Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/12/326130353a646663363a3a2f33322d3438203d3e2037373139.roa
File:                     326130353a646663363a3a2f33322d3438203d3e2037373139.roa (raw, json)
Hash identifier:          X5SsGEnxgqdgl7uHuRc3Miz9Sj1Fjoka0XuB/37jo18=
Subject key identifier:   32:DD:8B:76:FC:1B:E0:7F:C2:DE:3A:A9:8F:88:13:A1:55:92:67:BA
Certificate issuer:       /CN=89ABDCD8A98A23AF2521330777C439C50B83C0E3
Certificate serial:       2A12E66F6BBBD8007184FF36283777605DCCE256
Authority key identifier: 89:AB:DC:D8:A9:8A:23:AF:25:21:33:07:77:C4:39:C5:0B:83:C0:E3
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/89ABDCD8A98A23AF2521330777C439C50B83C0E3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/12/326130353a646663363a3a2f33322d3438203d3e2037373139.roa
Signing time:             Wed 16 Jul 2025 22:43:46 +0000
ROA not before:           Wed 16 Jul 2025 22:38:46 +0000
ROA not after:            Wed 15 Jul 2026 22:43:46 +0000
asID:                     7719
IP address blocks:        2a05:dfc6::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/12/89ABDCD8A98A23AF2521330777C439C50B83C0E3.crl
                          rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/12/89ABDCD8A98A23AF2521330777C439C50B83C0E3.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/89ABDCD8A98A23AF2521330777C439C50B83C0E3.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:12:e6:6f:6b:bb:d8:00:71:84:ff:36:28:37:77:60:5d:cc:e2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ABDCD8A98A23AF2521330777C439C50B83C0E3
        Validity
            Not Before: Jul 16 22:38:46 2025 GMT
            Not After : Jul 15 22:43:46 2026 GMT
        Subject: CN=32DD8B76FC1BE07FC2DE3AA98F8813A1559267BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:52:24:ea:cb:fa:5c:57:c4:a3:50:5c:ff:
                    b7:a4:ac:b0:4b:92:7f:27:09:32:0e:2e:2d:80:78:
                    74:36:db:5a:b5:12:be:41:83:55:06:0b:c9:54:f0:
                    c2:1e:a7:6f:b3:12:6b:df:47:27:ba:be:51:9b:6f:
                    18:b9:8f:ce:26:da:94:78:a1:e7:0f:b7:02:8d:0f:
                    5b:8b:71:4e:1e:aa:e6:45:ea:e1:c8:18:08:ed:f5:
                    c7:61:b1:25:f0:bc:b5:25:a2:8e:c6:ef:f5:81:35:
                    18:df:0d:13:a3:de:e2:cb:f7:e6:ec:c0:4c:c7:51:
                    47:56:f1:2a:21:26:44:69:40:56:23:a4:70:1a:7c:
                    00:da:6b:9c:a4:30:54:76:6a:0d:fa:e3:b5:83:35:
                    2e:3e:4b:b9:b6:78:84:a9:c4:9a:85:48:59:28:a5:
                    c6:36:c2:f8:34:7c:41:41:96:4d:16:83:1c:e6:61:
                    12:c4:2f:bd:cb:d6:00:e0:55:bd:09:53:ba:4d:53:
                    49:15:e4:17:d3:9e:10:88:6a:c4:78:ef:2b:b0:0d:
                    55:4e:05:8f:f3:79:7d:75:20:06:d1:2c:3b:70:cb:
                    03:92:3e:0b:20:4d:60:6a:55:d0:96:98:53:08:6c:
                    2c:d5:cf:e7:4d:52:f6:c7:83:77:be:15:6e:8b:ff:
                    a2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DD:8B:76:FC:1B:E0:7F:C2:DE:3A:A9:8F:88:13:A1:55:92:67:BA
            X509v3 Authority Key Identifier:
                keyid:89:AB:DC:D8:A9:8A:23:AF:25:21:33:07:77:C4:39:C5:0B:83:C0:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/12/89ABDCD8A98A23AF2521330777C439C50B83C0E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/89ABDCD8A98A23AF2521330777C439C50B83C0E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/12/326130353a646663363a3a2f33322d3438203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:8c:20:73:d6:34:b2:6d:4e:ee:9b:08:fa:5f:51:f1:d6:21:
         85:00:d6:bc:52:41:1e:87:ae:7b:e5:b4:5c:95:90:94:c4:87:
         98:f1:64:1b:13:7b:c4:5c:fe:35:a2:77:38:28:2f:aa:78:bc:
         c2:c2:3c:9a:a2:3b:b9:ab:fa:7d:9d:34:20:63:a6:cb:0f:5a:
         a7:8c:2e:30:55:f7:56:c3:94:84:a0:a3:bd:00:a4:d6:98:64:
         48:dc:72:7f:d3:be:eb:c4:63:9e:ce:62:40:a3:69:3a:a9:92:
         6b:ba:4c:0b:bc:82:ec:17:3b:51:86:b4:ee:9a:e2:1d:d3:1e:
         fe:63:1a:ae:55:aa:ad:94:94:a0:11:b2:1b:a6:04:3c:96:e0:
         e8:d5:2b:f2:22:28:a4:1c:0b:45:e1:3b:39:59:d6:7f:3c:2b:
         cb:ad:16:af:ff:7b:25:fc:0c:7d:d7:5f:ec:bb:eb:c6:a6:ed:
         09:55:6c:9e:87:a3:0b:1d:a5:34:77:00:e2:5d:2f:2a:c9:88:
         a2:f6:f2:8a:1f:30:f2:18:fb:84:73:18:e8:cd:85:a0:bc:3d:
         62:b6:44:48:db:95:3e:6a:36:a0:15:15:c7:65:20:14:41:28:
         ec:da:6b:4f:64:ae:19:61:84:8c:d7:14:2b:c2:45:b5:c9:a1:
         4d:8c:59:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:59:19 2025 by rpki-client