Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a61303a3a2f34342d3434203d3e203531363932.roa
File:                     323630323a663836353a61303a3a2f34342d3434203d3e203531363932.roa (raw, json)
Hash identifier:          37ThoLBcZo6cNSve+RuNGOPOlEyKcR9Co2+J5960/Kc=
Subject key identifier:   84:AA:10:E7:78:6A:3E:C6:01:90:99:86:EC:71:AB:41:DD:E1:88:40
Certificate issuer:       /CN=e8238ea0d583a2c93712a86bd2e6d1052e380c255fbf48efe7
Certificate serial:       0F3381666CD5612826539B0F1613AE1842D319E3
Authority key identifier: 4E:E1:8D:15:5F:32:16:9F:BD:E6:3A:45:2F:87:82:3D:B4:5A:0A:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d583a2c93712a86bd2e6d1052e380c255fbf48efe7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a61303a3a2f34342d3434203d3e203531363932.roa
Signing time:             Sat 22 Aug 2026 09:07:00 +0000
ROA not before:           Sat 22 Aug 2026 09:02:00 +0000
ROA not after:            Sat 21 Aug 2027 09:07:00 +0000
asID:                     51692
IP address blocks:        2602:f865:a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/4EE18D155F32169FBDE63A452F87823DB45A0A90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/4EE18D155F32169FBDE63A452F87823DB45A0A90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d583a2c93712a86bd2e6d1052e380c255fbf48efe7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 19:23:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:33:81:66:6c:d5:61:28:26:53:9b:0f:16:13:ae:18:42:d3:19:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8238ea0d583a2c93712a86bd2e6d1052e380c255fbf48efe7
        Validity
            Not Before: Aug 22 09:02:00 2026 GMT
            Not After : Aug 21 09:07:00 2027 GMT
        Subject: CN=84AA10E7786A3EC601909986EC71AB41DDE18840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:51:34:bb:d1:ef:77:2a:46:5f:8f:12:2a:53:
                    17:25:51:fd:fd:c7:11:48:5e:87:16:c1:8d:c6:f8:
                    77:b6:21:c4:8d:4a:64:a3:ba:80:ee:3f:f1:a8:75:
                    78:7e:fe:a9:b3:ee:77:11:d4:cf:52:fc:e4:74:2b:
                    34:68:ce:39:79:e5:89:33:40:2d:4d:32:dc:ac:e2:
                    c3:fc:ad:c6:6f:e5:1d:38:c2:62:f5:f8:eb:43:71:
                    20:a8:42:3e:4a:57:68:9f:04:3c:4a:84:61:a7:4e:
                    79:d9:0c:f7:2a:1d:5f:ec:11:ec:d4:81:ac:1a:39:
                    0f:b2:81:1d:b8:9a:25:22:b6:b0:b7:87:cb:cb:13:
                    50:ad:e5:8a:32:a0:f8:bb:c6:ba:35:b6:33:61:81:
                    2b:3c:b8:ab:8f:de:52:49:e1:84:c2:49:53:de:99:
                    f4:fe:0a:8b:70:c1:91:fd:af:a1:84:cf:63:46:da:
                    a9:00:cd:53:0a:84:0f:37:49:8d:f6:98:9d:d3:af:
                    3b:05:59:a6:74:bc:6c:d9:5c:ee:3d:94:8e:68:0d:
                    65:72:29:1c:b7:a3:30:4c:44:89:91:a7:a2:bb:53:
                    f0:c8:c4:c5:16:90:72:d1:07:5d:72:70:95:78:d4:
                    47:07:f1:b6:4f:7f:af:67:11:bb:1c:51:da:e2:3e:
                    e0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AA:10:E7:78:6A:3E:C6:01:90:99:86:EC:71:AB:41:DD:E1:88:40
            X509v3 Authority Key Identifier:
