Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f33372d3337203d3e203534323138.roa
File:                     323630323a666139623a3a2f33372d3337203d3e203534323138.roa (raw, json)
Hash identifier:          7+DgUK6cLxMf/sV0i+EoWZmhGQsiYARsbA9XjGJ4IgA=
Subject key identifier:   ED:49:FA:D3:A8:2C:6B:FB:62:3A:2A:CA:0B:73:71:43:A3:D7:E1:42
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       48BD6D5A20752859AEBF5D3F16AEEBA3C5FFA5EB
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f33372d3337203d3e203534323138.roa
Signing time:             Sat 14 Mar 2026 14:00:07 +0000
ROA not before:           Sat 14 Mar 2026 13:55:07 +0000
ROA not after:            Sat 13 Mar 2027 14:00:07 +0000
asID:                     54218
IP address blocks:        2602:fa9b::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 16:59:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:bd:6d:5a:20:75:28:59:ae:bf:5d:3f:16:ae:eb:a3:c5:ff:a5:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Mar 14 13:55:07 2026 GMT
            Not After : Mar 13 14:00:07 2027 GMT
        Subject: CN=ED49FAD3A82C6BFB623A2ACA0B737143A3D7E142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:de:1c:d7:6a:39:02:b2:ee:40:a6:35:3c:
                    9c:82:ba:6b:24:41:31:b8:d2:ef:e3:f6:6f:dd:20:
                    38:76:3a:e1:2c:47:e2:af:29:45:e7:e9:2c:98:20:
                    5a:91:40:a0:69:08:18:d4:c4:47:07:30:87:3a:f8:
                    f4:f0:4e:d1:aa:43:20:d4:28:59:3b:44:6a:24:bf:
                    57:bf:91:f5:94:53:bd:3c:97:e4:b0:20:ed:68:97:
                    7c:89:96:38:ff:cc:c7:50:f0:49:89:27:3d:9a:1c:
                    91:04:b3:eb:0f:21:c3:63:f3:ff:08:b9:af:28:71:
                    22:9d:88:79:0a:cf:7a:f6:82:96:51:2e:3a:1d:ac:
                    5e:4c:b7:37:3c:f7:61:15:f5:88:b1:27:49:6d:92:
                    fb:01:6d:58:0e:c0:44:7b:1b:bf:bd:61:b8:1f:76:
                    55:90:33:d7:d1:e5:85:4e:bc:1b:9c:e3:cc:b7:9c:
                    2f:02:de:8e:42:05:f5:b1:74:bc:d5:32:00:70:83:
                    ed:dc:d2:7e:d2:ca:c9:07:f7:66:5b:05:b8:16:50:
                    15:58:72:0c:74:2a:5d:28:fd:a3:7d:4b:38:45:b8:
                    d6:41:05:0d:15:41:e3:7c:67:1d:6e:2c:03:52:96:
                    e7:a2:1d:0a:28:84:4b:1b:28:73:fe:0e:e5:42:7a:
                    05:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:49:FA:D3:A8:2C:6B:FB:62:3A:2A:CA:0B:73:71:43:A3:D7:E1:42
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f33372d3337203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b::/37

    Signature Algorithm: sha256WithRSAEncryption
         74:8a:da:49:50:62:cc:ee:31:e5:f6:41:31:d4:af:8c:12:6a:
