Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a313030303a3a2f33362d3336203d3e203436343735.roa
File:                     323630363a616563303a313030303a3a2f33362d3336203d3e203436343735.roa (raw, json)
Hash identifier:          aFRoj+Uj+fJZ3xnYPqQIZypMkXqE5pZQam0UPMtbMB8=
Subject key identifier:   5E:26:F5:21:98:F9:4F:1C:67:82:95:CE:CA:5A:24:13:5F:89:5E:AE
Certificate issuer:       /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Certificate serial:       6F01011D2544F853204D8D04B2B2C4F6A5321CB7
Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a313030303a3a2f33362d3336203d3e203436343735.roa
Signing time:             Wed 11 Feb 2026 00:55:39 +0000
ROA not before:           Wed 11 Feb 2026 00:50:39 +0000
ROA not after:            Wed 10 Feb 2027 00:55:39 +0000
asID:                     46475
IP address blocks:        2606:aec0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
                          rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 22:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:01:01:1d:25:44:f8:53:20:4d:8d:04:b2:b2:c4:f6:a5:32:1c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
        Validity
            Not Before: Feb 11 00:50:39 2026 GMT
            Not After : Feb 10 00:55:39 2027 GMT
        Subject: CN=5E26F52198F94F1C678295CECA5A24135F895EAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:4f:80:2f:23:9b:6d:f9:f6:39:a5:d2:39:
                    98:72:93:6e:4a:92:53:fd:e1:ee:1d:1b:e2:70:80:
                    94:13:d6:b3:bb:db:67:97:b3:3a:b4:c3:58:33:67:
                    5a:c9:6f:2b:97:4f:ff:24:b2:b0:c3:59:ec:25:85:
                    59:57:07:02:65:68:8e:ce:8e:62:93:7a:03:4c:5c:
                    20:84:bc:10:d8:fd:dd:22:97:23:9d:8e:df:2a:40:
                    5b:26:fc:24:74:99:6a:7f:76:ac:d4:d6:92:2f:2f:
                    5c:48:24:39:19:ad:fe:06:47:52:c7:1c:84:3b:a8:
                    b6:82:ef:41:c4:a0:96:11:cb:75:d3:ff:58:b8:ce:
                    96:92:89:62:48:52:7f:8e:0c:0b:3d:e0:62:37:64:
                    1c:cf:90:1f:f9:12:48:0d:1a:b2:31:10:e6:26:9c:
                    f5:29:a3:22:2d:d7:2d:10:67:38:89:da:ab:dc:b6:
                    5c:c7:a4:05:39:64:29:6b:81:5d:2f:9c:46:f8:20:
                    9a:da:f4:8c:8f:b9:84:db:a9:93:c3:8d:68:7b:be:
                    49:0e:9d:61:3a:99:e0:29:fa:16:9c:ad:73:63:ae:
                    ae:67:85:61:44:17:6c:57:5f:d9:26:96:f9:d7:59:
                    5a:25:61:82:5c:67:cd:dc:92:fc:74:b6:0f:d8:7c:
                    8e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:26:F5:21:98:F9:4F:1C:67:82:95:CE:CA:5A:24:13:5F:89:5E:AE
            X509v3 Authority Key Identifier:
                keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a313030303a3a2f33362d3336203d3e203436343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:aec0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         05:13:5f:3b:a3:f9:de:a8:da:22:a5:3f:9f:55:b4:4d:22:bc:
         59:ff:a3:ae:15:ec:9e:44:6c:7c:72:e9:36:81:85:1b:4e:33:
         7f:15:f1:21:11:1c:4f:f8:e1:2c:f6:82:6c:a9:6d:b6:6c:fc:
         b6:3a:c7:07:c1:17:7b:82:28:87:b1:15:6b:06:6f:33:0a:85:
         6d:82:8e:88:1e:e3:22:67:de:b8:1a:60:ad:b7:9f:2e:58:86:
         5f:b3:b4:38:e2:f7:f5:d9:b2:ad:98:fc:b4:8c:6d:10:e7:b3:
         e5:41:8a:17:e2:16:81:c9:64:37:da:a1:f3:b5:ac:d9:68:70:
         0e:9f:df:34:9a:1c:4e:d5:61:33:65:e6:af:58:6b:fd:cb:8b:
         08:86:76:03:56:b8:ce:b2:c2:81:1a:00:65:a0:5a:b8:32:fc:
         3a:27:ea:0b:4e:6f:2b:03:21:19:4b:fd:4b:73:29:1f:fb:a4:
         e7:39:e7:92:33:62:8a:e3:6f:e6:12:24:3a:30:20:d2:1e:c5:
         87:89:00:3f:86:c9:15:d3:d1:46:55:b8:46:71:41:02:b5:e1:
         60:c5:bd:77:0b:73:98:4e:f6:0c:54:86:ac:37:0f:e1:e8:d8:
         d2:93:26:72:d5:1e:1b:6d:b8:47:57:91:7e:82:56:87:31:3a:
         d1:8b:14:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 01:55:46 2026 by rpki-client