Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33613a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666164343a33613a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          YICnOCk1S5yhpjQJr9kDY57yvu9HIWv8gvnQqeUy8z0=
Subject key identifier:   79:E0:F5:B1:A5:78:2D:7D:71:93:9D:35:40:30:42:61:7A:BE:F4:A8
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       3535C220FD01B9415BA4592C9F5BA46FBEDC98B2
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33613a3a2f34382d3438203d3e203239383032.roa
Signing time:             Wed 15 Jul 2026 13:57:51 +0000
ROA not before:           Wed 15 Jul 2026 13:52:51 +0000
ROA not after:            Wed 14 Jul 2027 13:57:51 +0000
asID:                     29802
IP address blocks:        2602:fad4:3a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 01:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:35:c2:20:fd:01:b9:41:5b:a4:59:2c:9f:5b:a4:6f:be:dc:98:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Jul 15 13:52:51 2026 GMT
            Not After : Jul 14 13:57:51 2027 GMT
        Subject: CN=79E0F5B1A5782D7D71939D35403042617ABEF4A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bd:16:b6:ed:da:a4:9d:ad:e3:fe:27:ac:c3:
                    12:fa:cf:fa:6a:8e:b1:9b:e3:d7:61:60:a0:57:d6:
                    4a:29:99:a1:40:21:ab:c3:59:ea:50:66:c4:be:97:
                    59:17:fd:16:b4:6b:d5:ea:0b:7f:00:5d:a6:6d:fa:
                    87:1f:fa:39:30:18:a4:8b:98:ac:7e:55:8c:57:64:
                    85:8f:94:4b:5c:f3:fb:d4:b1:73:93:4e:db:59:11:
                    b2:66:e2:60:8d:02:e7:34:39:dd:ef:9f:da:af:32:
                    36:81:57:a1:f6:f7:f0:1f:2a:71:4d:b0:d2:4e:14:
                    5f:bf:47:29:de:bf:ff:38:5c:f0:ad:2b:54:e7:6b:
                    67:b5:a6:0c:34:1d:c4:c0:81:57:46:b3:1f:87:d8:
                    ad:b5:c6:76:b5:31:78:7e:bf:a9:a5:d3:ea:34:77:
                    da:fc:79:6a:4c:a2:8f:9d:c7:bd:3a:db:9e:56:52:
                    b2:eb:5c:8b:20:99:f8:10:ce:bb:9f:18:8d:49:cc:
                    2c:d3:85:aa:3b:7a:b8:c7:24:53:ae:21:04:e6:28:
                    88:6c:1f:48:db:c8:3d:f4:5a:a7:13:26:59:69:d1:
                    05:49:5a:93:9a:00:94:95:5c:af:16:74:84:c9:c1:
                    a0:66:af:20:e4:79:5c:3d:4f:ae:6e:c1:9c:fd:1b:
                    be:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E0:F5:B1:A5:78:2D:7D:71:93:9D:35:40:30:42:61:7A:BE:F4:A8
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33613a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:3a::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:0b:0d:5e:1a:2b:93:6a:72:70:36:74:d2:5d:42:a0:85:58:
         57:bb:70:c0:09:c9:a8:4f:c0:7a:e2:ea:3c:8c:d1:ec:4b:a9:
         f0:b7:9f:ff:37:c5:22:0b:b9:fe:a0:e0:d9:3f:21:30:9d:5a:
         5f:51:b1:0a:36:b8:85:a5:9d:a3:9d:07:7c:6a:ef:85:88:01:
         f3:eb:8a:f6:dd:3a:e3:3c:93:f5:fd:61:3a:49:6c:cb:1f:ae:
         9c:7d:39:96:47:20:7a:89:37:81:c1:1d:67:9f:c9:f8:a2:71:
         3f:fe:78:20:f8:b4:6a:31:30:b8:ec:c3:5f:11:33:2a:d8:c4:
         35:f9:65:86:76:d0:8a:17:56:12:f7:77:06:a8:02:a8:f7:5c:
         48:a8:c3:18:34:6c:b1:7b:75:99:54:bc:37:93:a3:ce:fb:9f:
         bd:94:84:c8:a5:e8:f3:54:b4:bb:ab:ba:dc:9b:29:38:fb:38:
         94:df:ab:94:0c:14:e1:5c:7f:b1:5d:c9:ae:be:68:ae:5c:49:
         98:85:40:18:b3:06:d5:04:4b:6c:50:96:6c:18:70:2e:2f:8c:
         77:a0:94:24:a9:3d:90:92:bb:37:1d:c1:cf:f7:96:22:02:13:
         89:c5:9d:68:be:59:7e:d8:63:7b:a2:00:45:79:32:43:94:de:
         2f:87:47:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:17 2026 by rpki-client