Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a3130303a3a2f34302d3438203d3e20323039313039.roa
File:                     323630323a663764633a3130303a3a2f34302d3438203d3e20323039313039.roa (raw, json)
Hash identifier:          7W4iGAPVYNeqcVTkHEh7S8bO2i4KvDmdBEM7Y0PLWxE=
Subject key identifier:   89:4C:A3:EA:42:D0:C0:99:9C:6D:D1:EC:6C:DC:9D:76:A7:00:E5:A8
Certificate issuer:       /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial:       4D697C4AE1B41FB81211AF0253BBC59785EB7816
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a3130303a3a2f34302d3438203d3e20323039313039.roa
Signing time:             Thu 13 Aug 2026 14:33:01 +0000
ROA not before:           Thu 13 Aug 2026 14:28:01 +0000
ROA not after:            Thu 12 Aug 2027 14:33:01 +0000
asID:                     209109
IP address blocks:        2602:f7dc:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 02:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:69:7c:4a:e1:b4:1f:b8:12:11:af:02:53:bb:c5:97:85:eb:78:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
        Validity
            Not Before: Aug 13 14:28:01 2026 GMT
            Not After : Aug 12 14:33:01 2027 GMT
        Subject: CN=894CA3EA42D0C0999C6DD1EC6CDC9D76A700E5A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c8:b4:ba:6b:2f:94:6b:d5:c8:d6:0d:a2:2e:
                    10:d9:10:22:8f:5d:8f:18:4f:4f:cf:9e:7b:86:31:
                    06:20:63:62:31:5d:25:76:1c:09:9b:61:a2:aa:4d:
                    3b:07:a8:a7:17:1c:87:ac:83:f5:0b:1a:98:db:d2:
                    4f:4a:ee:87:66:e4:64:51:c3:74:e5:c2:36:30:41:
                    21:67:77:1f:d3:e1:45:54:4f:52:ea:3e:e6:63:ff:
                    a5:d1:cf:7e:f1:ca:c8:35:af:e2:2e:62:24:1e:6c:
                    34:ee:a8:f0:b6:db:78:0d:9f:be:a9:ea:42:ad:1d:
                    87:11:89:42:27:f9:03:15:a5:3d:59:45:ed:a0:75:
                    8e:58:32:d7:74:59:c7:64:bb:e5:7b:c8:95:10:40:
                    fd:15:4c:1e:ba:4b:34:d1:8b:b9:07:f1:ab:79:5a:
                    0e:ea:48:49:0f:22:28:e3:3f:e7:12:97:7b:ee:9c:
                    26:d5:85:ef:a2:8a:8c:6f:61:b4:05:6e:c6:a5:33:
                    1d:89:66:1e:cc:0b:1a:de:80:7d:10:a7:dc:54:61:
                    ab:83:48:bb:eb:ca:ec:24:cf:43:99:aa:e7:fb:cf:
                    68:e3:19:ff:67:dd:b6:22:80:c5:5a:b3:61:73:eb:
                    24:e8:b3:80:e1:02:e1:ae:70:ab:8f:0a:42:b4:c6:
                    85:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4C:A3:EA:42:D0:C0:99:9C:6D:D1:EC:6C:DC:9D:76:A7:00:E5:A8
            X509v3 Authority Key Identifier:
                keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a3130303a3a2f34302d3438203d3e20323039313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7dc:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:1c:3c:da:ba:5a:28:7e:60:be:38:8e:14:93:12:ef:b9:7c:
