Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3230363a3a2f34382d3438203d3e203534323836.roa
File:                     323630323a666161383a3230363a3a2f34382d3438203d3e203534323836.roa (raw, json)
Hash identifier:          tIAgeFj8xISuIJezlWCjMeG0xceMssfRqcp7p64oc/g=
Subject key identifier:   F5:84:53:21:5B:72:25:D8:24:DA:29:3D:B4:6A:FB:55:CD:8D:CF:48
Certificate issuer:       /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial:       79EB284B9930AE9D444EBB9DE3E2899248524535
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3230363a3a2f34382d3438203d3e203534323836.roa
Signing time:             Thu 19 Mar 2026 15:56:27 +0000
ROA not before:           Thu 19 Mar 2026 15:51:27 +0000
ROA not after:            Thu 18 Mar 2027 15:56:27 +0000
asID:                     54286
IP address blocks:        2602:faa8:206::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 22:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:eb:28:4b:99:30:ae:9d:44:4e:bb:9d:e3:e2:89:92:48:52:45:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
        Validity
            Not Before: Mar 19 15:51:27 2026 GMT
            Not After : Mar 18 15:56:27 2027 GMT
        Subject: CN=F58453215B7225D824DA293DB46AFB55CD8DCF48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c6:5f:4a:cb:f9:ea:38:9f:6f:5e:e5:0b:1f:
                    d4:e5:de:22:f5:cb:78:e2:3e:4f:ec:de:78:3b:4f:
                    cd:07:1d:a1:ce:79:52:dc:eb:58:e0:94:eb:d8:b6:
                    26:73:86:3f:e9:7d:2c:f0:8d:bf:03:f0:c6:87:22:
                    02:bc:71:e6:c5:32:1b:7b:8a:fe:64:cc:90:df:2a:
                    0c:03:3a:70:aa:82:49:eb:67:75:f6:d7:9f:52:26:
                    ce:40:82:27:f2:5e:a8:1f:60:66:30:75:b4:e5:c8:
                    40:66:67:ae:76:83:55:2d:97:b5:c0:52:12:08:92:
                    85:f4:c8:5c:dc:d9:95:64:9c:e6:01:07:fc:6c:51:
                    7f:f6:34:aa:bb:c6:0d:50:b1:e8:4c:2e:37:02:9f:
                    b1:8b:cf:b0:ca:c3:f4:51:32:62:2b:28:f5:0d:3c:
                    d4:25:c6:16:79:eb:7e:f8:e1:95:ae:b3:f5:85:28:
                    49:70:f8:9d:00:a5:0f:3d:25:8e:2f:ef:00:c3:07:
                    03:61:c3:27:c3:3f:dc:a7:be:e1:0c:3a:1f:e0:87:
                    9e:2b:ad:71:20:3d:09:9b:05:4c:ea:f3:b1:1d:c7:
                    5e:a8:9f:02:9a:ac:83:ae:8f:34:83:c4:68:a3:5c:
                    36:50:54:2f:b2:35:95:cb:66:84:48:24:c8:dd:0f:
                    8c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:84:53:21:5B:72:25:D8:24:DA:29:3D:B4:6A:FB:55:CD:8D:CF:48
            X509v3 Authority Key Identifier:
                keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3230363a3a2f34382d3438203d3e203534323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:206::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:85:5f:a6:78:90:b2:2e:3a:ab:4a:0d:ac:be:ca:0b:d7:52:
         94:18:14:3a:85:38:1e:e1:e9:8a:68:0f:a6:1e:6d:88:2d:ef:
         49:e1:56:7f:39:40:f2:6d:9e:70:0f:b6:ac:a9:39:dd:7c:1c:
         ce:c7:2e:03:c1:6c:63:5d:6f:7c:9b:1f:9d:a1:ce:77:49:ef:
         e2:ee:84:e5:76:bb:02:b5:1c:9f:19:7f:ea:bc:56:3c:29:d8:
         c0:af:a1:61:6f:5a:8b:14:d2:f5:d6:84:c6:a0:3a:58:63:0f:
         5d:ab:5b:19:90:7c:7a:d4:0e:9d:a2:36:6d:10:08:a6:bc:3c:
         f6:79:85:48:86:8c:69:35:06:b4:7f:37:c7:10:88:4f:4c:4d:
         ce:5d:f4:ec:0b:1a:0a:40:60:48:bf:85:fa:c7:23:52:08:66:
         d7:f8:25:f5:1e:54:41:fc:91:59:70:fe:60:20:02:58:ad:08:
         f1:d4:e6:dd:01:d1:b6:fc:3a:76:4e:a1:ba:10:29:e3:47:d4:
         11:3b:f5:aa:78:fb:ea:a5:50:f4:4f:9a:5b:4e:e0:98:be:02:
         09:a2:f4:8c:4c:6e:25:d2:72:c0:f9:15:57:ca:01:fd:bf:fd:
         73:ab:58:73:3a:55:58:59:6b:46:4b:f1:74:98:70:ec:78:4c:
         22:45:f3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 12:12:32 2026 by rpki-client