Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3738343a3a2f34382d3438203d3e203534323836.roa
File:                     323630323a666161383a3738343a3a2f34382d3438203d3e203534323836.roa (raw, json)
Hash identifier:          p8xenQppDVXsS5dNtp1mpSXzBts0aoOjL6hXWnrxntQ=
Subject key identifier:   94:AF:9C:07:C7:BD:69:96:AF:9D:A8:3E:F2:DE:81:01:80:79:1B:B0
Certificate issuer:       /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial:       6BE10070391A043A4832593FC175285FF5936E0B
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3738343a3a2f34382d3438203d3e203534323836.roa
Signing time:             Thu 24 Sep 2026 15:00:48 +0000
ROA not before:           Thu 24 Sep 2026 14:55:48 +0000
ROA not after:            Thu 23 Sep 2027 15:00:48 +0000
asID:                     54286
IP address blocks:        2602:faa8:784::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e1:00:70:39:1a:04:3a:48:32:59:3f:c1:75:28:5f:f5:93:6e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
        Validity
            Not Before: Sep 24 14:55:48 2026 GMT
            Not After : Sep 23 15:00:48 2027 GMT
        Subject: CN=94AF9C07C7BD6996AF9DA83EF2DE810180791BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:c7:d1:15:53:b0:dc:aa:e5:08:a9:52:d7:
                    bf:36:99:0c:42:3f:8d:e0:f1:8b:1a:85:c4:6c:59:
                    3b:f9:7e:27:ad:ee:71:1d:8c:82:33:8c:89:ff:16:
                    14:f9:da:d7:1c:5d:e4:8e:9c:35:f6:1d:02:16:15:
                    97:c7:13:d8:8e:99:48:45:22:86:0c:ae:b0:53:34:
                    6d:fb:d6:f5:57:8d:ac:4f:3b:65:a4:29:2a:2f:77:
                    5e:55:a7:c8:ee:4e:1f:f1:78:4a:52:44:f1:d5:7e:
                    7f:29:85:09:58:28:cb:88:b5:78:17:f7:02:81:ff:
                    9d:80:39:76:16:f6:9e:43:93:40:48:3a:a5:49:18:
                    7f:0c:4a:17:f0:34:64:05:3b:6a:91:da:d5:ec:78:
                    72:2d:ce:8e:54:33:a3:f9:a8:de:01:92:52:2a:23:
                    5b:5b:18:c0:0f:b2:d1:e8:21:34:5f:3c:55:34:66:
                    a9:f9:66:cb:91:b8:4d:c9:00:c5:38:5e:09:5a:db:
                    d0:a3:59:f5:a2:d8:c4:21:9b:35:e7:7e:40:67:bb:
                    04:d1:fd:b1:7d:9b:85:82:f8:15:cc:f3:8a:dd:ba:
                    b7:da:10:b4:b1:6c:11:27:46:af:a8:f2:38:1f:e4:
                    37:5f:d9:08:18:3c:99:07:2b:69:6f:4c:b3:19:d3:
                    09:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AF:9C:07:C7:BD:69:96:AF:9D:A8:3E:F2:DE:81:01:80:79:1B:B0
            X509v3 Authority Key Identifier:
                keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3738343a3a2f34382d3438203d3e203534323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:784::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:70:7e:fd:08:ff:4e:a9:c7:0e:41:25:36:26:50:87:7a:a4:
         36:42:e5:5b:2f:2b:b6:8b:38:0f:05:46:db:c1:95:9e:0b:5c:
         19:c8:ae:53:0b:3a:89:16:fc:a5:b3:8c:00:b2:e5:d3:32:1c:
         9a:9e:6f:de:da:c5:a9:73:99:61:31:0f:6e:c0:f9:4d:fc:6f:
         1c:45:bb:e6:9e:f4:17:e4:d2:e4:e0:23:b6:92:b5:8d:53:91:
         a6:76:0a:65:83:e8:42:f0:56:cf:bd:33:30:1f:e1:42:dd:eb:
         b7:aa:fa:21:d3:27:a2:51:ce:00:9c:ea:a6:a0:17:2a:34:1f:
         b2:3c:8f:d8:b6:ff:24:8f:c4:f7:72:58:78:c7:e1:fb:e0:bb:
         ba:4d:34:2c:df:f0:71:3e:09:bf:1a:a9:26:2b:a2:e4:68:94:
         98:e1:cb:c9:b9:e8:bc:22:df:0e:fb:07:bb:f3:b1:39:c8:a0:
         11:07:6e:0e:1e:32:aa:4a:02:c4:77:b4:ac:ea:1a:3c:ad:97:
         d7:f0:cb:67:65:c0:79:12:ce:b7:f0:dc:f3:34:ef:a9:e4:ed:
         fb:58:16:b1:2b:66:48:b2:64:b7:4c:d3:c3:a9:8f:29:af:9c:
         09:0c:72:bb:e0:b7:2b:bb:46:76:d4:1d:8d:d9:66:5d:6a:0e:
         71:ec:0b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:38:41 2026 by rpki-client