Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a31333a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a31333a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          KjFlBItWA/HrgEIsANB1T6SS7TkCZ8HmuguNY8d3koQ=
Subject key identifier:   52:2C:68:9A:A6:5F:1B:5B:6A:6E:10:8A:64:62:DC:68:A4:CD:1E:4A
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       0D760096BFDD963BA97AA49A2B93A1F80B1CA31F
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a31333a3a2f34382d3438203d3e203534313438.roa
Signing time:             Fri 15 May 2026 02:45:24 +0000
ROA not before:           Fri 15 May 2026 02:40:24 +0000
ROA not after:            Fri 14 May 2027 02:45:24 +0000
asID:                     54148
IP address blocks:        2602:fa43:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 16 May 2026 03:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:76:00:96:bf:dd:96:3b:a9:7a:a4:9a:2b:93:a1:f8:0b:1c:a3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: May 15 02:40:24 2026 GMT
            Not After : May 14 02:45:24 2027 GMT
        Subject: CN=522C689AA65F1B5B6A6E108A6462DC68A4CD1E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:f2:4c:1a:c2:18:fc:ab:80:6e:aa:8a:7f:
                    1a:44:50:f8:78:a4:a6:a9:94:4b:96:a2:46:65:15:
                    88:1c:da:e6:e1:b3:78:32:fd:13:13:38:b2:b0:58:
                    d8:03:f7:e3:01:3b:82:9d:e2:54:61:b4:d1:8f:8f:
                    09:9f:5e:bf:f8:81:39:cf:84:ed:a6:27:07:54:a1:
                    d9:a7:76:d8:c6:77:98:c1:fc:b5:32:9f:3e:31:55:
                    58:b3:22:01:0c:f9:4e:af:00:4e:03:5e:a8:ff:a5:
                    40:62:fd:75:cf:1b:33:bf:a8:cb:ae:38:93:c7:69:
                    63:69:43:de:63:8f:88:40:a6:51:dd:52:94:3e:38:
                    5c:75:d7:2f:b4:c5:95:ce:62:03:dd:f0:c4:43:48:
                    a0:47:d3:22:50:a1:ad:00:30:78:cd:35:f4:c0:40:
                    59:ae:7b:17:0d:f0:da:e3:4f:2f:3d:e9:29:33:29:
                    16:68:dd:12:0c:9d:78:9d:f8:74:07:9f:cf:f1:de:
                    69:32:76:d1:c6:e8:75:2e:d6:f6:b1:5c:70:24:81:
                    11:5e:4f:63:76:9a:7b:a1:ac:70:97:de:96:42:b1:
                    f2:9e:e4:d9:d5:d9:e6:32:20:15:70:29:95:62:c5:
                    28:b8:05:cb:1f:9a:f6:d4:53:01:46:78:af:4b:6e:
                    a0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2C:68:9A:A6:5F:1B:5B:6A:6E:10:8A:64:62:DC:68:A4:CD:1E:4A
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a31333a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:31:e3:9d:4e:9c:b0:d8:ba:81:3a:52:28:93:e1:2d:02:a1:
         3f:a1:8b:03:3c:9a:14:b6:37:45:96:a7:01:c1:5d:a2:f1:7d:
         31:34:de:fa:ab:a0:4c:b1:33:cb:5f:1c:dd:8f:45:8c:75:6f:
         67:60:36:54:05:a2:cc:b6:32:7c:1f:b5:6e:2f:95:5f:e3:f5:
         58:60:37:42:08:df:0f:65:66:6f:c5:d6:cf:69:13:22:b2:4d:
         79:71:e7:14:04:32:18:2f:c6:a6:5a:e4:60:6d:04:fb:e8:f6:
         52:d2:75:7c:40:5b:0e:42:54:06:1c:1b:05:72:35:7e:2b:85:
         88:82:a2:1a:2e:fa:84:64:53:e4:4a:82:04:4c:88:83:ed:43:
         d7:31:47:29:de:d8:12:0e:f0:7e:4d:46:ae:e7:46:c8:11:14:
         68:54:43:5b:49:d8:ac:96:b8:1a:d6:e8:c2:3f:c2:3d:71:64:
         75:b7:31:58:68:02:de:c4:16:3c:bf:59:f2:43:8d:d0:f5:64:
         63:fd:ef:f2:42:2f:d2:82:0c:35:66:d2:bc:9b:9f:ca:0c:18:
         29:0a:c8:1a:2c:21:0b:d7:e1:29:b7:23:18:86:99:8a:95:b2:
         dd:32:f2:a4:1d:6a:b1:a8:40:5b:89:a2:16:5d:f5:19:e1:d0:
         b1:11:12:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:02:31 2026 by rpki-client