Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/5b3604d308c14dcb8c42f94e626bc325/0/323630323a663266663a363a3a2f34382d3438203d3e20333936393832.roa
File:                     323630323a663266663a363a3a2f34382d3438203d3e20333936393832.roa (raw, json)
Hash identifier:          qNf53nFpEM9xykeqho5uZy0BRzKoZS1rwzqwonOrUOs=
Subject key identifier:   62:51:BC:45:48:EA:49:17:64:3A:1C:E7:F0:D5:2F:AF:59:3D:AF:9D
Certificate issuer:       /CN=537890103bd768230c30193c5df321d11e6abc8fe3846baa87
Certificate serial:       EA094F753044D19ABDD5B52A4C1669B1F16F23
Authority key identifier: 96:C1:73:00:99:54:13:C9:83:AC:37:EE:0C:36:EC:F5:75:90:04:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5d1ab285-6e35-49f4-a20f-0ef6f4885a62/537890103bd768230c30193c5df321d11e6abc8fe3846baa87.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/5b3604d308c14dcb8c42f94e626bc325/0/323630323a663266663a363a3a2f34382d3438203d3e20333936393832.roa
Signing time:             Fri 11 Sep 2026 22:44:15 +0000
ROA not before:           Fri 11 Sep 2026 22:39:15 +0000
ROA not after:            Fri 10 Sep 2027 22:44:15 +0000
asID:                     396982
IP address blocks:        2602:f2ff:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/5b3604d308c14dcb8c42f94e626bc325/0/96C17300995413C983AC37EE0C36ECF5759004F3.crl
                          rsync://rpki-rps.arin.net/repository/5b3604d308c14dcb8c42f94e626bc325/0/96C17300995413C983AC37EE0C36ECF5759004F3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5d1ab285-6e35-49f4-a20f-0ef6f4885a62/537890103bd768230c30193c5df321d11e6abc8fe3846baa87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5d1ab285-6e35-49f4-a20f-0ef6f4885a62/5d1ab285-6e35-49f4-a20f-0ef6f4885a62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5d1ab285-6e35-49f4-a20f-0ef6f4885a62/5d1ab285-6e35-49f4-a20f-0ef6f4885a62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5d1ab285-6e35-49f4-a20f-0ef6f4885a62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 03:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ea:09:4f:75:30:44:d1:9a:bd:d5:b5:2a:4c:16:69:b1:f1:6f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=537890103bd768230c30193c5df321d11e6abc8fe3846baa87
        Validity
            Not Before: Sep 11 22:39:15 2026 GMT
            Not After : Sep 10 22:44:15 2027 GMT
        Subject: CN=6251BC4548EA4917643A1CE7F0D52FAF593DAF9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cf:f2:78:57:d6:21:eb:63:0a:22:9f:52:52:
                    0e:d6:e0:f4:fd:84:5c:0c:4c:a6:cd:f4:01:a1:a2:
                    2f:a2:76:ba:9f:5f:96:ba:5c:7f:d7:c4:55:b4:e8:
                    f0:c5:80:38:93:95:31:40:2c:ad:df:d9:8c:eb:26:
                    71:77:ec:70:bf:d6:7e:01:1f:83:1c:a8:80:54:44:
                    6c:c4:35:c4:a7:8b:a3:ab:60:b3:81:f7:4d:6b:9c:
                    78:10:a0:a8:07:93:36:e5:b2:0a:1f:1e:eb:79:d8:
                    bc:2c:79:13:d5:11:3c:63:0a:d9:1a:20:c2:bc:5b:
                    d9:30:9f:77:cd:ea:ca:ea:df:b5:79:fb:d7:63:f3:
                    1a:07:a2:ad:dc:00:62:e7:e3:b4:dd:bb:02:a5:87:
                    d5:10:5a:97:cc:4f:6f:19:85:95:56:88:68:37:0c:
                    71:1e:72:04:0c:5b:d6:c5:ce:39:d5:74:13:92:df:
                    91:36:6a:90:e7:f4:2b:f5:82:6f:cb:5f:f7:50:d4:
                    8f:a3:1c:ec:da:ed:69:da:38:91:a6:d2:65:54:e5:
                    23:27:3e:ab:37:5b:11:1f:e0:03:bf:21:23:c1:e2:
                    b4:d4:10:b1:0b:90:46:6d:4d:f2:56:46:32:b2:51:
                    36:79:ed:38:c0:77:12:46:d3:55:ed:12:b6:82:95:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:51:BC:45:48:EA:49:17:64:3A:1C:E7:F0:D5:2F:AF:59:3D:AF:9D
            X509v3 Authority Key Identifier:
                keyid:96:C1:73:00:99:54:13:C9:83:AC:37:EE:0C:36:EC:F5:75:90:04:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/5b3604d308c14dcb8c42f94e626bc325/0/96C17300995413C983AC37EE0C36ECF5759004F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5d1ab285-6e35-49f4-a20f-0ef6f4885a62/537890103bd768230c30193c5df321d11e6abc8fe3846baa87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/5b3604d308c14dcb8c42f94e626bc325/0/323630323a663266663a363a3a2f34382d3438203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f2ff:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:84:81:2f:5d:ee:be:99:f8:6c:d0:38:e2:da:3b:fd:5c:34:
         e8:19:fe:cb:52:00:7e:15:43:b3:89:17:b1:7b:0b:cb:b6:54:
         20:27:6a:60:bd:55:86:c0:47:b8:b8:11:d8:a0:dc:59:ca:b1:
         bf:c3:db:0b:b9:7b:65:28:0e:ba:49:6b:b5:b1:99:05:c4:fb:
         66:d3:f8:dd:13:60:c2:81:78:99:51:bf:b5:79:c1:c6:39:e8:
         85:a6:d9:ad:09:7e:4d:cb:97:b4:cb:f3:49:7e:28:1f:44:79:
         31:0c:f9:df:f5:2c:38:45:c3:52:cd:f5:55:5b:30:d4:ed:e9:
         8b:07:be:a5:d0:8f:85:67:f4:23:a7:8e:93:97:bd:c6:b8:ef:
         43:43:d6:49:2a:cf:04:14:de:98:d4:e4:f5:84:a5:ee:b1:dd:
         b1:30:94:76:21:5a:8a:b0:4d:e2:6f:12:4d:38:e1:5a:69:aa:
         59:9f:00:6f:fe:20:00:bb:7a:d6:28:6a:33:ae:a7:e7:3b:75:
         9e:af:6b:67:c9:12:27:f0:f9:b5:00:69:c5:00:60:29:e0:93:
         90:e7:5e:ec:f3:09:57:32:f5:2c:72:75:6e:40:e3:0e:91:e1:
         a2:d6:1c:bc:01:ee:30:01:27:63:1d:6f:e8:5b:bf:06:fb:7c:
         40:b4:9f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 15:29:16 2026 by rpki-client