Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/12/326130353a646663363a393530303a3a2f34302d3430203d3e20323030353239.roa
File:                     326130353a646663363a393530303a3a2f34302d3430203d3e20323030353239.roa (raw, json)
Hash identifier:          W6MWDlvFotVeiiiD3/PuCYrw59SQfaPz1CsOGVlCcBA=
Subject key identifier:   74:B7:6A:68:7D:F4:24:65:FF:EB:15:33:4D:4E:6F:28:37:78:90:27
Certificate issuer:       /CN=89ABDCD8A98A23AF2521330777C439C50B83C0E3
Certificate serial:       32F4C27213E8F5F10AC11CB74C1E2C6332361EB6
Authority key identifier: 89:AB:DC:D8:A9:8A:23:AF:25:21:33:07:77:C4:39:C5:0B:83:C0:E3
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/89ABDCD8A98A23AF2521330777C439C50B83C0E3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/12/326130353a646663363a393530303a3a2f34302d3430203d3e20323030353239.roa
Signing time:             Wed 16 Jul 2025 22:43:26 +0000
ROA not before:           Wed 16 Jul 2025 22:38:26 +0000
ROA not after:            Wed 15 Jul 2026 22:43:26 +0000
asID:                     200529
IP address blocks:        2a05:dfc6:9500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/12/89ABDCD8A98A23AF2521330777C439C50B83C0E3.crl
                          rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/12/89ABDCD8A98A23AF2521330777C439C50B83C0E3.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/89ABDCD8A98A23AF2521330777C439C50B83C0E3.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f4:c2:72:13:e8:f5:f1:0a:c1:1c:b7:4c:1e:2c:63:32:36:1e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ABDCD8A98A23AF2521330777C439C50B83C0E3
        Validity
            Not Before: Jul 16 22:38:26 2025 GMT
            Not After : Jul 15 22:43:26 2026 GMT
        Subject: CN=74B76A687DF42465FFEB15334D4E6F2837789027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:49:14:e1:ba:d8:93:a2:f0:6c:2d:d3:e6:02:
                    d9:9f:ca:ea:a3:8e:8f:0f:22:25:f2:09:2e:5d:39:
                    42:55:bc:3c:10:e4:e0:ba:27:a1:de:14:20:23:7b:
                    63:82:35:c9:22:21:fe:8f:a2:fa:c5:3b:0a:dc:af:
                    20:2e:27:6b:51:1b:c5:fd:17:b6:f2:7e:35:ab:71:
                    36:f0:52:19:3f:39:62:cc:d8:de:6f:28:9a:b3:0b:
                    3e:32:61:5e:85:2f:29:87:df:09:c8:f9:db:32:14:
                    0b:90:49:26:80:a1:09:09:3b:4e:2e:bc:04:4c:de:
                    a4:3f:42:65:bf:ea:96:24:73:34:ec:aa:e7:d6:c5:
                    26:a8:28:b3:15:1d:b0:34:21:96:17:1e:55:08:45:
                    5d:bb:f6:42:ef:f4:89:d7:12:37:e9:a9:2e:20:c2:
                    ef:72:8a:26:c1:e7:71:4f:81:e7:e7:d2:b7:d9:d9:
                    e2:7e:67:6b:76:b5:ec:6a:4a:3f:d5:e6:96:36:25:
                    48:22:c8:6c:9e:f8:9d:d1:61:67:f0:7c:65:da:1f:
                    be:41:25:03:fc:e1:c4:7c:e8:53:2a:f0:e5:06:94:
                    95:16:e5:e6:1e:53:f2:20:56:e4:c0:2f:f7:f6:70:
                    88:25:01:75:e6:7d:f7:0a:24:3a:a1:84:1e:0c:09:
                    c2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B7:6A:68:7D:F4:24:65:FF:EB:15:33:4D:4E:6F:28:37:78:90:27
            X509v3 Authority Key Identifier:
