Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a32303a3a2f34342d3438203d3e20323039313039.roa
File:                     323630323a663631333a32303a3a2f34342d3438203d3e20323039313039.roa (raw, json)
Hash identifier:          Kn85r3bvowClKsGeCALMqe+s6XXFzudwhQBZtaowkZ8=
Subject key identifier:   23:4B:47:C3:4C:2A:0F:48:05:B4:A9:E7:A9:CE:2D:3D:2F:C6:89:57
Certificate issuer:       /CN=5d9371e706db917120354ce162e131307448d445d3bda534e4
Certificate serial:       601FF561A6F1C44690B254BE519864ADB1580361
Authority key identifier: 31:8A:31:E0:F9:B2:FD:58:4D:99:4E:84:8E:7E:81:7C:CC:91:52:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a32303a3a2f34342d3438203d3e20323039313039.roa
Signing time:             Tue 11 Aug 2026 14:33:00 +0000
ROA not before:           Tue 11 Aug 2026 14:28:00 +0000
ROA not after:            Tue 10 Aug 2027 14:33:00 +0000
asID:                     209109
IP address blocks:        2602:f613:20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/15838c48-cf11-45c4-8e0b-0455f2640cd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/15838c48-cf11-45c4-8e0b-0455f2640cd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 05:15:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1f:f5:61:a6:f1:c4:46:90:b2:54:be:51:98:64:ad:b1:58:03:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9371e706db917120354ce162e131307448d445d3bda534e4
        Validity
            Not Before: Aug 11 14:28:00 2026 GMT
            Not After : Aug 10 14:33:00 2027 GMT
        Subject: CN=234B47C34C2A0F4805B4A9E7A9CE2D3D2FC68957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0a:0a:78:65:79:a4:f2:37:5e:62:14:22:cf:
                    ef:bd:cf:51:cf:51:dc:2a:dd:3a:22:37:92:97:8f:
                    12:b7:dc:a6:ba:54:c1:ab:cd:59:6c:aa:fc:1b:c4:
                    0a:ad:23:59:b7:b0:16:db:e5:94:b9:7f:8e:76:05:
                    b1:e4:53:c5:85:9a:7b:e6:d6:83:86:d3:e4:48:bc:
                    47:ef:d3:35:40:1b:df:1a:dc:55:76:86:e1:51:53:
                    61:54:8e:10:ff:f7:80:a1:d9:4e:0b:3d:ff:e5:38:
                    c0:9e:19:75:73:f3:b9:39:2f:f2:42:89:6c:cb:25:
                    e7:bc:8a:7c:82:dc:b0:d4:d4:73:22:06:01:8a:b9:
                    34:38:fc:4a:cc:b3:77:6a:e6:be:0c:d5:13:b3:a6:
                    9a:7c:96:a7:fa:3b:1f:48:33:2f:fc:29:df:17:2b:
                    07:01:03:44:af:7a:86:ab:e0:36:9a:81:9e:97:dc:
                    30:51:c0:ab:d5:b6:1b:e4:09:c3:b4:af:36:ed:fd:
                    a8:c1:47:25:c4:07:cd:0f:ae:7b:d7:14:67:5c:92:
                    a4:0f:11:dd:38:c4:54:e0:6d:61:a8:ee:2f:81:c1:
                    bd:8e:3c:4f:33:f3:34:70:b5:4d:74:9f:9f:d5:ce:
                    e2:1e:50:d4:54:78:21:fd:4e:cf:93:9a:cc:9a:5b:
                    52:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4B:47:C3:4C:2A:0F:48:05:B4:A9:E7:A9:CE:2D:3D:2F:C6:89:57
            X509v3 Authority Key Identifier:
                keyid:31:8A:31:E0:F9:B2:FD:58:4D:99:4E:84:8E:7E:81:7C:CC:91:52:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/323630323a663631333a32303a3a2f34342d3438203d3e20323039313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f613:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         46:a7:f6:e4:53:5b:75:54:bc:05:33:2d:ca:5e:d3:94:1a:ed:
         cf:01:3d:fe:6a:5a:66:60:0d:dc:2f:16:05:63:4c:54:36:3c:
         7d:03:d8:5a:08:fa:bf:ad:65:13:b2:9d:4b:65:07:a8:43:c2:
         14:85:25:83:96:79:6f:66:10:c2:b6:ad:73:92:ce:c7:55:f1:
         62:78:4e:96:ec:7f:7b:7e:91:b2:5e:73:d1:83:68:2d:70:c8:
         98:89:d0:0a:ed:8b:25:85:21:4c:c7:24:0a:0a:b7:b1:e5:5d:
         53:32:42:f8:3b:9b:c4:85:5b:a9:cb:77:d2:e7:9d:38:8c:22:
         e4:51:cc:cd:61:e1:64:28:19:ef:1c:22:41:cd:02:9a:90:5f:
         6c:52:36:d0:a5:9f:0d:ef:c2:96:4c:38:be:87:8b:d7:ca:f9:
         bd:cd:0c:79:af:ac:1c:73:63:c2:8b:da:bd:60:d3:19:9c:d5:
         f4:be:ba:3a:e4:2a:0f:f4:1e:9f:03:68:2e:ca:44:88:9d:79:
         3c:d4:a7:fc:d8:6a:ba:6e:93:c8:68:4c:c0:a5:d5:83:ee:7e:
         0c:f5:f2:17:a5:78:f9:87:90:cc:ee:90:f2:0b:14:47:6d:66:
         45:91:59:38:ab:d8:68:5f:cd:17:d5:8a:9d:35:5a:04:36:1a:
         ed:35:3e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:34:09 2026 by rpki-client