Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33303a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666164343a33303a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          9t81WN2/KIMisKEOgaHHw3aU+8032yNlRokaFT3pS6Q=
Subject key identifier:   10:56:6F:82:68:85:32:1B:E8:3F:2F:CA:04:80:21:C5:42:79:B0:75
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       4B9BFFF13AD68C922F084D30D9E45AFD39D099A9
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33303a3a2f34382d3438203d3e203239383032.roa
Signing time:             Wed 20 May 2026 11:22:43 +0000
ROA not before:           Wed 20 May 2026 11:17:43 +0000
ROA not after:            Wed 19 May 2027 11:22:43 +0000
asID:                     29802
IP address blocks:        2602:fad4:30::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 11:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:9b:ff:f1:3a:d6:8c:92:2f:08:4d:30:d9:e4:5a:fd:39:d0:99:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: May 20 11:17:43 2026 GMT
            Not After : May 19 11:22:43 2027 GMT
        Subject: CN=10566F826885321BE83F2FCA048021C54279B075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:ef:39:dc:5f:c5:e2:d1:f8:ad:0d:25:1a:
                    42:25:75:81:42:8d:51:42:47:c8:14:85:04:2a:ba:
                    85:68:79:c1:28:6c:97:3c:f7:0e:c5:9d:ce:b2:ed:
                    1d:2b:73:fc:b5:cc:2e:da:10:d0:d1:3b:a9:a5:4b:
                    19:56:b2:38:9d:04:cd:20:8d:16:65:a6:f5:c5:1a:
                    a8:21:03:61:ba:df:90:fb:69:f7:4b:bb:8a:8d:19:
                    d4:fc:df:03:d8:3f:45:37:d9:11:5a:7e:2b:38:6d:
                    bb:ae:de:a8:41:0f:30:c3:a1:f6:5e:5d:dc:d0:6b:
                    47:2f:3a:89:dc:64:b4:f8:5e:60:52:68:64:bd:13:
                    1e:b7:6d:a5:82:29:08:51:65:c6:7d:90:d1:d1:90:
                    f6:65:9c:b6:06:c4:0b:9e:47:59:d0:cf:63:69:37:
                    dd:f0:9c:1a:5a:7f:47:0d:bc:a7:2d:44:b4:aa:b2:
                    63:d7:a0:f9:c7:4a:4a:ed:cf:3e:d1:ab:ee:c7:a6:
                    5f:24:87:20:ab:74:73:16:e6:cc:85:70:ca:ed:55:
                    c5:f2:56:8e:07:d7:f3:c9:91:7b:5c:9e:42:56:43:
                    e0:44:89:38:37:c8:23:1d:fd:42:a9:8a:65:5c:7f:
                    af:f5:64:8b:84:c8:34:f0:d5:5b:bb:bf:23:7e:33:
                    67:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:56:6F:82:68:85:32:1B:E8:3F:2F:CA:04:80:21:C5:42:79:B0:75
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33303a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:02:ee:b7:28:d7:dc:2f:f7:02:27:87:ad:4f:3a:41:1c:ef:
         9c:e9:ee:c1:9e:87:1d:0e:c6:2d:a0:f1:ab:67:0f:78:77:fc:
         fa:45:10:a5:dc:d6:3f:31:e1:fa:78:28:8a:4c:e9:e3:ec:35:
         a6:60:ff:72:51:41:20:05:18:55:de:db:3d:9f:d0:f9:d7:63:
         ee:05:b3:22:a2:12:a3:45:c6:c9:c4:dd:d3:ca:38:e3:38:f1:
         96:d8:ad:ac:e1:ee:2d:86:96:1e:15:14:69:f0:01:c6:d7:18:
         d6:e8:d0:d0:c4:67:28:5e:34:b8:04:ef:34:bc:35:25:34:b1:
         12:e6:76:f3:d5:85:f1:3c:cf:51:87:8a:ba:b0:be:9b:44:64:
         f1:e8:0f:9d:61:b5:7b:84:40:d6:02:59:b9:5a:f8:6a:02:5a:
         65:60:c2:26:c5:8a:7f:02:ea:19:15:25:1f:47:d6:04:91:a1:
         ec:2a:9b:1a:8f:63:7a:a3:c3:59:7a:ff:42:db:19:3f:66:69:
         5f:72:89:bd:06:c7:82:cc:49:e1:0f:cb:60:27:15:f1:42:51:
         27:c5:c0:ed:19:e9:fd:03:b4:9f:a8:f7:a3:eb:b0:d3:dd:4a:
         c3:43:e7:88:e7:f3:f1:8a:08:65:11:3a:1d:57:14:85:64:39:
         5d:7e:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:06:36 2026 by rpki-client