwNzdBOTU0Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzcwZjVkODBjLTlkYWEtNGY2Zi04ZjU4LTE4MWM1ZjBjNGIwYS8yYTVh
Zjc0ZGJiMDZjNGUwMGJhMzQ4ZWNjZGM5NGJkNGU3NTFjYzM3YWRmZjZiN2Q0NC5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg3Mjg5ODg4MDE4NzYw
MmE1MGEwMzkxMC8wLzMyMzYzMDMyM2E2NjYxNjEzODNhMzYzMDM5M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzUzNDMyMzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+qgGCTANBgkq
hkiG9w0BAQsFAAOCAQEAidaOhnXX2MpiRy1TpWTbGKOjFY4cvThRFhM8NFWdR3N1
h2PX1oAZbJUjc5Xm9zL+Ja8Yn/xZoakUrCAzD1ijh0mGUduDNjpG9N+VlZgMp+ch
K48vfNkzoHVHg3TE9I8f93VzJICWA5sVyLkVILPV4kg8k8WsUVC8fRoPcfmHau0A
TYCTuVXhEFLtIedX4MDPLgRiIV7vV3lzHdOdEdcXNfhULYwE+D9P7Qz5dxhHlGWF
Qsi0QByCr2wlPbFvDawCpFX5nc+3OVvH6aXAn8DHZfUeV4FrANbR6WE0MZz+Z6kn
A5sTb0TsizmHEw8469L7GeRsUx6/WHklsK2iaGexYQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:47:02 2026 by rpki-client