Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3130633a3a2f34382d3438203d3e20313430363832.roa
File:                     323630323a663962613a3130633a3a2f34382d3438203d3e20313430363832.roa (raw, json)
Hash identifier:          uEYGQZp0L2DXiEc9BTeWJO3MNHDEDR7ssOSrkFG7jco=
Subject key identifier:   AE:05:7E:17:3C:F5:B3:27:2E:BC:2C:21:7F:1C:BA:BE:EF:5C:55:23
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       253FB7220B193333B62E07294D9C001BD89460FC
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3130633a3a2f34382d3438203d3e20313430363832.roa
Signing time:             Wed 17 Jun 2026 09:32:52 +0000
ROA not before:           Wed 17 Jun 2026 09:27:52 +0000
ROA not after:            Wed 16 Jun 2027 09:32:52 +0000
asID:                     140682
IP address blocks:        2602:f9ba:10c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Jun 2026 09:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3f:b7:22:0b:19:33:33:b6:2e:07:29:4d:9c:00:1b:d8:94:60:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jun 17 09:27:52 2026 GMT
            Not After : Jun 16 09:32:52 2027 GMT
        Subject: CN=AE057E173CF5B3272EBC2C217F1CBABEEF5C5523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7c:3d:95:1a:99:e4:f4:15:fe:e5:fb:a7:6b:
                    e1:3c:46:b1:7c:56:8f:d5:6e:b8:85:84:c4:4e:02:
                    69:bc:1f:c2:d4:59:61:15:7b:8c:53:2d:59:95:8f:
                    23:16:0c:5b:e2:79:ab:7c:d7:2e:21:05:0c:85:f8:
                    4c:8b:5f:63:77:02:83:e1:77:10:95:6f:8d:ac:46:
                    6b:b0:c1:59:8e:ce:36:c3:8a:85:49:e9:74:a2:c4:
                    6b:31:20:31:fe:40:90:7c:21:12:6c:6d:1d:52:45:
                    35:12:b8:d9:4e:d9:30:5d:cd:66:a6:e2:66:bf:7b:
                    58:4b:d6:d6:c1:fc:37:dc:61:c3:d4:10:90:0d:a0:
                    e1:cf:b4:f4:9e:03:7e:4d:12:8a:72:a1:2a:27:9e:
                    8b:f4:2b:7a:b1:3e:04:7a:18:c1:44:08:72:85:3c:
                    23:95:27:d8:6c:bb:0e:ed:86:25:42:b5:26:ba:be:
                    88:a7:a7:03:8c:46:c0:bd:53:81:32:fe:70:c3:fd:
                    50:25:cf:e9:33:0e:aa:07:12:b1:51:a2:62:e4:9a:
                    60:bb:15:e5:f6:49:8f:92:64:66:dc:90:a6:42:e2:
                    a5:3c:07:b0:10:5d:79:14:55:bc:6d:8e:25:d1:89:
                    62:7b:d0:57:60:9d:c1:17:fd:c2:65:da:bc:47:5e:
                    ec:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:05:7E:17:3C:F5:B3:27:2E:BC:2C:21:7F:1C:BA:BE:EF:5C:55:23
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3130633a3a2f34382d3438203d3e20313430363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:10c::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:73:b3:57:fb:1e:93:b8:7e:06:3e:66:91:8b:47:3b:70:35:
         c7:39:27:d5:a6:cb:3a:a5:d1:3c:61:d2:f0:00:93:ef:dd:50:
         42:c2:54:d5:ec:5a:ae:35:52:03:61:96:ad:e5:7c:e5:a6:46:
         d5:c6:4e:fb:9b:a8:94:98:1c:20:28:56:9f:75:8c:c1:7d:13:
         f1:48:2b:0c:dd:bc:ca:2e:63:aa:dd:d0:0d:c7:67:c0:b4:2c:
         8c:7f:33:3d:a1:bc:3a:7f:74:9a:b1:de:f1:12:f4:bc:5b:b3:
         03:14:e2:43:44:14:90:f3:b6:59:06:d2:eb:a3:c4:8b:84:fd:
         06:ce:56:71:34:40:bf:94:9f:43:03:73:40:2b:94:03:8b:df:
         5a:b8:7c:4a:7d:0c:65:a8:2e:8a:1b:f7:07:68:a8:3a:cc:db:
         09:64:c2:1d:2d:fe:06:a4:e2:44:b3:d0:07:49:00:f8:57:06:
         95:57:78:30:f4:b2:60:1d:2b:fb:24:a3:74:c2:1d:bd:8f:c2:
         fe:a5:1b:39:d0:ac:c7:55:f6:de:e3:b3:a0:09:7a:40:40:f8:
         c7:ac:28:e6:b2:a1:6f:b2:6b:2f:b2:20:e2:57:27:dd:94:bb:
         15:46:f9:2d:95:b8:02:e0:f3:a9:d0:74:c8:ee:d9:fa:1e:07:
         6e:c8:b3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 17:26:27 2026 by rpki-client