Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3635393a3a2f34382d3438203d3e20343032373832.roa
File:                     323630323a666161383a3635393a3a2f34382d3438203d3e20343032373832.roa (raw, json)
Hash identifier:          /b2kZvaDFyCfWCQQdzFeQ9CH/dS80R/e/qKU2FJeBnQ=
Subject key identifier:   A4:C2:0A:0C:EB:18:B4:84:A8:39:30:35:AC:18:BC:76:61:54:FC:F9
Certificate issuer:       /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial:       58BDB963F9ADC614C97C6FBEAB75B50A1F4EF124
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3635393a3a2f34382d3438203d3e20343032373832.roa
Signing time:             Mon 24 Aug 2026 16:24:31 +0000
ROA not before:           Mon 24 Aug 2026 16:19:31 +0000
ROA not after:            Mon 23 Aug 2027 16:24:31 +0000
asID:                     402782
IP address blocks:        2602:faa8:659::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:bd:b9:63:f9:ad:c6:14:c9:7c:6f:be:ab:75:b5:0a:1f:4e:f1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
        Validity
            Not Before: Aug 24 16:19:31 2026 GMT
            Not After : Aug 23 16:24:31 2027 GMT
        Subject: CN=A4C20A0CEB18B484A8393035AC18BC766154FCF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:bc:39:f0:44:4a:14:97:36:ed:c9:2b:6e:
                    ce:e8:8b:00:e1:f4:e7:41:63:ab:1d:f9:e4:86:9f:
                    25:75:65:68:1b:94:e0:79:e2:99:54:88:1e:a5:34:
                    b6:a0:f0:b7:e6:cc:20:8f:14:3d:31:67:d4:57:a8:
                    fa:ab:24:b2:08:46:d7:c5:2f:0b:fc:55:4e:f9:d5:
                    97:bd:b3:48:e9:74:10:95:99:c2:e2:25:f8:28:00:
                    75:84:30:80:3f:bd:a9:26:10:16:05:13:81:dd:20:
                    a4:dd:0c:d7:68:24:34:48:83:4f:60:b7:f3:12:70:
                    ae:7c:74:ed:f3:57:6c:36:b3:e4:15:9e:9a:fd:00:
                    fe:79:4e:95:3b:ed:f2:bc:a4:5d:66:83:38:01:e8:
                    7c:b3:14:b8:8c:d8:c5:4a:77:8d:e8:06:e4:b6:eb:
                    30:28:c0:0d:8d:6f:0b:af:af:d5:e2:43:72:2d:f0:
                    eb:40:4c:03:0b:85:b5:a6:8d:d7:d6:24:40:dc:19:
                    0d:77:c9:73:75:b0:a5:ef:e4:a8:c7:1e:ba:c3:ad:
                    12:5f:b4:5f:58:67:28:bd:04:38:6b:d9:7d:d6:ee:
                    c4:9d:e0:6a:90:c7:0d:62:1c:0f:b3:5a:78:7d:f5:
                    d6:3f:dc:b9:51:40:52:7e:5b:d7:8b:6f:f8:63:47:
                    36:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C2:0A:0C:EB:18:B4:84:A8:39:30:35:AC:18:BC:76:61:54:FC:F9
            X509v3 Authority Key Identifier:
                keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3635393a3a2f34382d3438203d3e20343032373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:659::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:4d:6d:ff:89:89:a1:53:97:20:f7:9e:a4:0a:f2:97:17:e2:
         27:48:6c:33:96:90:f7:03:e9:02:86:a6:d3:51:df:3b:9c:79:
         a9:10:ce:61:da:ad:66:07:3b:24:b5:82:d8:8b:7a:34:a7:72:
         27:64:df:7d:83:75:5a:68:eb:54:94:34:22:26:bd:23:37:46:
         12:13:0b:4b:fe:d1:2d:e1:95:2e:b0:dc:31:c5:4c:b9:db:b6:
         d2:d3:55:81:c0:44:f2:cb:5d:9f:44:73:e1:11:c4:b6:27:3d:
         6e:45:98:98:e5:aa:cb:7e:39:95:46:a9:19:db:46:8d:12:b8:
         17:10:f6:f7:27:33:66:9f:0a:bd:7c:e7:32:4f:fb:04:24:60:
         ff:48:82:1a:d3:76:78:e6:0f:c7:02:e8:58:cb:59:2f:6d:d9:
         d0:9c:70:db:32:9b:1e:e1:bc:3f:84:36:cf:90:9c:61:03:71:
         e8:f1:63:51:e2:2d:c4:b1:ff:24:32:9a:36:8d:ca:ff:ed:e4:
         85:e4:84:a3:ad:4f:e9:d3:27:9f:b4:ae:c5:bd:be:1f:21:62:
         d9:75:91:ff:1a:a5:2a:07:1a:0a:a3:fc:61:b4:87:fe:04:5d:
         2e:18:28:53:de:b9:2b:ef:da:aa:7d:ce:bc:d8:df:9a:bc:31:
         ed:d3:18:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:01:12 2026 by rpki-client