         8e:2e:8e:6c:49:db:20:87:4d:28:26:70:03:35:ad:5a:60:81:
         f7:13:2d:2d:25:a4:60:28:fc:e0:a1:1d:82:fd:9e:94:e1:36:
         4a:62:b5:e3:22:24:e1:be:27:14:d0:7a:06:ed:d9:fa:7e:d2:
         ad:1c:01:6e:c0:5f:19:25:43:9e:36:a7:ac:85:5e:2e:e9:6d:
         48:a7:a0:19:f6:4f:f6:46:9a:fa:9b:e0:9d:0d:19:47:50:80:
         66:9b:ce:f1:58:a0:45:36:48:90:2c:0c:f1:e2:a3:84:64:ec:
         ce:71:50:f6:71:15:da:15:12:12:79:fd:b6:6a:fe:84:eb:33:
         75:93:f3:d1:ae:53:2c:20:4c:f4:94:c7:d1:12:dc:43:8a:98:
         73:16:2d:4f:96:50:d7:f1:c7:71:14:47:7f:19:e7:c2:17:41:
         a2:88:84:e6:74:c4:bd:d1:ae:a8:14:39:64:e5:b0:c2:91:b9:
         52:ed:f2:d1:d8:5e:1e:27:8f:0b:dc:cc:71:f7:04:77:3f:7b:
         b7:52:80:0d:0b:1e:f3:e4:06:5d:67:68:39:3e:4a:43:aa:ae:
         5e:0d:7d:db:8d:1e:8f:da:f0:f6:2f:44:cd:26:a0:c9:ca:9b:
         a8:f5:69:01
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUSL1tWiB1KFmuv10/Fq7ro8X/peswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzI0MTM5ZWYyYjEyYjgzMDA5Nzk3YjhkNmMwYjQzMDY1
MDdiZDdkNjM4Y2U5NDE4MDUwHhcNMjYwMzE0MTM1NTA3WhcNMjcwMzEzMTQwMDA3
WjAzMTEwLwYDVQQDEyhFRDQ5RkFEM0E4MkM2QkZCNjIzQTJBQ0EwQjczNzE0M0Ez
RDdFMTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWLeHNdqOQKy
7kCmNTycgrprJEExuNLv4/Zv3SA4djrhLEfirylF5+ksmCBakUCgaQgY1MRHBzCH
Ovj08E7RqkMg1ChZO0RqJL9Xv5H1lFO9PJfksCDtaJd8iZY4/8zHUPBJiSc9mhyR
BLPrDyHDY/P/CLmvKHEinYh5Cs969oKWUS46HaxeTLc3PPdhFfWIsSdJbZL7AW1Y
DsBEexu/vWG4H3ZVkDPX0eWFTrwbnOPMt5wvAt6OQgX1sXS81TIAcIPt3NJ+0srJ
B/dmWwW4FlAVWHIMdCpdKP2jfUs4RbjWQQUNFUHjfGcdbiwDUpbnoh0KKIRLGyhz
/g7lQnoFAwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFO1J+tOoLGv7YjoqygtzcUOj
1+FCMB8GA1UdIwQYMBaAFNDmx2ut7KXL2pLJGLl8f0WZ77bPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MGM5ZmVlYzEyNDllLzEv
RDBFNkM3NkJBREVDQTVDQkRBOTJDOTE4Qjk3QzdGNDU5OUVGQjZDRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2JjOTQyZjY4LWNiMzMtNGEwNS1hNzI3LTNmOTNlNjEwMzkzZS83MjQx
MzllZjJiMTJiODMwMDk3OTdiOGQ2YzBiNDMwNjUwN2JkN2Q2MzhjZTk0MTgwNS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTBj
OWZlZWMxMjQ5ZS8xLzMyMzYzMDMyM2E2NjYxMzk2MjNhM2EyZjMzMzcyZDMzMzcy
MDNkM2UyMDM1MzQzMjMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgMmAvqbADANBgkqhkiG9w0BAQsF
AAOCAQEAdIraSVBizO4x5fZBMdSvjBJqji6ObEnbIIdNKCZwAzWtWmCB9xMtLSWk
YCj84KEdgv2elOE2SmK14yIk4b4nFNB6Bu3Z+n7SrRwBbsBfGSVDnjanrIVeLult
SKegGfZP9kaa+pvgnQ0ZR1CAZpvO8VigRTZIkCwM8eKjhGTsznFQ9nEV2hUSEnn9
tmr+hOszdZPz0a5TLCBM9JTH0RLcQ4qYcxYtT5ZQ1/HHcRRHfxnnwhdBooiE5nTE
vdGuqBQ5ZOWwwpG5Uu3y0dheHiePC9zMcfcEdz97t1KADQse8+QGXWdoOT5KQ6qu
Xg19240ej9rw9i9EzSagycqbqPVpAQ==
-----END CERTIFICATE-----
Generated at Sat Mar 21 22:25:05 2026 by rpki-client