Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a36303a3a2f34342d3434203d3e203534313438.roa
File:                     323630323a666134333a36303a3a2f34342d3434203d3e203534313438.roa (raw, json)
Hash identifier:          snQPKI0WKQFGvwRD15+5osQeaBm6N0Q43EQ6Lp28zCc=
Subject key identifier:   6C:97:BE:6A:A0:5E:6C:C8:9E:52:30:D1:65:8B:D7:87:E4:78:84:BE
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       797035803D383370335D0AE498F85E6048569355
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a36303a3a2f34342d3434203d3e203534313438.roa
Signing time:             Fri 01 May 2026 18:32:27 +0000
ROA not before:           Fri 01 May 2026 18:27:27 +0000
ROA not after:            Fri 30 Apr 2027 18:32:27 +0000
asID:                     54148
IP address blocks:        2602:fa43:60::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 May 2026 17:40:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:70:35:80:3d:38:33:70:33:5d:0a:e4:98:f8:5e:60:48:56:93:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: May  1 18:27:27 2026 GMT
            Not After : Apr 30 18:32:27 2027 GMT
        Subject: CN=6C97BE6AA05E6CC89E5230D1658BD787E47884BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fc:14:62:f9:5e:4a:3c:d9:79:4a:4c:95:86:
                    ba:cd:b2:ad:43:46:29:44:f7:57:58:61:dd:55:db:
                    3e:5a:8b:6f:12:a1:c3:56:09:85:a7:d7:2b:98:a9:
                    14:2d:c8:b5:70:bb:87:95:bb:c6:f8:a2:6c:4c:33:
                    e5:23:77:f5:f0:07:c1:53:4e:fa:e7:9a:bd:05:7d:
                    97:cf:35:dc:d1:a8:cf:fe:fc:18:a3:e9:34:8b:7d:
                    5d:26:e5:61:22:73:f8:e7:7e:d2:79:1a:0b:fc:94:
                    da:e0:2c:0f:78:0b:bf:bc:2b:42:da:c7:c9:d4:b4:
                    74:8e:a6:98:06:94:27:9d:f8:fa:c1:74:fa:e6:70:
                    79:d1:3c:1b:4c:ba:a0:ff:1e:22:4f:91:8e:8f:84:
                    8d:40:f8:0c:f7:f0:6f:ff:30:44:b5:4b:8b:71:eb:
                    1e:15:61:0a:6c:4f:07:e4:05:ed:88:a0:ea:3f:53:
                    b7:ed:89:55:76:0e:14:14:40:11:c9:c0:fb:8b:e6:
                    69:f1:24:68:c8:01:e4:40:36:aa:14:92:3c:57:4b:
                    d1:87:b4:8d:19:fe:46:2c:ec:23:62:70:c3:94:d6:
                    a4:ab:c8:01:d4:40:0c:e2:cb:a7:e6:ca:c0:a5:03:
                    78:e4:58:2e:55:12:8d:d5:0b:d6:e6:9e:58:7d:6b:
                    33:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:97:BE:6A:A0:5E:6C:C8:9E:52:30:D1:65:8B:D7:87:E4:78:84:BE
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a36303a3a2f34342d3434203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:60::/44

    Signature Algorithm: sha256WithRSAEncryption
         89:dd:bd:75:7b:b5:cb:4f:98:e4:3f:05:11:ad:26:62:57:b8:
         18:e4:c5:db:30:f2:0e:52:ff:59:db:05:76:07:f0:15:c8:1f:
         1e:bb:76:9e:32:3f:10:14:39:24:94:02:1c:f2:a5:1c:fd:33:
         79:b7:f9:02:fc:68:ca:56:c5:36:78:37:83:db:6b:c9:fd:3b:
         b7:c1:a1:95:db:c2:73:f6:c4:48:3c:a1:98:48:69:b4:32:01:
         c7:85:cf:72:2a:b0:63:7b:10:08:14:29:52:99:97:53:32:ac:
         a3:1a:64:10:b4:bb:21:b9:9a:51:83:be:5d:cc:8f:ca:4d:79:
         6d:45:9e:c2:97:ea:5c:c3:ea:5c:fc:b3:7a:d1:57:97:7c:71:
         d6:02:55:db:d3:cc:7c:4f:44:07:23:f6:e2:95:0b:04:2c:8d:
         d4:22:7d:15:54:da:a0:1c:67:b1:f0:19:0c:02:96:da:96:3c:
         80:b8:56:96:91:a1:28:82:36:9d:ab:5a:1f:96:ab:38:e2:d1:
         29:31:be:a3:0f:a2:11:97:7d:e7:35:d4:36:e2:15:c6:bc:45:
         19:8c:fc:49:2f:7b:b1:38:a4:63:f1:0c:36:78:30:66:7c:c4:
         00:1a:5f:41:15:ba:b5:e4:8a:d1:d3:31:53:9c:75:24:9d:b7:
         7c:de:51:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 05:12:53 2026 by rpki-client