Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39383a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a39383a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          80/VpWd0GGI9avAY6RH+dSEIyv9rNIw6JiDn7GHKdgE=
Subject key identifier:   7E:C9:8F:EC:CA:96:E4:23:6B:F4:F2:04:E9:55:3B:E9:28:92:36:CA
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       5EDFC51BF0EAA90DFF0766FE871EF683D00C62E6
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39383a3a2f34362d3436203d3e203534313438.roa
Signing time:             Sat 03 Oct 2026 02:45:57 +0000
ROA not before:           Sat 03 Oct 2026 02:40:57 +0000
ROA not after:            Sat 02 Oct 2027 02:45:57 +0000
asID:                     54148
IP address blocks:        2602:fa43:98::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 08:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:df:c5:1b:f0:ea:a9:0d:ff:07:66:fe:87:1e:f6:83:d0:0c:62:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct  3 02:40:57 2026 GMT
            Not After : Oct  2 02:45:57 2027 GMT
        Subject: CN=7EC98FECCA96E4236BF4F204E9553BE9289236CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:81:53:52:d9:36:0f:57:ec:b9:25:32:92:b8:
                    8f:91:ac:d1:9b:a0:a1:a9:cc:f4:85:fd:44:95:e3:
                    cc:65:a2:27:2c:81:f2:6c:57:bb:ee:bf:04:7f:b4:
                    56:69:f5:8b:87:e9:f0:51:58:84:59:3c:92:cc:cf:
                    ac:57:80:39:35:3f:77:7b:b2:9d:52:d8:1c:b8:89:
                    05:b7:76:4b:52:6e:69:be:94:11:82:1c:31:51:d7:
                    82:12:8f:5e:f8:6f:14:57:f5:6c:72:10:15:90:61:
                    64:16:74:f3:b7:11:67:c7:2b:70:17:05:f4:d2:08:
                    ab:c3:36:e2:a4:ee:4e:a4:14:3f:70:8e:08:c8:cc:
                    28:bc:2c:1e:02:69:e9:aa:9c:c8:9e:f9:ce:b2:20:
                    8d:e9:e8:ef:cd:bc:fe:1d:16:86:27:b3:a4:ee:3e:
                    bd:39:cd:09:7b:94:1b:97:b9:c2:f1:22:c2:ac:70:
                    c4:d7:56:53:72:33:19:22:67:5c:2b:aa:04:da:bd:
                    cb:d8:98:54:70:2e:10:c0:54:61:29:3f:6f:e8:ea:
                    7f:ad:8b:0c:ad:c2:97:20:b9:ad:f7:42:81:c6:64:
                    05:20:51:63:15:26:f2:a2:20:3d:2f:46:31:ff:60:
                    60:ec:4c:d7:01:d9:33:a5:c3:5d:a2:87:b5:4b:11:
                    06:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C9:8F:EC:CA:96:E4:23:6B:F4:F2:04:E9:55:3B:E9:28:92:36:CA
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39383a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:98::/46

    Signature Algorithm: sha256WithRSAEncryption
         a7:f4:5e:ba:fb:16:91:a2:2f:d6:18:bc:f5:e9:f9:3f:5a:9a:
         37:17:0d:51:e4:67:ad:3c:61:94:c9:5a:39:27:47:4f:32:e8:
         8e:a0:97:1e:eb:f9:8f:7c:d1:b5:40:e8:47:ef:30:95:68:d1:
         9b:69:f1:02:e9:15:eb:49:c9:06:9f:ef:cb:df:52:51:f1:93:
         d8:35:97:f9:82:f2:a0:dc:6d:3d:f5:64:70:10:88:6e:1b:0a:
         7c:69:2f:0f:71:62:57:7f:83:f5:de:85:1e:be:f2:b0:77:f2:
         91:9e:48:77:22:39:ed:a8:dd:df:c4:fd:70:8e:65:71:28:58:
         67:9a:08:27:86:73:e8:e4:59:ed:77:e1:90:10:d6:c7:65:8d:
         d9:bb:ee:4d:cc:dc:9f:1d:25:79:56:3a:15:ac:2f:9d:a5:86:
         7c:08:89:eb:7d:72:d8:ef:c7:a7:7b:e2:8a:73:99:d6:f2:d4:
         e2:55:8e:35:aa:1c:66:ec:46:bf:8c:cc:9f:72:fe:35:6d:06:
         ee:8e:26:54:b5:43:59:93:24:1e:50:bd:bd:dc:a8:63:d6:5d:
         bf:6d:28:8a:0f:54:04:1e:d1:68:d3:08:76:e5:1f:c0:e6:04:
         e6:ed:2d:46:2e:8c:51:c1:08:bd:c4:6e:f4:cc:5f:7d:7a:3f:
         26:e5:8a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:01:53 2026 by rpki-client