Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3430303a3a2f34302d3430203d3e20333936393933.roa
File:                     323630323a663734333a3430303a3a2f34302d3430203d3e20333936393933.roa (raw, json)
Hash identifier:          SQ+mzD+5K1AsoizP/1AZv82S11+FBtVaLXxzi4mKJ80=
Subject key identifier:   27:B0:28:30:F3:1B:80:A5:F2:12:D2:3D:37:03:13:1C:21:A6:63:D9
Certificate issuer:       /CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
Certificate serial:       65800FE4B10A4DE6184F389B7F1004DFAEA8C7AA
Authority key identifier: 30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3430303a3a2f34302d3430203d3e20333936393933.roa
Signing time:             Sun 13 Sep 2026 01:49:46 +0000
ROA not before:           Sun 13 Sep 2026 01:44:46 +0000
ROA not after:            Sun 12 Sep 2027 01:49:46 +0000
asID:                     396993
IP address blocks:        2602:f743:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl
                          rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 04:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:80:0f:e4:b1:0a:4d:e6:18:4f:38:9b:7f:10:04:df:ae:a8:c7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
        Validity
            Not Before: Sep 13 01:44:46 2026 GMT
            Not After : Sep 12 01:49:46 2027 GMT
        Subject: CN=27B02830F31B80A5F212D23D3703131C21A663D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f0:c4:a4:64:f3:d8:df:e0:aa:46:83:50:f5:
                    81:98:a9:03:26:d4:45:2d:73:1f:5a:47:52:19:4b:
                    7d:47:90:53:45:07:0c:43:8d:f3:5a:78:4f:71:96:
                    3d:63:8c:26:de:fb:80:be:c6:1f:d6:46:8b:b8:32:
                    0b:78:9d:f5:96:e7:26:eb:10:2a:1a:82:9f:d9:d5:
                    fa:63:4b:39:c0:18:d4:ea:a1:37:91:17:e0:22:32:
                    40:23:29:6b:8d:5c:88:4f:d5:ea:23:35:28:eb:41:
                    12:e4:de:e7:0e:cc:1b:96:83:98:93:53:d7:89:40:
                    ea:5c:d2:83:d3:a2:1e:19:7e:99:7b:90:bc:06:da:
                    ad:27:c3:93:14:37:ec:4e:3c:e6:5d:ed:3e:92:c2:
                    07:5f:04:bb:6b:4c:68:98:b4:1a:ec:56:37:a9:58:
                    90:ee:84:af:7d:b1:83:23:0e:46:bf:96:fc:2c:21:
                    08:4f:e5:09:7b:81:6f:5a:22:a3:62:4c:15:a0:df:
                    2a:77:e9:47:c7:f7:c2:70:20:3c:8a:c5:9c:3f:56:
                    2f:5f:ab:26:57:be:5a:6d:60:75:af:e5:c3:85:71:
                    d8:c4:ee:48:79:c0:7f:eb:67:27:39:d3:ed:a2:e2:
                    3d:eb:9b:e7:d3:dc:07:79:e5:91:34:7f:6f:6c:7e:
                    e5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B0:28:30:F3:1B:80:A5:F2:12:D2:3D:37:03:13:1C:21:A6:63:D9
            X509v3 Authority Key Identifier:
                keyid:30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3430303a3a2f34302d3430203d3e20333936393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f743:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:49:be:49:f9:8f:44:30:83:04:51:a1:fd:a9:ef:f2:b6:4b:
