Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363637.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323130363637.roa (raw, json)
Hash identifier:          v1fWOlJLe29JRqURNtpmNeBnbwQJ8w725Kjqqr9ME0E=
Subject key identifier:   94:D6:1E:65:21:F5:2F:78:9B:E9:88:33:DE:CA:BB:30:26:BB:93:FF
Certificate issuer:       /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial:       01BED32DD8DF40C269DD86F8B4A410F9104ED727
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363637.roa
Signing time:             Fri 04 Jul 2025 09:21:14 +0000
ROA not before:           Fri 04 Jul 2025 09:16:14 +0000
ROA not after:            Fri 03 Jul 2026 09:21:14 +0000
asID:                     210667
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Jul 2025 14:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:be:d3:2d:d8:df:40:c2:69:dd:86:f8:b4:a4:10:f9:10:4e:d7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
        Validity
            Not Before: Jul  4 09:16:14 2025 GMT
            Not After : Jul  3 09:21:14 2026 GMT
        Subject: CN=94D61E6521F52F789BE98833DECABB3026BB93FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b3:11:18:30:96:b2:60:83:cf:a2:ca:d2:9b:
                    b6:f9:20:0b:45:39:e5:82:90:c4:73:58:41:ae:12:
                    f1:8f:db:a3:4f:e4:13:45:5e:66:92:e7:39:19:b1:
                    01:a1:c7:75:2a:54:65:69:e6:a4:5f:25:74:80:11:
                    c3:0c:ba:a5:d4:71:28:1b:2c:d3:4e:d1:dd:21:0a:
                    68:c0:2e:ba:bd:14:88:98:bf:04:f8:b0:eb:b3:b9:
                    a6:dd:7a:38:b6:a9:f2:cb:0c:29:27:58:e0:ae:78:
                    16:ce:58:1e:73:18:60:0a:ac:5e:b9:6d:2e:16:65:
                    a9:70:f2:75:6a:4c:37:77:88:82:85:a0:63:1f:d9:
                    df:47:7f:07:15:65:d9:52:85:d4:af:08:4f:9c:63:
                    2f:21:d1:26:35:46:12:01:49:6c:7c:9a:27:43:46:
                    bd:17:2a:eb:e3:92:9f:f3:bc:52:a9:9e:c8:9c:35:
                    6e:9a:e1:2a:88:18:a1:cb:f6:c3:ec:77:72:8b:57:
                    28:78:9d:15:43:df:df:f2:68:5c:f7:ea:1e:93:c1:
                    bd:73:b4:da:7a:0b:a7:ff:19:f8:35:15:9b:5f:dc:
                    73:53:0c:14:ad:fa:35:95:57:c2:e1:b0:ff:a7:a7:
                    81:4b:49:e6:59:76:bc:30:d2:70:df:bc:cc:40:7e:
                    c4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D6:1E:65:21:F5:2F:78:9B:E9:88:33:DE:CA:BB:30:26:BB:93:FF
            X509v3 Authority Key Identifier:
                keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:f9:5a:73:59:bd:fb:42:85:cb:27:d9:d1:9b:ee:9b:f9:48:
         4e:f6:18:bf:65:04:d9:bc:50:d2:b2:8e:b9:09:9c:bc:2a:61:
         74:c5:4d:21:80:7f:9a:df:f4:60:2d:e3:bc:ab:22:96:ed:4a:
         a2:94:20:1d:de:e1:9b:06:87:93:f9:89:fb:6f:52:e3:ea:28:
         5f:c0:1e:a6:af:81:40:4d:2e:2c:54:65:8f:f6:34:db:77:48:
         6e:d8:9d:56:ef:02:9a:98:47:15:e9:f0:63:06:72:a1:a9:ab:
         1a:a1:48:c2:e1:30:8d:2f:10:c9:07:7c:16:90:b6:6d:96:f4:
         52:f3:b9:e3:67:a1:f3:36:c1:f5:f7:f1:66:ab:78:e1:73:fd:
         ec:36:b7:71:d1:02:f7:cd:74:87:9c:99:bc:c6:54:d5:a9:6f:
         71:99:6f:e5:3b:7a:f0:52:e5:2b:2a:35:7f:29:11:76:32:26:
         9a:7f:80:0f:d2:fd:3a:a6:f0:49:31:5c:b4:cf:b9:93:8b:ac:
         11:c8:7a:42:4e:67:25:16:96:29:be:2f:e1:99:2e:68:29:f3:
         f7:e5:62:95:99:d9:7e:07:11:ef:86:1f:ec:1c:58:53:c2:d5:
         6d:52:da:15:30:d6:f0:8a:9c:f6:d5:8d:b5:2d:36:b9:65:e2:
         2d:1a:b7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:09:53 2025 by rpki-client