Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a34323a3a2f34382d3438203d3e20323139343639.roa
File:                     323630323a666164343a34323a3a2f34382d3438203d3e20323139343639.roa (raw, json)
Hash identifier:          s5dRWckWax3Avj7K4VtT5Fu1ZwSvQuCMIw/p2fO+UGE=
Subject key identifier:   87:87:46:4C:48:06:D3:B3:5B:14:12:2F:A2:4B:EF:88:A8:13:9C:80
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       1E08A4C03607E368E6B8C5216B9F8127249383A7
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a34323a3a2f34382d3438203d3e20323139343639.roa
Signing time:             Thu 15 Oct 2026 11:40:04 +0000
ROA not before:           Thu 15 Oct 2026 11:35:04 +0000
ROA not after:            Thu 14 Oct 2027 11:40:04 +0000
asID:                     219469
IP address blocks:        2602:fad4:42::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 12:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:08:a4:c0:36:07:e3:68:e6:b8:c5:21:6b:9f:81:27:24:93:83:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Oct 15 11:35:04 2026 GMT
            Not After : Oct 14 11:40:04 2027 GMT
        Subject: CN=8787464C4806D3B35B14122FA24BEF88A8139C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:60:1e:57:e2:4f:c7:c9:ad:23:e2:6e:75:d3:
                    70:1a:48:4b:44:0a:6d:96:de:c9:56:32:30:2f:ee:
                    b1:7d:b5:00:87:c2:76:d8:9e:50:71:c0:f6:87:06:
                    b7:eb:cc:b7:2b:36:64:ee:a1:35:52:05:6e:64:a6:
                    92:e9:1c:a0:bf:6e:91:74:6c:b9:08:b6:54:c4:38:
                    1f:d6:fa:25:70:27:da:53:79:ae:38:96:14:8c:3f:
                    1c:fd:5d:84:a9:45:0d:91:43:18:13:c8:d6:11:47:
                    10:a2:60:33:2b:b5:74:cc:bc:39:30:5f:e0:26:0e:
                    f5:ca:50:04:f3:9a:b2:cb:db:be:8b:cd:09:fb:a8:
                    2b:bf:cd:33:4a:7a:54:68:1c:56:ee:fd:fe:ab:82:
                    e1:f9:dd:1a:c1:e2:6b:9e:bb:a2:38:12:ed:6f:e0:
                    44:f1:02:e9:ee:e9:4f:dc:0f:25:14:a5:7a:2e:dc:
                    73:d2:b4:92:e5:d1:81:f1:b1:49:63:35:ee:e3:d3:
                    de:9c:ce:94:4b:ae:91:1c:dc:d3:73:17:dc:81:31:
                    49:ad:9b:7e:0d:b6:09:5f:1e:3c:df:6b:f4:8c:27:
                    6f:35:7b:79:ea:ad:1f:b8:28:ca:d8:24:9f:6a:1f:
                    6e:a7:d2:e0:56:82:4d:3a:36:e7:34:2d:f8:4d:2a:
                    0e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:87:46:4C:48:06:D3:B3:5B:14:12:2F:A2:4B:EF:88:A8:13:9C:80
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a34323a3a2f34382d3438203d3e20323139343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:42::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:d4:7c:c5:43:88:b7:a0:60:e0:27:28:e9:6f:1e:42:83:88:
