Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363736.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          zWZm6ICUXN9IW25D+/RoUHspepc9eOIu4V0UlMEPCEg=
Subject key identifier:   25:43:82:E1:4C:20:76:AF:3F:2C:18:67:81:5A:1A:CC:5C:FC:BB:E8
Certificate issuer:       /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial:       288952993502548CABEDE2FC52929136A648E25A
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363736.roa
Signing time:             Fri 04 Jul 2025 09:21:14 +0000
ROA not before:           Fri 04 Jul 2025 09:16:14 +0000
ROA not after:            Fri 03 Jul 2026 09:21:14 +0000
asID:                     200676
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:89:52:99:35:02:54:8c:ab:ed:e2:fc:52:92:91:36:a6:48:e2:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
        Validity
            Not Before: Jul  4 09:16:14 2025 GMT
            Not After : Jul  3 09:21:14 2026 GMT
        Subject: CN=254382E14C2076AF3F2C1867815A1ACC5CFCBBE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6e:0b:83:be:aa:c7:c3:23:15:16:36:59:62:
                    7a:5d:29:86:1d:6c:80:d1:c0:50:11:54:c5:8e:6c:
                    8b:3a:e9:a5:7b:51:47:e0:c5:30:94:5b:54:05:6e:
                    f9:42:59:10:81:84:a4:00:f0:65:7c:40:c8:2c:b0:
                    70:cc:1a:1b:e2:89:00:2e:3a:44:dd:c6:94:84:b7:
                    20:ed:4e:2b:3b:10:9c:e5:b7:a0:5c:6b:67:0e:9d:
                    39:8f:ea:62:30:9e:77:14:11:b8:37:79:8e:65:c4:
                    39:f8:dd:d1:ce:b0:c9:75:29:0e:bf:b5:9c:d5:ce:
                    c6:a7:c2:fc:88:d8:f5:cd:f1:88:43:25:78:a1:35:
                    cb:ca:26:6d:ee:ba:25:04:b1:e4:03:c5:cc:04:70:
                    fc:0e:a3:30:7a:19:d2:29:be:33:0a:35:87:af:ee:
                    c2:70:92:bd:fe:b3:16:6c:6e:a2:b9:bd:c4:63:30:
                    88:55:70:5b:10:96:7f:00:74:39:37:37:d0:7f:18:
                    aa:5c:1b:05:fa:a3:77:1e:97:b6:49:f7:e0:2c:44:
                    2e:07:19:8f:26:f3:c5:3a:dd:0e:1a:d8:34:59:75:
                    a5:64:aa:47:19:9d:de:d3:9e:69:b3:89:67:0f:47:
                    c5:22:17:47:d2:c0:83:16:94:7a:cf:e9:55:33:22:
                    fa:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:43:82:E1:4C:20:76:AF:3F:2C:18:67:81:5A:1A:CC:5C:FC:BB:E8
            X509v3 Authority Key Identifier:
                keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:3a:56:3d:f6:1e:4f:5c:c0:c5:d8:f3:82:8f:ea:21:6c:24:
         1a:75:ba:43:fe:51:61:58:ca:74:6f:12:c8:e1:12:26:bf:57:
         10:30:b4:67:22:f1:eb:d7:26:d2:38:3e:bf:0d:b3:6e:41:71:
         c5:ab:38:f6:db:a8:dc:1a:6c:7e:46:0e:5c:a6:36:91:76:9a:
         d9:b8:4a:4a:72:76:ba:a6:84:ce:05:1b:29:f7:f0:57:b0:30:
         56:14:32:98:fe:fa:c2:c1:52:41:e6:1f:cf:a1:d3:d8:28:bd:
         65:aa:0d:12:ba:5f:ee:91:98:d8:f0:85:94:3b:55:b1:d6:d6:
         6a:c7:e1:c9:e3:15:d6:4d:e3:30:a8:ac:20:6c:b1:37:7f:14:
         c6:57:f6:80:c9:40:8e:e9:06:c1:5a:5e:b2:01:0a:62:f4:60:
         2b:06:fb:68:05:fd:93:98:d9:73:a1:9c:e5:3e:c2:3f:b1:f2:
         b2:20:dc:92:b0:a5:12:8f:12:1e:f2:63:d8:c3:00:ba:3a:65:
         bb:99:f3:6f:07:73:71:1f:d9:2f:84:bf:b9:db:ec:22:f2:3b:
         bf:3c:df:eb:67:dc:95:72:98:9f:2e:df:5f:26:67:ac:c2:e5:
         9b:d2:e7:8d:1d:01:34:7c:bf:3f:16:60:a5:d6:c8:72:1c:7c:
         55:96:f4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:24:50 2025 by rpki-client