         a3:9f:25:55:da:83:f0:42:3f:d2:40:6f:34:84:9c:61:a8:40:
         67:67:95:19:ba:74:50:3d:17:43:d0:53:df:7a:de:47:4c:60:
         1a:d6:57:21:81:bb:b3:6c:ed:d0:b4:8f:46:7b:a5:cd:5f:9e:
         bb:c6:a8:f8:7a:67:96:84:81:97:fe:78:2b:4b:63:e1:3e:c6:
         a6:84:c3:f5:18:50:53:4d:3c:ad:eb:1f:9e:d9:a2:e6:5c:17:
         bd:17:af:8d:87:0d:04:2b:78:e3:25:d9:48:81:d7:ea:0e:1c:
         96:1f:da:fb:c4:94:16:1f:1c:ed:7c:00:72:de:d2:ba:d7:45:
         de:15:06:ca:f9:41:5a:66:78:6a:48:cf:35:9c:21:37:49:f9:
         d6:eb:8b:bc:23:af:a9:56:07:42:54:f3:32:ca:bf:f6:92:64:
         29:02:61:b4:aa:5a:c9:f0:3b:53:2b:4a:6a:80:46:89:cc:7c:
         ff:65:89:7a:41:ee:47:1d:a8:28:5c:f0:7e:ff:c7:0d:b7:8a:
         19:a5:fb:3e:78:93:d9:66:50:8e:e0:53:80:b6:7b:5f:89:d8:
         5d:a5:73:4b:4d:17:dc:6c:8e:cb:de:df:45:97:ed:a9:29:4c:
         6b:26:b8:8e
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUTWl8SuG0H7gSEa8CU7vFl4XreBYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMGNjODU3ZDA1ZWZiYjM1MDIzMDUyMGQwOGM4ZDdmNDVl
MzRlM2JmZjNjYjUxNmU1NTYwHhcNMjYwODEzMTQyODAxWhcNMjcwODEyMTQzMzAx
WjAzMTEwLwYDVQQDEyg4OTRDQTNFQTQyRDBDMDk5OUM2REQxRUM2Q0RDOUQ3NkE3
MDBFNUE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Mi0umsvlGvV
yNYNoi4Q2RAij12PGE9Pz557hjEGIGNiMV0ldhwJm2Giqk07B6inFxyHrIP1CxqY
29JPSu6HZuRkUcN05cI2MEEhZ3cf0+FFVE9S6j7mY/+l0c9+8crINa/iLmIkHmw0
7qjwttt4DZ++qepCrR2HEYlCJ/kDFaU9WUXtoHWOWDLXdFnHZLvle8iVEED9FUwe
uks00Yu5B/GreVoO6khJDyIo4z/nEpd77pwm1YXvooqMb2G0BW7GpTMdiWYezAsa
3oB9EKfcVGGrg0i768rsJM9Dmarn+89o4xn/Z922IoDFWrNhc+sk6LOA4QLhrnCr
jwpCtMaFvQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFIlMo+pC0MCZnG3R7GzcnXan
AOWoMB8GA1UdIwQYMBaAFKsu+I8kdJ9aEg363mfJGOTHEMU+MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyOTA4YjNlMjg1MTRhLzAv
QUIyRUY4OEYyNDc0OUY1QTEyMERGQURFNjdDOTE4RTRDNzEwQzUzRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1L2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2LWQxM2JlOTdkOTFhMi8wY2M4
NTdkMDVlZmJiMzUwMjMwNTIwZDA4YzhkN2Y0NWUzNGUzYmZmM2NiNTE2ZTU1Ni5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5Mjkw
OGIzZTI4NTE0YS8wLzMyMzYzMDMyM2E2NjM3NjQ2MzNhMzEzMDMwM2EzYTJmMzQz
MDJkMzQzODIwM2QzZTIwMzIzMDM5MzEzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL33AEwDQYJ
KoZIhvcNAQELBQADggEBAHocPNq6Wih+YL44jhSTEu+5fKOfJVXag/BCP9JAbzSE
nGGoQGdnlRm6dFA9F0PQU9963kdMYBrWVyGBu7Ns7dC0j0Z7pc1fnrvGqPh6Z5aE
gZf+eCtLY+E+xqaEw/UYUFNNPK3rH57ZouZcF70Xr42HDQQreOMl2UiB1+oOHJYf
2vvElBYfHO18AHLe0rrXRd4VBsr5QVpmeGpIzzWcITdJ+dbri7wjr6lWB0JU8zLK
v/aSZCkCYbSqWsnwO1MrSmqARonMfP9liXpB7kcdqChc8H7/xw23ihml+z54k9lm
UI7gU4C2e1+J2F2lc0tNF9xsjsve30WX7akpTGsmuI4=
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:56:05 2026 by rpki-client