         65:e6:5b:dd:7b:df:2c:d3:50:80:fa:5d:90:0e:60:3f:2e:28:
         31:1c:58:6b:27:31:20:6b:c1:9d:1c:d6:e2:1e:1a:00:8b:96:
         5d:56:53:52:1e:12:c6:40:e8:46:fd:f4:b7:22:9a:fa:35:18:
         82:0c:3e:78:8d:fd:65:d4:63:33:f7:ff:ac:e0:3a:78:60:d4:
         eb:21:12:37:fd:99:04:72:f8:4c:d3:5d:20:41:23:52:ef:1f:
         37:57:d6:de:98:01:2f:90:06:a5:73:9c:39:dc:4c:9d:e4:6f:
         1c:c2:5a:9e:b0:30:80:dc:a8:6d:a6:8b:52:fa:17:4a:05:05:
         97:67:ca:51:60:8d:c4:3c:70:77:5f:1e:a9:75:84:11:ef:f9:
         50:99:01:7a:27:c3:7e:d9:c4:ca:c2:86:08:7e:73:74:0a:2a:
         fc:8e:06:7d:3e:ed:d7:a0:91:21:6a:a7:66:ac:23:47:0f:26:
         4d:12:41:5d:63:54:f4:16:78:09:6f:73:75:07:8d:02:f9:35:
         0c:38:2c:a3:93:11:80:de:86:01:26:32:b3:c1:52:0b:70:b9:
         8c:d8:14:c3:56:3b:2c:e0:51:58:be:4a:7a:52:74:ab:a7:13:
         03:1a:58:03
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUHgikwDYH42jmuMUha5+BJySTg6cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTNlMTM1MjE2YTM3NTU0MGJlNWVmMzQ1MmU2YWEzMmEw
YTAzZWFjNjY3Y2I5ZmU2NGUwHhcNMjYxMDE1MTEzNTA0WhcNMjcxMDE0MTE0MDA0
WjAzMTEwLwYDVQQDEyg4Nzg3NDY0QzQ4MDZEM0IzNUIxNDEyMkZBMjRCRUY4OEE4
MTM5QzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWAeV+JPx8mt
I+JuddNwGkhLRAptlt7JVjIwL+6xfbUAh8J22J5QccD2hwa368y3KzZk7qE1UgVu
ZKaS6Rygv26RdGy5CLZUxDgf1volcCfaU3muOJYUjD8c/V2EqUUNkUMYE8jWEUcQ
omAzK7V0zLw5MF/gJg71ylAE85qyy9u+i80J+6grv80zSnpUaBxW7v3+q4Lh+d0a
weJrnruiOBLtb+BE8QLp7ulP3A8lFKV6Ltxz0rSS5dGB8bFJYzXu49PenM6US66R
HNzTcxfcgTFJrZt+DbYJXx4832v0jCdvNXt56q0fuCjK2CSfah9up9LgVoJNOjbn
NC34TSoOGwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFIeHRkxIBtOzWxQSL6JL74io
E5yAMB8GA1UdIwQYMBaAFJB1EYPkO6TqsWr2BLUEHo/+8x3yMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODg5YzNlYWUwMTg4YWZmNjY3MzQwOTRkLzAv
OTA3NTExODNFNDNCQTRFQUIxNkFGNjA0QjUwNDFFOEZGRUYzMURGMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjLzA3NDNlYWNmLWJjNGYtNGM4YS05MTQwLTEzNDdiNmZhNmVlNS9hM2Ux
MzUyMTZhMzc1NTQwYmU1ZWYzNDUyZTZhYTMyYTBhMDNlYWM2NjdjYjlmZTY0ZS5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4OWMzZWFlMDE4OGFm
ZjY2NzM0MDk0ZC8wLzMyMzYzMDMyM2E2NjYxNjQzNDNhMzQzMjNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMyMzEzOTM0MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+tQAQjANBgkq
hkiG9w0BAQsFAAOCAQEACNR8xUOIt6Bg4Cco6W8eQoOIZeZb3XvfLNNQgPpdkA5g
Py4oMRxYaycxIGvBnRzW4h4aAIuWXVZTUh4SxkDoRv30tyKa+jUYggw+eI39ZdRj
M/f/rOA6eGDU6yESN/2ZBHL4TNNdIEEjUu8fN1fW3pgBL5AGpXOcOdxMneRvHMJa
nrAwgNyobaaLUvoXSgUFl2fKUWCNxDxwd18eqXWEEe/5UJkBeifDftnEysKGCH5z
dAoq/I4GfT7t16CRIWqnZqwjRw8mTRJBXWNU9BZ4CW9zdQeNAvk1DDgso5MRgN6G
ASYys8FSC3C5jNgUw1Y7LOBRWL5KelJ0q6cTAxpYAw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 06:09:49 2026 by rpki-client