Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/323630323a666266313a3a2f33322d3438203d3e203338313336.roa
File:                     323630323a666266313a3a2f33322d3438203d3e203338313336.roa (raw, json)
Hash identifier:          uUmolcnnM642Bhq7/WFCjjcz+yjywsZm4kpRz13AVAU=
Subject key identifier:   3D:0A:08:C3:46:45:D7:FA:3A:3E:B8:33:68:BE:7B:69:1C:EF:6D:66
Certificate issuer:       /CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
Certificate serial:       6B31DECA6F7E49223EFC154C1975B5551A83AC2F
Authority key identifier: FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/323630323a666266313a3a2f33322d3438203d3e203338313336.roa
Signing time:             Fri 19 Jun 2026 07:53:13 +0000
ROA not before:           Fri 19 Jun 2026 07:48:13 +0000
ROA not after:            Fri 18 Jun 2027 07:53:13 +0000
asID:                     38136
IP address blocks:        2602:fbf1::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 04:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:31:de:ca:6f:7e:49:22:3e:fc:15:4c:19:75:b5:55:1a:83:ac:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
        Validity
            Not Before: Jun 19 07:48:13 2026 GMT
            Not After : Jun 18 07:53:13 2027 GMT
        Subject: CN=3D0A08C34645D7FA3A3EB83368BE7B691CEF6D66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:24:de:ff:8d:c2:21:7d:d4:3e:9e:b5:90:a1:
                    ec:bb:3f:6c:8d:95:b9:2f:51:25:b5:28:a8:f4:5e:
                    3d:18:3e:27:6b:15:e3:b0:6d:06:d2:c8:f8:fb:9e:
                    d0:8a:4a:44:6f:13:fa:5e:8e:a9:ff:bf:d2:cf:24:
                    6b:b4:d9:18:7b:10:c7:f4:4d:e3:69:a3:7c:cf:31:
                    aa:1f:c1:ab:9c:1b:37:10:fc:9b:06:02:e1:fc:33:
                    77:27:60:c8:60:43:7d:b4:cf:35:18:51:a4:93:4e:
                    d6:5b:52:55:22:aa:1e:aa:14:2d:3a:08:cb:1b:f6:
                    ee:34:dd:31:53:b2:91:3c:34:72:4a:34:2e:35:9e:
                    cb:03:5e:f1:2e:e6:46:6f:81:9c:7d:71:9e:f8:05:
                    b6:1c:99:b4:4c:5d:0e:49:10:3f:4c:94:fb:fc:8e:
                    b1:37:ad:1d:47:93:b7:4d:9b:23:e9:81:b7:36:58:
                    5c:98:d4:4d:f2:4c:49:d4:70:7f:fa:74:6b:f5:39:
                    1e:71:f0:53:6e:c8:33:49:3b:5f:31:3e:79:3d:eb:
                    ac:f0:44:f3:73:f4:56:d3:02:20:79:ab:ac:7c:7a:
                    32:92:72:54:36:ad:09:f7:4d:68:65:68:22:c1:62:
                    25:12:b0:ae:ec:66:4a:8d:dc:6b:ad:b1:3e:df:32:
                    09:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0A:08:C3:46:45:D7:FA:3A:3E:B8:33:68:BE:7B:69:1C:EF:6D:66
            X509v3 Authority Key Identifier:
                keyid:FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/323630323a666266313a3a2f33322d3438203d3e203338313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf1::/32

    Signature Algorithm: sha256WithRSAEncryption
         cb:4c:0c:55:5d:8e:9a:30:9b:e0:ff:cf:0d:2c:1f:52:a3:54:
         78:a4:4d:db:50:c6:48:92:66:eb:93:34:c1:77:dd:59:86:4f:
         f3:e2:11:58:75:49:c0:3b:29:f0:0c:44:18:0d:9d:34:d3:45:
         30:0c:3f:23:8b:ce:a6:86:74:10:0c:02:3f:54:58:88:7a:8b:
         b9:71:d8:fc:41:f3:33:de:93:6a:c1:f2:3a:6a:7b:76:9a:52:
         e8:d4:7e:92:1a:78:43:c8:f8:63:a0:88:d4:9c:20:0e:98:a1:
         df:f2:e1:e3:52:76:11:b9:70:14:30:d4:cd:7c:97:e9:5e:74:
         8b:43:24:1e:9c:78:80:e2:04:58:f8:04:12:08:58:56:04:32:
         e1:de:d6:21:9a:19:c1:75:27:b1:f5:98:9b:32:b7:54:05:e1:
         a0:40:72:be:82:6b:f7:f4:67:db:b2:83:7f:7c:8c:b4:d1:c0:
         a8:8f:17:bb:6b:57:a9:b8:31:e1:bd:c0:b2:9d:40:3c:f1:b4:
         d4:32:15:8e:29:48:dd:01:92:52:1e:6c:7e:a7:a7:58:00:7d:
         c1:27:8b:88:ea:fc:d1:3f:7b:df:dd:98:01:9e:a8:e6:40:90:
         f3:ad:41:92:36:55:b6:c4:3e:6e:7d:7d:ae:54:b8:ff:81:53:
         2a:8e:21:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:10:43 2026 by rpki-client