Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363930.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323030363930.roa (raw, json)
Hash identifier:          9o8anlLLx1TfMy5ToIEJD0ipBQLSyLVxihHhR87FWp0=
Subject key identifier:   27:58:8C:DA:05:EC:30:8F:4F:5B:22:EA:41:E8:97:79:9B:9D:E1:72
Certificate issuer:       /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial:       2FE4A9ACD21F4D518D10C5CF9D98B06F03E63C4A
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363930.roa
Signing time:             Fri 04 Jul 2025 09:21:14 +0000
ROA not before:           Fri 04 Jul 2025 09:16:14 +0000
ROA not after:            Fri 03 Jul 2026 09:21:14 +0000
asID:                     200690
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 09:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e4:a9:ac:d2:1f:4d:51:8d:10:c5:cf:9d:98:b0:6f:03:e6:3c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
        Validity
            Not Before: Jul  4 09:16:14 2025 GMT
            Not After : Jul  3 09:21:14 2026 GMT
        Subject: CN=27588CDA05EC308F4F5B22EA41E897799B9DE172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a8:d6:d7:d9:ff:5a:4c:e7:50:49:cb:04:83:
                    d1:fd:30:7f:7b:af:db:7a:31:61:78:4e:d4:d0:62:
                    73:75:13:96:a5:30:44:f5:16:d4:6e:30:52:33:23:
                    66:78:28:18:f3:bb:9e:62:d7:8b:30:a1:51:08:a6:
                    b2:0d:9e:47:82:fd:6e:5f:b3:2b:66:37:9e:12:08:
                    0a:34:c2:c8:99:b3:cf:f2:88:48:e9:47:be:d8:63:
                    2a:74:18:71:ea:28:5d:a4:c5:90:60:8b:2c:3e:b3:
                    26:dd:f0:44:4a:c2:a8:79:62:95:1d:dd:29:51:62:
                    fc:c8:23:62:99:24:03:b2:75:a1:0e:49:86:51:92:
                    3d:6d:a2:be:e0:c9:93:b2:ed:f1:6b:53:90:d2:12:
                    7f:67:7b:24:f2:b1:89:d8:18:44:c1:7b:a8:e4:48:
                    8f:42:49:8d:ff:5c:56:24:60:de:9d:45:c7:48:fd:
                    36:ce:7f:3f:a0:02:82:15:06:1a:5a:06:04:d6:fc:
                    54:14:6a:72:7c:f4:7a:f1:26:28:9e:95:6b:d7:9e:
                    bd:b5:ae:b0:e4:d3:cb:55:af:ff:a2:5e:11:41:a4:
                    b5:28:75:37:82:64:9e:f9:10:87:c1:b6:66:51:16:
                    e1:9a:e9:da:17:c0:e9:6b:fa:af:3d:91:41:0e:6c:
                    63:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:58:8C:DA:05:EC:30:8F:4F:5B:22:EA:41:E8:97:79:9B:9D:E1:72
            X509v3 Authority Key Identifier:
                keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:44:5c:63:fa:19:08:49:61:5a:3d:79:25:a5:87:fe:00:f8:
         59:7a:3e:ec:87:17:e9:60:35:e9:0e:5f:0c:bf:1c:0b:b7:18:
         81:92:e2:27:ff:65:26:22:a2:c5:c0:7c:53:b5:a1:0a:7c:f1:
         70:18:57:2e:66:3b:41:35:fa:10:14:ca:29:da:dc:cc:2f:35:
         f5:15:d4:f8:bf:c3:74:8b:39:03:09:0c:fa:eb:73:a9:6e:3a:
         07:a3:03:89:f3:8e:5d:9f:46:8e:69:41:91:bd:d6:65:47:64:
         73:fa:8c:3c:f5:cb:ae:a6:2d:bc:42:c7:aa:27:c5:98:a3:7a:
         f4:75:40:c9:d7:31:86:d8:6f:67:7e:b4:58:50:1b:84:10:d8:
         8a:0a:e0:eb:cb:a9:55:be:2d:bb:20:86:f0:96:01:bf:62:14:
         f8:d6:75:f5:cd:38:a9:8f:c8:d2:ea:e1:30:e3:d6:40:4a:af:
         59:71:c7:97:a6:81:c1:64:00:af:d2:12:4a:fc:6a:a0:61:24:
         9b:6c:b1:17:a0:7b:66:ce:57:16:48:4e:bf:2b:9c:4c:44:10:
         f8:fd:45:8c:68:95:d4:b3:d8:01:2d:a2:af:f3:a0:fb:d9:67:
         d3:a1:f1:6f:4a:19:10:c7:ff:c6:7e:bb:3a:fc:33:7a:57:ac:
         2e:a7:88:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:02 2025 by rpki-client