Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a333030303a3a2f33362d3336203d3e203436343735.roa
File:                     323630363a616563303a333030303a3a2f33362d3336203d3e203436343735.roa (raw, json)
Hash identifier:          AQkkMLBRNv4dCWVUkCEz97GvkUEMqz6XB9a1o05JOW0=
Subject key identifier:   B1:29:61:91:03:FF:B8:EF:20:56:D2:1E:5D:0C:55:7F:14:F5:1F:E4
Certificate issuer:       /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Certificate serial:       2252AB0ED8A63D9B1B8EFC8DC62982FAB7EDBB15
Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a333030303a3a2f33362d3336203d3e203436343735.roa
Signing time:             Wed 11 Feb 2026 00:55:47 +0000
ROA not before:           Wed 11 Feb 2026 00:50:47 +0000
ROA not after:            Wed 10 Feb 2027 00:55:47 +0000
asID:                     46475
IP address blocks:        2606:aec0:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
                          rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 22:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:52:ab:0e:d8:a6:3d:9b:1b:8e:fc:8d:c6:29:82:fa:b7:ed:bb:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
        Validity
            Not Before: Feb 11 00:50:47 2026 GMT
            Not After : Feb 10 00:55:47 2027 GMT
        Subject: CN=B129619103FFB8EF2056D21E5D0C557F14F51FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a0:5d:51:95:68:43:3a:7c:2a:a3:93:20:87:
                    4a:6c:bf:8d:06:69:f1:b0:21:a5:31:f6:9c:89:75:
                    3a:b9:d8:2a:11:5e:f6:31:61:25:ff:68:2a:30:cb:
                    ab:ac:68:2a:36:fe:1f:7c:0a:fa:14:25:4f:27:6e:
                    1f:9e:7a:8f:2e:12:32:1a:6f:ee:28:72:c4:8f:0b:
                    e3:b4:7f:12:2d:49:6d:43:84:0c:62:24:af:47:b5:
                    60:eb:0b:0d:6d:f8:21:43:85:14:81:f1:a1:5d:1c:
                    8c:a9:2e:aa:50:b9:12:02:ee:bb:83:50:ef:1e:3d:
                    55:c7:2b:92:80:95:a8:95:2e:26:3c:b4:aa:48:8d:
                    72:02:34:33:f5:ea:5c:44:7b:f5:63:c5:54:1d:f3:
                    19:2c:72:24:3f:b8:e7:48:da:79:c7:60:5a:07:25:
                    c1:24:cc:52:01:ea:7f:4d:49:01:d9:d6:71:ef:50:
                    51:b3:8a:23:3a:27:0c:9d:aa:4a:d8:2a:dd:59:e8:
                    6c:f0:d1:d5:96:35:2c:a9:af:8d:65:93:4f:ad:1f:
                    1c:be:bf:e7:68:42:b7:df:f6:da:04:42:3e:9a:a5:
                    5e:34:bd:8a:75:fa:b8:89:93:33:63:e5:00:31:0a:
                    36:c3:fa:4c:e6:35:2f:c7:3d:96:91:1d:53:bf:8e:
                    70:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:29:61:91:03:FF:B8:EF:20:56:D2:1E:5D:0C:55:7F:14:F5:1F:E4
            X509v3 Authority Key Identifier:
                keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/323630363a616563303a333030303a3a2f33362d3336203d3e203436343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:aec0:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         77:fc:0e:f1:09:df:27:45:a9:d0:81:6d:6e:3b:0f:3c:03:46:
         f8:83:38:32:9f:1a:0e:e3:83:54:3e:50:10:77:67:1d:ed:be:
         b9:bf:68:e7:50:83:43:76:82:59:c0:73:01:5a:7a:2d:96:5e:
         64:3d:32:2d:e8:40:4c:67:36:3b:c4:f4:87:6d:08:9e:87:08:
         aa:84:cf:29:70:71:07:d3:58:dc:01:9d:dc:63:66:26:86:5f:
         b2:f5:81:c3:5e:a8:b3:04:73:99:80:c5:d0:dc:57:f0:c0:45:
         99:af:34:db:8f:0e:30:b3:42:fd:06:f8:ec:c3:c0:ec:e0:af:
         b1:b9:93:98:5f:6f:bf:c8:ad:28:81:0e:5e:b3:f5:89:04:0c:
         49:e0:fb:85:e8:ec:3d:fb:5d:4c:7b:81:05:c2:65:6d:4e:4b:
         9d:d5:5d:6a:09:33:27:ff:a9:2f:46:87:20:6a:52:8d:21:31:
         cc:0b:27:20:75:30:64:57:1d:ae:9c:d3:25:90:d7:ce:2e:2e:
         2d:da:db:98:72:50:33:2c:9b:ef:e2:a5:57:10:a7:5a:33:d2:
         48:8c:03:46:f7:9d:4e:0d:a3:7a:a9:b9:f4:b3:fe:44:0b:76:
         84:ac:b0:4a:30:2a:53:66:f1:34:0f:8f:94:d6:d1:db:bf:c1:
         47:11:d5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 01:55:46 2026 by rpki-client