                keyid:89:AB:DC:D8:A9:8A:23:AF:25:21:33:07:77:C4:39:C5:0B:83:C0:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/12/89ABDCD8A98A23AF2521330777C439C50B83C0E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/89ABDCD8A98A23AF2521330777C439C50B83C0E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/12/326130353a646663363a393530303a3a2f34302d3430203d3e20323030353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6:9500::/40

    Signature Algorithm: sha256WithRSAEncryption
         f0:c2:6c:aa:ce:c8:ca:96:16:89:72:12:c2:e9:a8:0f:16:4c:
         5e:c3:79:c3:20:f6:05:a9:19:7c:f5:1b:11:5c:aa:11:50:35:
         c3:5a:67:1e:07:5c:5e:63:ce:1e:22:83:ff:e2:81:f3:3a:e3:
         af:90:d5:fb:1c:7a:c2:ca:22:fe:09:2e:f2:7a:3b:c5:60:18:
         2a:8a:1b:5b:f7:9e:f0:9b:26:d2:eb:74:b2:c6:c6:c9:2d:c1:
         a4:0a:f5:59:1f:78:c5:1c:6e:e2:cf:b8:13:da:e4:f4:ad:db:
         69:8b:eb:79:02:7b:c8:50:c4:60:db:2a:98:27:63:d2:18:7f:
         ed:5e:60:84:7b:39:fa:31:d1:30:d3:6d:91:5b:c6:fa:47:ed:
         3b:c1:16:26:95:64:29:c3:d5:99:90:79:e4:eb:b6:39:9d:81:
         fa:7e:f6:1b:09:a2:d3:64:48:94:c4:9f:1d:2b:5e:03:4b:c0:
         bc:92:e8:b6:46:2d:c5:28:cc:6e:11:ac:cf:ec:ad:24:76:2b:
         b6:f1:a4:8c:a9:cd:5d:e3:7d:d3:5b:41:99:86:44:dc:d0:6b:
         85:68:9a:90:76:0a:8a:65:b9:52:24:55:06:88:06:80:e5:32:
         f5:c8:a8:1b:47:91:95:a5:7c:7d:d2:4e:7c:78:81:0a:7e:98:
         87:13:1e:5a
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUMvTCchPo9fEKwRy3TB4sYzI2HrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlBQkRDRDhBOThBMjNBRjI1MjEzMzA3NzdDNDM5QzUw
QjgzQzBFMzAeFw0yNTA3MTYyMjM4MjZaFw0yNjA3MTUyMjQzMjZaMDMxMTAvBgNV
BAMTKDc0Qjc2QTY4N0RGNDI0NjVGRkVCMTUzMzRENEU2RjI4Mzc3ODkwMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDESRThutiTovBsLdPmAtmfyuqj
jo8PIiXyCS5dOUJVvDwQ5OC6J6HeFCAje2OCNckiIf6PovrFOwrcryAuJ2tRG8X9
F7byfjWrcTbwUhk/OWLM2N5vKJqzCz4yYV6FLymH3wnI+dsyFAuQSSaAoQkJO04u
vARM3qQ/QmW/6pYkczTsqufWxSaoKLMVHbA0IZYXHlUIRV279kLv9InXEjfpqS4g
wu9yiibB53FPgefn0rfZ2eJ+Z2t2texqSj/V5pY2JUgiyGye+J3RYWfwfGXaH75B
JQP84cR86FMq8OUGlJUW5eYeU/IgVuTAL/f2cIglAXXmffcKJDqhhB4MCcLBAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUdLdqaH30JGX/6xUzTU5vKDd4kCcwHwYDVR0j
BBgwFoAUiavc2KmKI68lITMHd8Q5xQuDwOMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNmFiOTZlN2E2MTMwNDk4YWE5ODEzZDdlZTViYmVkMzEvMTIvODlBQkRDRDhB
OThBMjNBRjI1MjEzMzA3NzdDNDM5QzUwQjgzQzBFMy5jcmwwgZMGCCsGAQUFBwEB
BIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9y
ZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvODlB
QkRDRDhBOThBMjNBRjI1MjEzMzA3NzdDNDM5QzUwQjgzQzBFMy5jZXIwga0GCCsG
AQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS82YWI5NmU3YTYxMzA0OThhYTk4MTNkN2VlNWJiZWQz
MS8xMi8zMjYxMzAzNTNhNjQ2NjYzMzYzYTM5MzUzMDMwM2EzYTJmMzQzMDJkMzQz
MDIwM2QzZTIwMzIzMDMwMzUzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfxpUwDQYJKoZIhvcN
AQELBQADggEBAPDCbKrOyMqWFolyEsLpqA8WTF7DecMg9gWpGXz1GxFcqhFQNcNa
Zx4HXF5jzh4ig//igfM646+Q1fscesLKIv4JLvJ6O8VgGCqKG1v3nvCbJtLrdLLG
xsktwaQK9VkfeMUcbuLPuBPa5PSt22mL63kCe8hQxGDbKpgnY9IYf+1eYIR7Ofox
0TDTbZFbxvpH7TvBFiaVZCnD1ZmQeeTrtjmdgfp+9hsJotNkSJTEnx0rXgNLwLyS
6LZGLcUozG4RrM/srSR2K7bxpIypzV3jfdNbQZmGRNzQa4VompB2CopluVIkVQaI
BoDlMvXIqBtHkZWlfH3STnx4gQp+mIcTHlo=
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:07:05 2025 by rpki-client