Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a373a3a2f34382d3438203d3e20323039313039.roa
File:                     323630323a663764633a373a3a2f34382d3438203d3e20323039313039.roa (raw, json)
Hash identifier:          ymz1/6zI708hHYSpeeJdUFGoLgZp2S8wA4iEvk98EBM=
Subject key identifier:   1F:CF:93:1F:AD:4E:19:00:5E:20:1D:A0:99:2B:2B:84:6A:46:B0:12
Certificate issuer:       /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial:       669CC7B0471BA0855C4D27294A1ECD9B14683A17
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a373a3a2f34382d3438203d3e20323039313039.roa
Signing time:             Mon 28 Sep 2026 15:35:23 +0000
ROA not before:           Mon 28 Sep 2026 15:30:23 +0000
ROA not after:            Mon 27 Sep 2027 15:35:23 +0000
asID:                     209109
IP address blocks:        2602:f7dc:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 11:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:9c:c7:b0:47:1b:a0:85:5c:4d:27:29:4a:1e:cd:9b:14:68:3a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
        Validity
            Not Before: Sep 28 15:30:23 2026 GMT
            Not After : Sep 27 15:35:23 2027 GMT
        Subject: CN=1FCF931FAD4E19005E201DA0992B2B846A46B012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:06:f8:14:32:ee:c1:b3:a7:53:4c:94:15:
                    98:45:28:8e:73:66:dd:bb:e3:b3:e6:c8:7e:16:98:
                    1d:f6:2f:50:b3:de:a9:ca:f9:39:a1:6a:ca:f9:1b:
                    7f:43:7a:f1:e7:50:8d:e1:59:94:f9:bc:43:5c:ce:
                    77:ca:55:5a:61:ff:d2:ff:bf:8c:bc:2c:78:e7:bd:
                    c9:28:27:e2:b8:5d:95:60:bc:ee:e1:22:06:30:10:
                    24:31:3a:81:e5:77:ca:85:73:c7:28:95:5d:24:e4:
                    08:51:1c:9d:ad:a9:26:af:a2:c4:c4:db:b7:a4:d3:
                    b7:93:29:ae:8e:57:20:5b:b8:2e:6b:83:17:20:51:
                    ca:03:c0:74:1c:ec:67:55:25:43:de:f6:80:2f:1c:
                    57:78:9c:79:55:1e:55:54:83:25:1e:f6:c7:48:92:
                    6f:05:d9:ac:fa:f2:ff:c6:7a:c7:c6:d1:90:e0:0b:
                    a6:85:ea:3f:b9:4b:49:7c:7c:66:ee:e8:4a:d0:4f:
                    ba:f4:f0:ed:9b:ea:5a:25:e9:2d:e0:aa:90:bd:dc:
                    0b:84:47:21:e8:00:8b:f3:20:09:fe:68:ef:08:99:
                    64:65:af:e9:3a:0b:2e:a3:fb:88:3d:e4:38:27:c4:
                    3b:3a:f0:88:ee:19:c7:f4:52:65:23:95:4a:d1:ef:
                    a3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CF:93:1F:AD:4E:19:00:5E:20:1D:A0:99:2B:2B:84:6A:46:B0:12
            X509v3 Authority Key Identifier:
                keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a373a3a2f34382d3438203d3e20323039313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7dc:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:71:19:fd:f2:ba:b3:f9:b1:7f:c1:35:cc:74:29:4f:51:4f:
         38:71:fb:57:0e:9c:82:21:ce:ed:47:93:40:98:b3:49:81:02:
         f3:67:9c:55:0b:b3:2a:b1:26:c3:83:a5:71:aa:67:36:69:bf:
         a8:a2:bc:83:87:ef:57:34:8c:61:0b:80:dc:04:4f:30:98:83:
         f4:1f:70:35:44:dd:78:20:2f:57:21:37:3a:68:8d:57:8e:7d:
         ec:f9:8b:4d:06:1b:bf:fa:f7:c8:d5:08:04:95:16:74:3e:0e:
         29:75:68:90:fa:ae:36:79:ed:d1:6b:74:03:1b:59:6a:ac:e0:
         b5:5c:78:2f:68:5d:a4:c7:d4:dc:29:94:6c:41:8f:16:ea:be:
         34:a8:59:36:11:ea:20:95:62:44:4d:74:c7:86:e3:c8:8c:5f:
         79:f2:d1:88:55:4c:4d:43:ec:05:57:74:fa:64:5e:44:f5:f2:
         e4:29:d8:cd:24:d5:02:95:21:3a:01:a7:7b:6b:3c:ee:e4:d4:
         ce:df:b7:af:4d:2d:96:75:23:70:41:6b:bf:9a:3a:77:5f:e0:
         8f:a3:30:9e:0a:76:ca:07:86:13:df:69:fb:44:59:4c:77:f1:
         fe:83:4c:9d:f4:2a:f2:fa:2c:fd:5d:c3:4b:9f:50:e9:67:e7:
         a1:6d:a5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:35:50 2026 by rpki-client