Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a34313a3a2f34382d3438203d3e20333936333536.roa
File:                     323630323a666164343a34313a3a2f34382d3438203d3e20333936333536.roa (raw, json)
Hash identifier:          atNMTXgI/Gra/sZwv8RLBvpP10gFOeXhyaZTU5XbZGE=
Subject key identifier:   0C:F0:74:FF:68:04:AB:B5:7F:8D:E7:26:F9:4D:C8:AB:67:49:90:05
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       2A266A783AF89F9B11CEFF7B3D8B1E8DE558D8C3
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a34313a3a2f34382d3438203d3e20333936333536.roa
Signing time:             Mon 10 Aug 2026 09:55:17 +0000
ROA not before:           Mon 10 Aug 2026 09:50:17 +0000
ROA not after:            Mon 09 Aug 2027 09:55:17 +0000
asID:                     396356
IP address blocks:        2602:fad4:41::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Aug 2026 11:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:26:6a:78:3a:f8:9f:9b:11:ce:ff:7b:3d:8b:1e:8d:e5:58:d8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Aug 10 09:50:17 2026 GMT
            Not After : Aug  9 09:55:17 2027 GMT
        Subject: CN=0CF074FF6804ABB57F8DE726F94DC8AB67499005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:00:d2:a7:9d:6d:02:89:67:1c:00:76:9d:
                    b0:93:2c:e4:c3:1e:d5:51:47:1e:6e:4f:ff:29:99:
                    97:fc:55:df:04:cc:d3:6b:23:17:cf:be:e7:6b:9d:
                    d3:d1:0f:8e:b7:be:85:29:7e:ed:39:34:a8:3d:bd:
                    e6:3d:03:38:fa:41:06:75:76:d2:3f:6c:a9:f3:b1:
                    be:27:74:b0:fe:19:a8:55:39:f8:40:0a:ec:c9:aa:
                    ca:b2:dd:c1:bb:e7:55:58:e0:82:5b:e4:7a:ce:d9:
                    2e:61:10:25:cb:78:45:31:2c:60:dd:87:8a:ac:db:
                    08:b3:67:33:56:2d:e1:43:93:39:f2:16:dd:48:ee:
                    33:86:0d:24:37:d0:a9:7f:c0:76:48:ef:df:61:c5:
                    ce:87:fa:36:6e:eb:88:9c:75:9f:cc:fd:fe:86:37:
                    66:ef:82:c7:20:bc:2a:4e:68:5c:48:58:99:76:dc:
                    78:a0:4c:ba:80:cf:df:0b:8f:80:7d:56:7b:68:8a:
                    9c:bf:55:46:8d:f4:1c:cb:42:da:36:d4:3a:0d:6a:
                    46:48:4d:1b:72:96:54:f2:ae:b1:16:29:d2:f1:88:
                    f9:c0:92:fd:2a:37:f7:03:06:08:bc:a7:98:89:47:
                    0c:2b:77:e8:95:63:4f:f9:b7:ce:9d:d5:c8:ee:5f:
                    e4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F0:74:FF:68:04:AB:B5:7F:8D:E7:26:F9:4D:C8:AB:67:49:90:05
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a34313a3a2f34382d3438203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:41::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:a1:48:0b:9b:41:27:9d:c4:95:a6:3b:77:7b:1a:c9:31:b7:
         c6:54:b2:62:93:5e:89:ac:49:60:93:48:27:50:3b:46:50:d8:
         c2:4e:6f:de:39:66:b2:da:2d:38:63:92:3b:53:7b:c9:57:9e:
         c9:d5:56:6a:da:10:1e:86:8b:65:a2:c8:11:bb:00:f3:91:ad:
         37:d9:3e:a7:88:e3:f8:fd:6c:84:ee:72:51:ab:b2:cf:34:a8:
         63:8c:90:89:8f:cd:71:74:33:a0:25:02:88:6f:04:ea:78:08:
         6e:6c:ce:7c:eb:91:b8:02:bc:e9:bc:25:ee:10:3c:d8:39:83:
         b5:72:69:b6:e2:63:78:de:0c:64:3e:45:72:ef:3a:7f:45:0e:
         66:0c:74:2a:c0:2a:1e:3d:87:49:c3:63:29:fb:02:15:0d:ed:
         b1:fd:1f:b8:07:e5:b0:4d:03:b0:9b:1f:1b:ba:91:95:9f:67:
         2d:1f:51:85:35:72:27:73:2d:a1:6b:c3:0e:41:0b:3c:2a:40:
         d6:b1:05:7d:b6:0a:a4:b9:62:71:7e:e9:c4:a2:99:85:fa:05:
         aa:b2:6d:23:a6:9b:b2:e1:30:a1:d5:bc:ac:0b:33:87:fd:dc:
         b7:b6:88:89:1e:52:40:ff:c7:87:b0:de:19:2a:9a:bd:c0:e7:
         0d:d3:25:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 04:00:17 2026 by rpki-client