         d3:38:8c:c8:3a:18:9a:69:b9:83:77:35:0f:05:24:55:85:df:
         0e:9d:00:8e:93:9b:5e:db:02:78:92:a9:95:51:61:81:79:69:
         ab:16:29:86:9a:95:fe:6a:78:01:dd:94:58:da:65:4c:bf:bc:
         76:49:e7:96:67:27:92:8d:60:43:09:95:28:6d:06:3a:ad:19:
         74:6d:ed:8c:ad:2f:b0:f3:55:5c:23:5e:49:66:f0:2a:42:e5:
         32:bb:1e:96:3d:25:af:6b:62:41:87:c4:b6:b0:a1:cd:a3:da:
         45:48:09:db:09:04:2a:8c:5a:2c:ae:b4:c5:a2:01:61:78:d4:
         16:84:66:f2:2d:58:b8:6b:94:2f:fd:73:95:31:bf:f0:38:69:
         40:c5:a8:cd:a0:2f:7b:f2:a8:c2:a0:93:1d:59:69:01:c1:de:
         ab:56:75:37:a7:f2:a7:fe:78:12:ba:5e:08:b9:48:3a:60:79:
         d3:ad:80:2d:8f:fe:1a:8c:90:fb:e5:41:04:20:50:d7:30:27:
         e0:50:88:04:7b:7d:12:0f:59:56:d5:3b:03:ae:6e:9a:f5:60:
         45:b7:1d:e8:c0:f8:42:60:f8:4c:f5:15:40:f0:07:09:75:c4:
         b2:1f:58:71
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUZYAP5LEKTeYYTzibfxAE366ox6owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDM3MjE1OTRkYTk0MjRiOTQ5ZDdjNjk1ZjAyZGVhZDdh
YmZmNDBiYTQyNmEyZTQxZjMwHhcNMjYwOTEzMDE0NDQ2WhcNMjcwOTEyMDE0OTQ2
WjAzMTEwLwYDVQQDEygyN0IwMjgzMEYzMUI4MEE1RjIxMkQyM0QzNzAzMTMxQzIx
QTY2M0Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vDEpGTz2N/g
qkaDUPWBmKkDJtRFLXMfWkdSGUt9R5BTRQcMQ43zWnhPcZY9Y4wm3vuAvsYf1kaL
uDILeJ31lucm6xAqGoKf2dX6Y0s5wBjU6qE3kRfgIjJAIylrjVyIT9XqIzUo60ES
5N7nDswbloOYk1PXiUDqXNKD06IeGX6Ze5C8BtqtJ8OTFDfsTjzmXe0+ksIHXwS7
a0xomLQa7FY3qViQ7oSvfbGDIw5Gv5b8LCEIT+UJe4FvWiKjYkwVoN8qd+lHx/fC
cCA8isWcP1YvX6smV75abWB1r+XDhXHYxO5IecB/62cnOdPtouI965vn09wHeeWR
NH9vbH7lqwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFCewKDDzG4Cl8hLSPTcDExwh
pmPZMB8GA1UdIwQYMBaAFDBrdBpLMqK968y0xz2yUsUszz9RMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzI1ODg2YmM1OTJkZTRiMDU5NjU5YmI3OWVjMDhiYWNiLzAv
MzA2Qjc0MUE0QjMyQTJCREVCQ0NCNEM3M0RCMjUyQzUyQ0NGM0Y1MS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzU2NWY1NDM1LTVjZDEtNDhlNC05Y2ZjLTg0NGZjZDA2ZWZlMS80Mzcy
MTU5NGRhOTQyNGI5NDlkN2M2OTVmMDJkZWFkN2FiZmY0MGJhNDI2YTJlNDFmMy5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8yNTg4NmJjNTkyZGU0YjA1OTY1OWJi
NzllYzA4YmFjYi8wLzMyMzYzMDMyM2E2NjM3MzQzMzNhMzQzMDMwM2EzYTJmMzQz
MDJkMzQzMDIwM2QzZTIwMzMzOTM2MzkzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3QwQwDQYJ
KoZIhvcNAQELBQADggEBABNJvkn5j0QwgwRRof2p7/K2S9M4jMg6GJppuYN3NQ8F
JFWF3w6dAI6Tm17bAniSqZVRYYF5aasWKYaalf5qeAHdlFjaZUy/vHZJ55ZnJ5KN
YEMJlShtBjqtGXRt7YytL7DzVVwjXklm8CpC5TK7HpY9Ja9rYkGHxLawoc2j2kVI
CdsJBCqMWiyutMWiAWF41BaEZvItWLhrlC/9c5Uxv/A4aUDFqM2gL3vyqMKgkx1Z
aQHB3qtWdTen8qf+eBK6Xgi5SDpgedOtgC2P/hqMkPvlQQQgUNcwJ+BQiAR7fRIP
WVbVOwOubpr1YEW3HejA+EJg+Ez1FUDwBwl1xLIfWHE=
-----END CERTIFICATE-----
Generated at Sat Sep 19 06:38:15 2026 by rpki-client