Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33633a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666164343a33633a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          Lri6c9O3kpOAyg+S67wMoWMfsANNJ5n1LqxxIhr4KYQ=
Subject key identifier:   82:3A:17:2F:B8:98:A3:6F:A8:72:A6:52:AB:5E:03:C9:20:C5:4D:71
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       4867E1893D11379C17E38B6DA69C9C54EC7BFA34
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33633a3a2f34382d3438203d3e203239383032.roa
Signing time:             Wed 15 Jul 2026 13:58:05 +0000
ROA not before:           Wed 15 Jul 2026 13:53:05 +0000
ROA not after:            Wed 14 Jul 2027 13:58:05 +0000
asID:                     29802
IP address blocks:        2602:fad4:3c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 01:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:67:e1:89:3d:11:37:9c:17:e3:8b:6d:a6:9c:9c:54:ec:7b:fa:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Jul 15 13:53:05 2026 GMT
            Not After : Jul 14 13:58:05 2027 GMT
        Subject: CN=823A172FB898A36FA872A652AB5E03C920C54D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1d:91:63:ab:0d:b2:25:06:f4:a0:5b:fd:71:
                    cf:b4:68:55:89:93:30:5b:ba:ee:3f:c9:cb:f8:a2:
                    d4:f6:f2:ad:c6:17:db:3a:fc:1a:6a:c6:fa:64:64:
                    6f:30:0b:c3:e2:f4:85:ca:ff:fd:c1:77:c3:09:d0:
                    62:5f:1b:97:68:6b:35:5a:0d:76:15:03:83:85:86:
                    b1:83:ee:ec:bc:13:8c:a9:17:32:15:30:bd:de:36:
                    46:57:87:75:03:05:0d:4d:c6:2f:70:88:a0:f4:53:
                    60:e2:39:94:1f:17:0d:d2:09:db:ce:38:35:70:97:
                    4c:08:a4:2e:f3:08:e8:2a:ab:38:67:ad:29:f4:ff:
                    c4:e2:28:7d:c3:5e:25:f6:23:06:85:37:7e:72:ee:
                    c3:81:51:b4:76:34:fd:ac:78:85:13:3e:a5:d3:11:
                    cb:0c:ca:59:a7:6a:d0:83:a6:61:93:42:01:6f:5d:
                    10:35:47:ec:7f:2a:22:b6:80:2a:1d:47:3b:23:5e:
                    d5:f4:d1:33:af:12:13:a6:69:c5:ff:04:a0:0e:a0:
                    82:5b:b8:49:27:40:76:d6:47:3d:5d:1d:cf:49:48:
                    e4:4a:f0:40:22:fc:85:3a:44:a7:d0:09:3d:08:31:
                    cc:ef:7d:6a:51:0e:0e:a2:c4:22:1a:e1:87:2b:65:
                    49:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3A:17:2F:B8:98:A3:6F:A8:72:A6:52:AB:5E:03:C9:20:C5:4D:71
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a33633a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:3c::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:6f:ea:76:30:dc:a2:17:75:37:4b:85:4e:ef:29:44:a8:d3:
         ca:14:96:68:f4:ee:dc:e6:df:76:40:db:8b:ea:d1:a6:0e:bf:
         0e:3f:d1:53:44:d4:07:fe:fd:27:94:4b:b9:ca:9e:a9:84:c8:
         ad:40:0f:45:f0:2e:fd:0f:58:3a:10:28:b8:05:1c:b8:5c:28:
         6d:b5:38:83:0c:eb:d2:ac:bb:e9:d0:17:55:5e:f1:d3:99:88:
         a2:c1:f2:d5:84:54:1e:fb:b1:03:93:83:cb:5d:6a:44:9d:c5:
         a0:87:35:1c:a7:3a:bc:6b:fa:ea:82:ad:33:3b:c8:64:cc:a0:
         6d:48:b3:54:50:50:2a:ad:48:d5:7e:04:f1:b9:af:18:b8:ee:
         03:a1:4b:4f:38:8d:09:a9:7c:c1:bb:52:3d:1e:31:95:cd:60:
         af:4a:78:95:8a:6c:79:72:06:ec:f7:cf:80:37:ff:9a:9a:2e:
         62:8d:f8:5f:ba:8b:10:ba:ef:a7:3e:e4:04:51:9d:b2:9d:17:
         dd:13:52:f6:d4:e5:29:d2:be:d4:76:d2:85:6c:42:d5:fc:17:
         1b:4f:19:ae:7b:76:eb:c5:0c:79:b9:18:4a:d5:db:6a:25:85:
         0d:69:40:2b:0d:70:e5:a3:1f:06:2e:e2:a5:5f:c6:87:a4:6f:
         7e:dc:09:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:17 2026 by rpki-client