Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31353a3a2f34382d3438203d3e2036303739.roa
File:                     323630323a666164343a31353a3a2f34382d3438203d3e2036303739.roa (raw, json)
Hash identifier:          UqqHdaQs1yM9XQRECEBT3K5YZZsvEHBrjN6ZsUV2lsE=
Subject key identifier:   9C:D0:83:BF:BF:90:34:D5:F9:0B:57:65:7E:4E:23:7B:0D:8F:CD:48
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       03CDF0772AB99D8B882A0F34C3FB50135F4987B2
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31353a3a2f34382d3438203d3e2036303739.roa
Signing time:             Wed 28 Oct 2026 10:36:21 +0000
ROA not before:           Wed 28 Oct 2026 10:31:21 +0000
ROA not after:            Wed 27 Oct 2027 10:36:21 +0000
asID:                     6079
IP address blocks:        2602:fad4:15::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 12:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:cd:f0:77:2a:b9:9d:8b:88:2a:0f:34:c3:fb:50:13:5f:49:87:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Oct 28 10:31:21 2026 GMT
            Not After : Oct 27 10:36:21 2027 GMT
        Subject: CN=9CD083BFBF9034D5F90B57657E4E237B0D8FCD48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:37:9e:fa:41:d8:24:cf:cf:3d:17:ce:fa:
                    0f:83:f9:07:c4:74:c0:45:94:c5:64:95:f7:19:e5:
                    21:12:96:2d:50:bf:e0:1d:11:a8:60:81:a5:b8:3e:
                    54:0f:6e:af:15:c1:ea:54:06:5e:41:10:c4:2e:99:
                    21:52:2e:d7:b8:64:58:21:65:d3:3d:bc:29:d8:11:
                    a9:e4:64:1a:33:c1:a4:4d:d3:78:46:78:48:7b:35:
                    40:c8:ba:26:96:67:88:57:88:ac:42:cc:77:40:89:
                    14:4e:3f:b9:a6:03:66:f6:9d:2d:7d:17:5b:6e:60:
                    1b:52:cc:b2:bb:fa:ed:8a:fd:01:d1:7f:db:81:62:
                    0a:26:77:60:79:6f:c6:db:b5:30:98:80:70:74:e1:
                    61:fe:20:d0:85:d5:24:9d:4f:fd:ad:a4:75:6e:37:
                    ee:a9:e3:6c:1d:d8:f4:ec:3c:21:0d:37:b1:8e:ed:
                    b5:73:93:de:f0:27:67:04:f9:1c:55:c0:82:64:e6:
                    fc:47:54:18:a9:3f:ef:5f:57:0a:db:6f:9c:08:25:
                    c5:da:5a:df:c9:cf:f1:ce:e7:d2:41:b0:cc:bd:16:
                    7c:84:e0:4b:43:03:8a:41:0d:1d:3c:41:72:57:6b:
                    b3:6a:83:42:b6:06:2b:dc:37:7d:bc:ba:5d:fb:0e:
                    c6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D0:83:BF:BF:90:34:D5:F9:0B:57:65:7E:4E:23:7B:0D:8F:CD:48
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a31353a3a2f34382d3438203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:44:2e:d4:2c:8e:e9:33:e3:a5:3f:1c:5f:9e:4f:68:67:59:
         2e:1a:9f:ce:a1:8c:46:13:56:71:0f:78:bd:89:25:a9:bf:10:
         50:30:a1:8b:68:c9:12:4c:14:f7:44:19:8a:fa:4c:7f:a9:35:
         90:a0:cc:48:39:aa:17:d2:0e:70:4f:68:d9:17:e2:a0:90:58:
         8d:21:fd:e3:c9:c8:2d:ea:d8:25:1d:7c:8f:7d:ac:74:ed:d5:
         d6:8f:e6:3f:33:32:b1:83:5c:af:de:b5:2d:1c:01:b2:ce:78:
         a0:b0:5b:b8:e2:59:68:45:ea:d9:23:dd:7a:10:c6:62:4d:05:
         ec:36:5d:c8:12:8a:f8:e8:44:f0:48:31:94:c2:99:0a:d0:bf:
         df:3d:99:80:6b:e2:a7:5c:35:55:f1:12:74:11:52:99:a2:f6:
         b4:c6:ad:10:eb:78:99:1d:97:66:c6:be:9d:e7:e5:73:24:69:
         f3:62:1b:03:40:5c:13:64:56:b4:ab:d3:42:01:48:a8:f6:f1:
         dc:fb:70:be:33:e5:df:61:24:28:f5:37:d3:d8:e0:8c:f0:02:
         44:0b:89:19:b3:a9:e8:20:c5:ee:16:54:b6:e5:07:b1:56:41:
         5f:ad:9c:c9:36:cb:59:79:cb:0b:fc:a2:10:af:0c:ba:76:af:
         73:59:e2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:29:30 2026 by rpki-client