Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a323030303a3a2f33362d3336203d3e203436343735.roa
File:                     323630363a616563303a323030303a3a2f33362d3336203d3e203436343735.roa (raw, json)
Hash identifier:          mhZiNuFVlEUpybCvPL0lY7mGtsr4TQl28tLOM4d4XdM=
Subject key identifier:   B7:49:9E:53:C5:3C:DB:FC:F9:1D:B9:65:80:19:E3:F4:72:40:5A:05
Certificate issuer:       /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Certificate serial:       34B7E6B63B31D7F17BD40C0F1470618F390D3AD5
Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a323030303a3a2f33362d3336203d3e203436343735.roa
Signing time:             Wed 11 Feb 2026 00:55:43 +0000
ROA not before:           Wed 11 Feb 2026 00:50:43 +0000
ROA not after:            Wed 10 Feb 2027 00:55:43 +0000
asID:                     46475
IP address blocks:        2606:aec0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
                          rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 22:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b7:e6:b6:3b:31:d7:f1:7b:d4:0c:0f:14:70:61:8f:39:0d:3a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
        Validity
            Not Before: Feb 11 00:50:43 2026 GMT
            Not After : Feb 10 00:55:43 2027 GMT
        Subject: CN=B7499E53C53CDBFCF91DB9658019E3F472405A05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:09:4e:43:cc:16:df:85:16:2f:17:b4:6d:56:
                    cf:62:ef:15:3b:9e:72:f8:ce:55:9c:76:34:68:55:
                    57:a7:9d:5f:5d:13:15:c6:0a:4a:f9:6a:91:c6:0b:
                    4d:2f:26:3f:38:e5:d0:0f:c0:99:27:6a:72:3c:d5:
                    e0:bd:6e:13:0c:df:04:95:05:58:a4:a8:17:55:54:
                    57:16:9f:ca:ef:26:21:d2:33:04:64:ed:97:f6:ef:
                    5c:d8:81:8f:0f:28:a0:f9:bd:01:c7:a5:87:1f:fa:
                    b1:aa:3e:c3:82:f0:c5:93:d8:90:88:01:45:5a:1f:
                    9c:1d:80:d1:a2:90:a7:f1:8f:e4:5d:19:9f:59:34:
                    bb:e4:67:15:1a:12:94:72:f4:2f:7e:4a:3e:ad:9f:
                    fe:70:89:af:da:d4:89:0e:06:13:f5:9b:e4:a6:4c:
                    2f:37:40:83:21:09:03:b5:98:2f:5d:76:71:72:00:
                    e7:b6:cf:ca:bf:df:cd:92:cf:24:8c:b7:ea:99:bf:
                    45:ba:2d:31:85:eb:e9:85:14:f0:4a:7c:c3:ec:7b:
                    6b:d6:49:d8:fc:96:e0:34:c8:4f:d7:a8:0c:71:82:
                    6e:78:79:a4:b5:db:2d:3c:12:5b:e3:1a:61:1b:28:
                    cd:77:83:68:a3:f1:b5:c1:cf:0c:c5:d8:2f:39:90:
                    14:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:49:9E:53:C5:3C:DB:FC:F9:1D:B9:65:80:19:E3:F4:72:40:5A:05
            X509v3 Authority Key Identifier:
                keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a323030303a3a2f33362d3336203d3e203436343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:aec0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         78:ce:19:39:bc:60:9d:c2:24:77:3f:21:5b:ca:58:b9:de:ac:
         37:59:e8:a4:91:9d:21:f1:19:58:ab:79:35:9c:a1:c0:66:22:
         2b:4a:b2:db:84:87:67:27:46:d0:2b:0a:51:17:69:e2:19:a0:
         25:f0:21:87:8a:66:ae:31:58:8a:7c:9d:49:6d:89:69:63:62:
         98:81:61:41:3b:a4:fd:85:e1:8e:21:1b:b1:0a:f4:39:cb:4c:
         78:16:14:a8:b7:05:10:ad:9b:e9:28:d1:11:81:ba:b0:b8:bf:
         88:03:0f:c5:cf:4f:30:e7:97:e0:02:e2:87:6f:e1:55:43:cd:
         07:a9:47:f5:40:fb:8c:4d:f9:39:ae:a5:4a:72:f0:7d:19:b5:
         6d:04:a2:0c:bb:f0:4d:1a:0e:ef:e2:48:cb:84:cc:1b:85:86:
         2f:de:fa:49:4d:06:54:9b:45:95:e5:62:4b:37:79:d9:e9:11:
         55:66:8c:6b:ae:ee:85:e3:73:6a:72:7b:e2:b8:b3:4c:66:80:
         87:35:a4:03:53:83:81:b2:c5:48:bc:77:64:79:23:13:95:17:
         6b:78:5e:66:82:f8:a8:82:80:4a:91:dc:61:88:0c:c1:aa:c7:
         6a:68:4b:b0:0f:e9:f6:f8:9b:36:da:95:bf:a9:74:4c:af:86:
         7d:47:f0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 01:55:47 2026 by rpki-client