Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a623130303a3a2f34302d3430203d3e203137313339.roa
File:                     323630373a666361383a623130303a3a2f34302d3430203d3e203137313339.roa (raw, json)
Hash identifier:          UFmJk6OfknjhOZRpFGyusJZBAKYs2BMjEn2fwyGzWY4=
Subject key identifier:   86:01:7A:68:D7:3D:B7:11:84:1D:D2:FF:9D:69:62:85:6D:72:06:1E
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       46CB72E1A5C592F324E2DCA25226F1E033AD5B07
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a623130303a3a2f34302d3430203d3e203137313339.roa
Signing time:             Wed 17 Jun 2026 19:36:09 +0000
ROA not before:           Wed 17 Jun 2026 19:31:09 +0000
ROA not after:            Wed 16 Jun 2027 19:36:09 +0000
asID:                     17139
IP address blocks:        2607:fca8:b100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 17:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:cb:72:e1:a5:c5:92:f3:24:e2:dc:a2:52:26:f1:e0:33:ad:5b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jun 17 19:31:09 2026 GMT
            Not After : Jun 16 19:36:09 2027 GMT
        Subject: CN=86017A68D73DB711841DD2FF9D6962856D72061E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e9:84:49:d8:c5:76:2d:b3:58:b2:83:48:9f:
                    7a:c9:68:29:61:8c:b2:a4:8f:d6:99:3c:b7:09:0b:
                    45:e9:ed:44:87:f3:7c:dc:c7:d8:bb:b3:86:8a:be:
                    2c:da:fd:75:88:69:b2:b4:46:2e:6e:1b:e3:2c:7e:
                    75:2f:24:c5:6d:a5:75:37:d0:32:35:6d:79:36:65:
                    73:4b:67:fa:db:d5:79:2f:e9:cf:3e:9d:6e:ba:a3:
                    de:b2:ff:7a:93:31:5a:a8:ed:ff:f1:06:bf:8b:69:
                    d0:3f:2e:d7:03:35:11:de:a1:a0:89:4b:3c:59:ca:
                    d6:b9:35:e0:73:e0:9d:98:45:cd:e3:e9:41:e6:75:
                    86:3c:5d:18:f6:74:ca:e2:36:0c:73:cb:5f:7e:a8:
                    ad:3d:f0:b0:15:84:7c:df:58:1e:ca:9f:47:8b:44:
                    01:81:ec:aa:77:63:f5:d4:5a:21:d4:1b:75:71:98:
                    9c:b2:40:14:4b:6d:d7:97:f5:01:04:ca:b3:b5:53:
                    73:79:ec:35:35:d1:dc:dc:81:4b:53:93:f1:99:68:
                    02:95:5f:55:b7:e8:a0:d9:25:09:93:f7:1b:8a:ab:
                    b5:29:52:91:d0:5b:93:1c:6d:b2:9a:7e:33:8c:1c:
                    d8:de:48:97:18:d9:20:d7:23:51:44:08:2c:c1:74:
                    b7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:01:7A:68:D7:3D:B7:11:84:1D:D2:FF:9D:69:62:85:6D:72:06:1E
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a623130303a3a2f34302d3430203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fca8:b100::/40

    Signature Algorithm: sha256WithRSAEncryption
         43:09:61:03:0d:f0:99:24:a3:5d:58:c9:89:73:33:d7:ac:ad:
         9b:36:d7:7b:cc:5a:6a:99:7e:f2:de:5f:37:c8:2f:5d:4d:db:
         6e:06:88:54:ff:e6:17:72:86:ea:74:9c:7f:7c:8a:bb:f4:c8:
         b4:80:36:fc:a9:6a:1e:b4:55:79:49:1e:35:39:3d:d4:46:59:
         5a:6e:27:37:3b:ae:46:4d:6d:8e:a2:6c:7d:c6:cb:5b:76:e4:
         5c:04:60:8a:5a:2d:42:21:33:ba:2b:18:62:37:c1:90:fb:50:
         ac:3d:f6:9f:39:09:01:ab:f3:d4:54:37:14:a7:72:26:9f:19:
         f3:47:33:9e:e1:c3:2f:c9:6f:ac:b4:ab:23:52:dd:47:ce:58:
         a4:ae:79:86:a8:59:ba:88:e1:58:a1:84:c2:f0:ed:b6:77:0c:
         9f:03:fe:3a:cb:27:6b:10:0a:21:23:df:30:da:d3:e2:54:27:
         b2:97:aa:e3:42:e1:07:e7:a7:18:c9:e1:8b:ce:f0:2d:f4:cf:
         e5:3a:9e:1f:ca:f3:e3:f1:22:23:39:88:e5:8c:60:73:86:ff:
         62:64:78:6f:6e:86:b4:a4:f4:c1:de:54:0f:ae:ca:af:b1:49:
         10:44:36:77:52:13:18:74:3b:d6:a9:55:7d:f7:fc:04:67:aa:
         1d:b5:c8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:27:05 2026 by rpki-client