Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33373a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666164343a33373a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          lB8TcU1F965IxcrL9YH36sjO2bfkRNl5Uo1BQwEC8VQ=
Subject key identifier:   1F:34:E8:7E:4D:D7:DD:9C:BD:57:6A:3F:2E:B2:88:72:3E:22:E4:31
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       7EAABC87B91801D03D803305FBD58119BCC42666
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33373a3a2f34382d3438203d3e203239383032.roa
Signing time:             Wed 15 Jul 2026 13:57:33 +0000
ROA not before:           Wed 15 Jul 2026 13:52:33 +0000
ROA not after:            Wed 14 Jul 2027 13:57:33 +0000
asID:                     29802
IP address blocks:        2602:fad4:37::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 01:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:aa:bc:87:b9:18:01:d0:3d:80:33:05:fb:d5:81:19:bc:c4:26:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Jul 15 13:52:33 2026 GMT
            Not After : Jul 14 13:57:33 2027 GMT
        Subject: CN=1F34E87E4DD7DD9CBD576A3F2EB288723E22E431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:10:7b:06:e0:6a:aa:25:77:71:d2:e7:87:e6:
                    96:64:62:ea:c7:82:14:db:80:81:49:22:b1:d9:28:
                    38:c2:0f:c1:3c:f0:8b:fd:9d:9e:e3:a3:7f:1c:53:
                    8e:99:70:75:5d:02:78:3b:49:fa:ac:a2:32:b0:42:
                    44:f7:54:00:92:c4:90:01:7c:05:2d:9e:22:b0:83:
                    cd:8f:94:3a:be:c8:d1:72:69:fc:75:19:1a:37:aa:
                    c4:da:84:e1:16:a7:65:5e:5f:98:a5:eb:76:18:4a:
                    71:91:1d:70:25:1b:8b:fb:46:c6:4c:87:76:dc:b9:
                    a4:2c:d5:b7:70:f7:d7:c8:bf:b8:05:48:09:56:6a:
                    66:41:01:84:59:b9:f9:58:69:2e:e2:8b:7e:e9:aa:
                    53:c5:05:fa:fc:62:35:b7:b5:17:a6:06:a6:e0:44:
                    28:07:c9:e4:c9:43:ba:8b:09:5f:79:bd:20:9b:30:
                    1f:c5:f2:3e:0e:e1:5b:e6:ae:e1:ac:be:bb:e7:e7:
                    55:74:69:4a:0b:b4:05:e2:d3:1f:b8:63:3d:3f:4a:
                    ce:7d:74:a8:b8:8c:b0:ca:a0:69:13:7c:65:d7:08:
                    13:9e:5f:66:b9:bb:db:ba:cf:17:3b:54:17:44:c3:
                    46:a0:cd:c2:f8:e2:d7:64:04:f0:cf:8b:c4:e7:1d:
                    46:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:34:E8:7E:4D:D7:DD:9C:BD:57:6A:3F:2E:B2:88:72:3E:22:E4:31
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33373a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:37::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:2e:b9:71:ad:db:b4:e8:6a:b1:38:82:76:16:e9:e8:be:b3:
         75:2a:55:59:a5:8c:11:19:4e:87:5c:d2:22:d0:2f:84:b4:e7:
         64:2a:78:d8:7e:3c:90:5d:a4:95:18:e9:97:6f:10:6e:ef:22:
         f6:75:60:b4:8a:cf:8b:2e:12:74:57:1c:b4:ba:cf:e4:3a:91:
         8d:24:eb:bb:1e:4e:a0:a7:00:9a:d7:e0:4b:7e:f7:e0:c5:6c:
         c4:7b:44:15:69:da:05:c1:ba:63:a0:bd:a4:0d:5e:70:26:33:
         3c:f5:43:7d:ea:73:bd:de:dd:9a:3f:e5:61:c7:9c:cd:cd:6d:
         74:48:10:2a:da:60:05:3d:cf:2d:cd:36:6c:0c:a8:85:2e:8e:
         e0:6e:ad:be:c5:73:7c:76:82:e8:fc:3f:e9:2d:1b:78:2f:76:
         00:bd:7b:d6:ae:51:d0:05:42:84:c4:86:38:53:46:9c:a7:05:
         47:9b:e2:b7:59:77:bd:9f:e6:19:ba:d1:aa:0e:b2:24:53:ed:
         fb:76:a6:d4:15:08:e2:6f:b1:27:ed:aa:56:aa:2f:90:20:1c:
         fe:9b:3b:9f:dc:09:38:59:66:90:d6:d5:60:4a:63:40:32:dd:
         c3:4d:d1:ea:86:39:06:60:dc:af:8a:65:6a:f0:5b:3b:83:a6:
         c7:0d:1a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:17 2026 by rpki-client