Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/5b3604d308c14dcb8c42f94e626bc325/0/323630323a663266663a343a3a2f34382d3438203d3e203136353039.roa
File:                     323630323a663266663a343a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          zhy6ERkB6hEFOGr2FqDyb6N/ctRQiR9goBdY/oNiWXU=
Subject key identifier:   93:6D:10:9D:48:F8:3D:40:3A:BD:D7:11:C2:90:C8:9C:A3:CB:BF:64
Certificate issuer:       /CN=537890103bd768230c30193c5df321d11e6abc8fe3846baa87
Certificate serial:       61D1ECBE2E13FCE560C7A65BC00612A1ED4FF6E6
Authority key identifier: 96:C1:73:00:99:54:13:C9:83:AC:37:EE:0C:36:EC:F5:75:90:04:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5d1ab285-6e35-49f4-a20f-0ef6f4885a62/537890103bd768230c30193c5df321d11e6abc8fe3846baa87.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/5b3604d308c14dcb8c42f94e626bc325/0/323630323a663266663a343a3a2f34382d3438203d3e203136353039.roa
Signing time:             Fri 11 Sep 2026 06:44:55 +0000
ROA not before:           Fri 11 Sep 2026 06:39:55 +0000
ROA not after:            Fri 10 Sep 2027 06:44:55 +0000
asID:                     16509
IP address blocks:        2602:f2ff:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/5b3604d308c14dcb8c42f94e626bc325/0/96C17300995413C983AC37EE0C36ECF5759004F3.crl
                          rsync://rpki-rps.arin.net/repository/5b3604d308c14dcb8c42f94e626bc325/0/96C17300995413C983AC37EE0C36ECF5759004F3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5d1ab285-6e35-49f4-a20f-0ef6f4885a62/537890103bd768230c30193c5df321d11e6abc8fe3846baa87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5d1ab285-6e35-49f4-a20f-0ef6f4885a62/5d1ab285-6e35-49f4-a20f-0ef6f4885a62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5d1ab285-6e35-49f4-a20f-0ef6f4885a62/5d1ab285-6e35-49f4-a20f-0ef6f4885a62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5d1ab285-6e35-49f4-a20f-0ef6f4885a62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 03:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d1:ec:be:2e:13:fc:e5:60:c7:a6:5b:c0:06:12:a1:ed:4f:f6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=537890103bd768230c30193c5df321d11e6abc8fe3846baa87
        Validity
            Not Before: Sep 11 06:39:55 2026 GMT
            Not After : Sep 10 06:44:55 2027 GMT
        Subject: CN=936D109D48F83D403ABDD711C290C89CA3CBBF64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1b:35:28:48:81:4f:e8:7b:bb:fa:7e:e9:3d:
                    d0:f1:91:b4:83:96:84:63:0d:c9:86:f7:59:22:cf:
                    63:2e:2a:80:52:16:f2:49:b6:42:0a:4e:82:a8:45:
                    3d:3f:df:ed:c1:81:38:2b:56:d3:d6:c5:26:41:44:
                    c0:d4:dc:b1:3d:51:1b:6d:b2:d4:75:7b:24:a9:78:
                    12:95:4c:35:c2:43:1c:5d:43:96:a0:95:b7:c3:e0:
                    7b:e3:2f:71:7c:7b:71:12:c4:24:19:92:35:48:1e:
                    9d:aa:78:84:24:36:e9:01:ce:dd:84:24:1c:da:40:
                    af:eb:88:16:02:23:aa:47:a7:a9:40:81:63:af:9f:
                    92:b5:91:29:9c:a5:1a:59:c2:7c:77:f8:ab:f8:15:
                    04:9c:91:2d:8d:36:3d:29:71:ad:9e:7b:28:aa:f4:
                    5f:48:8c:6a:ee:9d:50:b5:10:3e:44:dc:23:af:fa:
                    c3:ef:81:43:61:e2:9e:bf:7e:ca:8e:dc:3a:ee:d6:
                    13:69:09:e6:cc:73:7b:34:22:22:6d:36:fe:b7:0b:
                    71:75:bc:ff:30:62:da:c8:64:b7:f8:34:4b:3f:bc:
                    f7:25:69:46:fe:0d:cb:8e:c1:d1:26:3a:07:0f:c2:
                    db:06:0b:cb:d3:31:40:64:ff:31:64:e4:7d:6b:4b:
                    c7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6D:10:9D:48:F8:3D:40:3A:BD:D7:11:C2:90:C8:9C:A3:CB:BF:64
            X509v3 Authority Key Identifier:
                keyid:96:C1:73:00:99:54:13:C9:83:AC:37:EE:0C:36:EC:F5:75:90:04:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/5b3604d308c14dcb8c42f94e626bc325/0/96C17300995413C983AC37EE0C36ECF5759004F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5d1ab285-6e35-49f4-a20f-0ef6f4885a62/537890103bd768230c30193c5df321d11e6abc8fe3846baa87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/5b3604d308c14dcb8c42f94e626bc325/0/323630323a663266663a343a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f2ff:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:6d:0f:53:51:7f:96:bd:8a:2f:7f:7f:47:1f:5d:fd:bd:15:
         89:43:91:79:91:5f:47:32:dc:47:f8:56:41:fa:10:70:9c:c7:
         ea:eb:68:ca:d6:c6:44:09:8b:19:21:23:7d:33:bc:9a:d5:f2:
         76:be:a6:fd:8d:9a:ff:6f:48:e9:2a:30:e9:7b:3b:ef:da:c2:
         4f:e7:e6:a4:47:56:97:25:81:8b:42:78:e5:8a:7a:bf:47:cb:
         6e:d8:28:16:25:79:9d:19:99:57:13:e0:ce:b5:f4:8d:41:83:
         41:e7:20:a7:90:af:a7:d0:ab:88:55:1f:8e:44:cf:76:be:a7:
         b6:76:77:69:f6:1e:af:19:a3:36:b5:19:ac:ff:07:ca:ea:f5:
         10:dd:12:d6:b3:71:86:29:b8:a6:79:cd:3b:67:02:fc:cc:d9:
         aa:5a:7b:a8:fb:b0:60:4a:96:b1:a2:d8:65:1c:e3:19:95:db:
         0a:b4:e7:76:75:1b:e6:b7:ee:5c:c3:4f:a4:39:68:ad:67:19:
         83:c4:2f:de:24:4f:ae:eb:bf:74:0e:88:62:8b:90:40:1f:3a:
         13:48:7e:71:c7:ea:3d:1e:e0:60:01:05:9a:e9:af:71:7f:9a:
         8e:82:96:82:36:0c:a2:62:10:86:f6:4c:b2:16:9c:3c:0f:fe:
         8f:5c:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:18:10 2026 by rpki-client