Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33623a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666164343a33623a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          p2Ds9zertw33foWlVThvoTCrO9ql+5ZUWftDJbaRh6w=
Subject key identifier:   FC:5A:B0:B9:D4:56:26:66:18:FB:42:0C:CD:C4:DF:37:ED:D9:E8:38
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       D5A0C124BCC8E41F9F1A92862B93D0DA15CB0C
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33623a3a2f34382d3438203d3e203239383032.roa
Signing time:             Wed 15 Jul 2026 13:58:01 +0000
ROA not before:           Wed 15 Jul 2026 13:53:01 +0000
ROA not after:            Wed 14 Jul 2027 13:58:01 +0000
asID:                     29802
IP address blocks:        2602:fad4:3b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 01:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d5:a0:c1:24:bc:c8:e4:1f:9f:1a:92:86:2b:93:d0:da:15:cb:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Jul 15 13:53:01 2026 GMT
            Not After : Jul 14 13:58:01 2027 GMT
        Subject: CN=FC5AB0B9D456266618FB420CCDC4DF37EDD9E838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:46:67:ac:a6:b8:c8:b6:5d:eb:11:84:10:5a:
                    19:21:ec:14:81:2d:73:d4:d8:ef:48:2c:1e:28:71:
                    f7:9e:b5:bc:68:fa:7a:30:8c:75:9c:ef:04:9e:ea:
                    e4:97:22:cd:33:6a:00:4c:6e:c5:98:d1:90:19:d6:
                    d4:bc:f6:20:be:2a:25:f1:8d:ca:f2:91:e0:03:d8:
                    8f:10:34:d1:74:4f:03:33:f4:8d:de:66:f5:cb:c7:
                    66:77:fa:5d:71:eb:6f:93:9d:50:8d:90:48:43:d4:
                    f4:7d:83:2d:78:5e:70:e1:4f:d4:27:b4:75:6f:ab:
                    52:95:d8:bc:c7:39:e0:ce:76:c6:35:5b:a7:b0:16:
                    62:3f:a3:8f:04:19:e0:05:37:22:b9:b9:31:34:1f:
                    7d:7c:be:e3:c8:31:ac:b7:ce:ed:f9:a6:5d:f6:c9:
                    7d:fd:7c:e6:55:67:2f:05:4d:2e:91:0d:d2:fa:ec:
                    b3:8b:80:60:da:e3:3e:e9:c1:54:4d:fc:16:7d:81:
                    64:3f:07:5b:b2:a0:0a:5e:08:4c:56:b4:1c:93:68:
                    4f:65:9b:c6:20:fa:3c:c0:02:a3:5e:6b:b7:08:60:
                    49:0b:60:2d:d5:c4:31:8d:dd:27:b0:1d:1f:13:12:
                    55:26:e0:2e:5c:55:40:7f:4d:d0:68:30:b4:cf:f3:
                    04:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5A:B0:B9:D4:56:26:66:18:FB:42:0C:CD:C4:DF:37:ED:D9:E8:38
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33623a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:3b::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:7a:2d:66:5d:00:14:a6:02:87:d4:34:81:dd:44:09:d2:ac:
         2b:d2:43:8e:56:b2:0d:cf:e3:24:25:32:60:15:66:80:ba:e4:
         01:36:9b:f7:16:f1:7c:d5:98:9f:96:d9:ee:26:d2:a2:f4:78:
         8e:6a:b1:b7:85:84:8c:59:6a:74:ea:a9:41:40:91:63:c9:06:
         0d:90:74:0f:2e:0a:c7:cc:f4:b7:5e:f9:a2:05:2c:85:35:3a:
         d1:dc:a2:16:55:4b:c6:90:d1:05:61:1a:ce:70:6c:be:a9:28:
         d3:d7:8b:db:08:55:81:4d:97:be:85:a6:28:12:b2:f5:de:11:
         31:51:00:fa:6d:49:97:a5:b0:7c:7e:51:c9:21:b9:91:de:ec:
         2a:95:2a:d4:54:06:13:07:4c:c6:54:1f:d3:fd:9d:51:77:df:
         bc:f8:bb:98:61:47:74:52:b7:16:81:9f:5a:5e:27:56:e8:18:
         47:0b:05:3d:2e:fb:30:24:03:93:46:d7:48:6c:58:4f:33:22:
         19:7f:95:26:fa:24:a1:78:94:48:04:51:5d:4e:7e:4f:00:59:
         cf:c1:15:2c:53:5b:3e:d9:48:98:57:8b:3f:c9:c3:40:23:ea:
         3d:09:9e:8f:85:8a:fc:4c:7d:f4:09:27:6b:79:bb:c7:e2:db:
         aa:e0:2d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:16 2026 by rpki-client