Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33353a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666164343a33353a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          RB2K3W9UYHfh9DXMPdo5M3o60W/yJyq4+Ed/8ibSrVw=
Subject key identifier:   3D:63:04:18:18:3A:1F:20:39:03:24:DC:E5:C4:BE:D2:27:BD:7F:39
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       6F1534B795C716979C39A89982D0912E3598387C
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33353a3a2f34382d3438203d3e203239383032.roa
Signing time:             Wed 20 May 2026 11:22:57 +0000
ROA not before:           Wed 20 May 2026 11:17:57 +0000
ROA not after:            Wed 19 May 2027 11:22:57 +0000
asID:                     29802
IP address blocks:        2602:fad4:35::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 11:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:15:34:b7:95:c7:16:97:9c:39:a8:99:82:d0:91:2e:35:98:38:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: May 20 11:17:57 2026 GMT
            Not After : May 19 11:22:57 2027 GMT
        Subject: CN=3D630418183A1F20390324DCE5C4BED227BD7F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:fd:d3:e2:73:84:b4:3e:db:7c:3f:d4:36:de:
                    1e:39:5a:9a:51:e6:12:3f:a8:47:8e:b4:89:99:2c:
                    d1:40:1d:0c:96:c1:6f:f0:7e:8d:3e:fa:71:1d:39:
                    ef:d6:f8:f7:e0:53:ae:4c:d3:23:30:cf:03:e8:39:
                    6a:ab:e8:b1:9c:79:23:db:14:ae:a9:e6:08:44:ac:
                    b4:46:f3:94:f7:d6:18:8a:5b:4e:5b:97:85:5f:75:
                    34:3d:05:b3:ee:ac:12:51:97:fb:ba:95:6e:cf:8b:
                    25:87:2e:22:53:00:46:4f:ec:4d:0d:6f:69:0c:ae:
                    5b:fc:69:f0:22:36:59:47:33:c1:49:80:f7:b3:a4:
                    f7:78:5c:68:25:c9:65:3c:e8:7a:3e:2b:98:0a:34:
                    27:d2:71:6c:74:3a:df:c4:4d:23:c4:cd:4f:1b:68:
                    b6:c3:10:04:c2:e9:ef:37:ba:d9:6b:14:b5:bf:25:
                    61:e2:2e:5d:73:f3:3d:64:7a:1d:56:1c:b4:9b:f9:
                    41:8e:14:5b:c1:4b:70:c7:aa:c4:fb:40:86:61:68:
                    17:2d:dc:d7:4b:f4:23:f3:aa:e1:2a:11:7e:aa:fb:
                    01:6a:4e:91:f4:47:19:7e:67:43:88:e7:e3:78:10:
                    31:e5:d4:a3:d2:a2:1e:ac:2c:13:e5:f0:75:04:a7:
                    46:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:63:04:18:18:3A:1F:20:39:03:24:DC:E5:C4:BE:D2:27:BD:7F:39
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33353a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:35::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:96:fb:cb:a2:ec:e5:a9:bb:0d:c7:84:f4:a6:51:e7:ee:ad:
         a5:d3:6c:ff:5f:48:44:55:43:7e:97:56:23:69:74:a8:67:e5:
         7a:56:31:d8:19:c4:ea:45:e5:75:d4:89:43:79:97:f3:75:a1:
         87:75:61:73:94:bd:0e:fd:ed:64:4c:33:72:e4:ab:bc:b6:b3:
         c1:da:74:82:54:2d:7b:66:70:d1:89:e4:f4:d9:19:8f:12:1d:
         70:a9:07:e9:f9:0e:a5:76:cc:b1:af:55:56:00:c1:8e:20:5e:
         5e:ba:c0:68:ca:08:67:f2:73:b9:ac:bf:64:64:ee:ae:24:a2:
         43:7c:2a:cd:20:45:39:ba:92:f7:03:ea:c5:79:1b:3d:46:83:
         8c:fc:ca:37:85:5e:eb:84:a7:02:78:d1:73:6e:c9:42:5a:e6:
         01:7e:84:87:c2:8c:3b:c5:41:fc:3e:54:6b:43:5d:93:6a:0a:
         a0:f0:74:e3:80:4d:1c:5f:1e:f9:5a:9a:08:86:4d:18:0a:cb:
         39:f0:e1:17:7e:9e:ea:eb:93:2d:be:b3:f7:08:eb:61:77:4c:
         ff:02:5e:d9:1c:4f:1b:fd:98:a7:f9:13:3c:0e:ab:8a:68:d7:
         45:48:e0:14:fe:c9:37:31:2b:4f:0b:2d:3e:79:64:fe:e8:86:
         01:5b:96:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:06:36 2026 by rpki-client