                keyid:4E:E1:8D:15:5F:32:16:9F:BD:E6:3A:45:2F:87:82:3D:B4:5A:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/4EE18D155F32169FBDE63A452F87823DB45A0A90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d583a2c93712a86bd2e6d1052e380c255fbf48efe7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a61303a3a2f34342d3434203d3e203531363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f865:a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b4:6d:7a:99:fe:6b:3f:0a:81:da:4a:55:24:19:20:36:e2:3a:
         25:1b:64:f2:90:d0:9c:dd:7f:10:15:d6:54:6f:c1:15:b7:dc:
         10:cd:d9:7a:26:f0:4c:58:c2:3a:25:8a:86:f4:e8:ce:59:27:
         fb:71:bc:d2:b4:82:4c:9d:57:2f:05:c3:f9:f7:ea:60:ff:e7:
         5d:22:92:dc:05:f2:04:b4:75:10:83:42:33:af:fe:3f:a7:d5:
         7f:21:76:a9:2f:37:61:63:22:78:69:c7:68:4a:ac:d2:94:2c:
         4c:fa:57:d7:86:9e:d7:fb:2f:c9:df:6d:c0:1a:dc:c5:8c:bf:
         e3:cc:7a:98:92:44:ad:e1:52:7a:a2:e2:5f:d3:6e:00:d8:c4:
         fc:c8:55:21:6d:bd:e5:f8:83:bb:1c:75:47:e4:aa:c5:f0:f2:
         45:b0:2f:1c:b2:58:fd:b1:1d:b7:96:62:dd:a5:0c:d3:84:8b:
         46:a5:fb:90:6f:5f:14:36:1f:06:53:e7:e2:50:c8:35:32:1c:
         e3:1e:24:02:e3:73:6b:74:93:02:8b:9e:f8:a1:76:ab:b8:63:
         cd:35:a4:d5:c4:cd:1e:a0:3c:37:26:aa:87:24:e3:da:de:a3:
         da:d7:32:3c:c5:40:e9:76:e2:59:a3:3e:0e:90:5e:ff:63:b3:
         cb:86:77:29
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUDzOBZmzVYSgmU5sPFhOuGELTGeMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTgyMzhlYTBkNTgzYTJjOTM3MTJhODZiZDJlNmQxMDUy
ZTM4MGMyNTVmYmY0OGVmZTcwHhcNMjYwODIyMDkwMjAwWhcNMjcwODIxMDkwNzAw
WjAzMTEwLwYDVQQDEyg4NEFBMTBFNzc4NkEzRUM2MDE5MDk5ODZFQzcxQUI0MURE
RTE4ODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlE0u9HvdypG
X48SKlMXJVH9/ccRSF6HFsGNxvh3tiHEjUpko7qA7j/xqHV4fv6ps+53EdTPUvzk
dCs0aM45eeWJM0AtTTLcrOLD/K3Gb+UdOMJi9fjrQ3EgqEI+SldonwQ8SoRhp055
2Qz3Kh1f7BHs1IGsGjkPsoEduJolIrawt4fLyxNQreWKMqD4u8a6NbYzYYErPLir
j95SSeGEwklT3pn0/gqLcMGR/a+hhM9jRtqpAM1TCoQPN0mN9pid0687BVmmdLxs
2VzuPZSOaA1lcikct6MwTESJkaeiu1PwyMTFFpBy0QddcnCVeNRHB/G2T3+vZxG7
HFHa4j7gJQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFISqEOd4aj7GAZCZhuxxq0Hd
4YhAMB8GA1UdIwQYMBaAFE7hjRVfMhafveY6RS+Hgj20WgqQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyODg0NjJjMzgwNGU2LzAv
NEVFMThEMTU1RjMyMTY5RkJERTYzQTQ1MkY4NzgyM0RCNDVBMEE5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkL2YwY2Y5ODZhLTJlYzktNGFhMi05ZTYxLTQzYTBlZmM0ZjJlYS9lODIz
OGVhMGQ1ODNhMmM5MzcxMmE4NmJkMmU2ZDEwNTJlMzgwYzI1NWZiZjQ4ZWZlNy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5Mjg4
NDYyYzM4MDRlNi8wLzMyMzYzMDMyM2E2NjM4MzYzNTNhNjEzMDNhM2EyZjM0MzQy
ZDM0MzQyMDNkM2UyMDM1MzEzNjM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQmAvhlAKAwDQYJKoZI
hvcNAQELBQADggEBALRtepn+az8KgdpKVSQZIDbiOiUbZPKQ0JzdfxAV1lRvwRW3
3BDN2Xom8ExYwjoliob06M5ZJ/txvNK0gkydVy8Fw/n36mD/510iktwF8gS0dRCD
QjOv/j+n1X8hdqkvN2FjInhpx2hKrNKULEz6V9eGntf7L8nfbcAa3MWMv+PMepiS
RK3hUnqi4l/TbgDYxPzIVSFtveX4g7scdUfkqsXw8kWwLxyyWP2xHbeWYt2lDNOE
i0al+5BvXxQ2HwZT5+JQyDUyHOMeJALjc2t0kwKLnvihdqu4Y801pNXEzR6gPDcm
qock49reo9rXMjzFQOl24lmjPg6QXv9js8uGdyk=
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:53:45 2026 by rpki-client