Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa (raw, json)
Hash identifier:          EB3ApEr2o85R7aHVO5SjxQcIMDp14X4FBH6JjhHeQwI=
Subject key identifier:   76:DE:44:96:2D:71:31:DD:FC:19:09:5B:F5:AE:9D:90:F5:C4:37:9C
Certificate issuer:       /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial:       340B3384F72E598D65C41B1C33B106C4328220AB
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa
Signing time:             Fri 04 Jul 2025 09:21:13 +0000
ROA not before:           Fri 04 Jul 2025 09:16:13 +0000
ROA not after:            Fri 03 Jul 2026 09:21:13 +0000
asID:                     211380
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 05:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0b:33:84:f7:2e:59:8d:65:c4:1b:1c:33:b1:06:c4:32:82:20:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
        Validity
            Not Before: Jul  4 09:16:13 2025 GMT
            Not After : Jul  3 09:21:13 2026 GMT
        Subject: CN=76DE44962D7131DDFC19095BF5AE9D90F5C4379C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:78:74:3b:86:e4:db:e4:74:0f:06:c7:07:
                    97:96:29:7a:2a:91:87:51:2b:c2:c0:9b:55:14:45:
                    e8:a9:5a:3b:e3:7e:b6:57:b8:f0:60:1b:67:2f:17:
                    82:55:24:0c:f8:2c:41:ae:2d:3b:65:64:04:25:ab:
                    31:45:ca:72:b9:09:d1:52:f8:6d:c4:85:92:66:2c:
                    83:b6:91:fb:b2:04:7e:0d:dd:a7:88:76:2d:3d:f5:
                    96:aa:84:fd:c7:43:8e:c0:22:6a:be:08:34:e8:48:
                    57:87:2f:38:a4:fd:a5:3e:74:85:bd:b5:82:55:1e:
                    86:70:74:6f:33:f8:d4:77:f7:5d:25:e1:95:8b:4c:
                    b3:ec:d2:55:b4:c6:ae:12:29:12:2c:e0:61:fe:a7:
                    e9:5a:a3:7f:15:1f:28:df:8a:b5:58:cd:82:e4:26:
                    81:26:c0:ce:f1:54:f6:9f:b8:ce:9e:ca:d2:ee:f2:
                    5a:c5:a2:b8:3f:f4:db:2d:8e:5c:58:4f:27:2a:59:
                    fd:4e:ba:ee:66:5d:f4:7e:7b:6e:4c:bf:49:97:90:
                    45:b6:fa:2f:04:a9:40:21:60:54:7d:d4:1c:40:5a:
                    75:b0:0d:22:1f:a8:c5:35:f1:68:e3:38:82:27:21:
                    29:8b:91:3a:6b:d3:43:2b:8e:50:0d:ac:4e:cc:5c:
                    76:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DE:44:96:2D:71:31:DD:FC:19:09:5B:F5:AE:9D:90:F5:C4:37:9C
            X509v3 Authority Key Identifier:
                keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:6c:81:62:48:1f:cc:53:4e:a7:90:e0:af:d3:ba:28:e4:83:
         11:68:1d:4c:e0:d8:9b:a0:64:9e:2a:fa:e6:a7:57:81:00:86:
         49:27:ab:fc:3e:51:19:58:4b:a4:1e:57:35:fb:ce:ed:ab:56:
         e0:48:53:d3:ff:7e:39:96:bd:4d:82:2e:29:85:51:32:51:8a:
         b2:cb:35:1c:b2:a4:91:f4:aa:60:06:d3:08:75:37:0c:4d:c1:
         25:fb:65:15:9b:c8:8f:3a:b8:c2:38:47:46:be:a8:58:85:87:
         ba:5f:ba:b6:3d:1d:73:65:d9:a5:d1:a8:e8:14:46:3e:ce:a5:
         43:4a:1c:99:91:da:90:bc:9b:2b:78:e8:b1:1d:85:eb:04:09:
         9a:48:ab:68:b8:5f:fd:1f:d2:ca:36:8a:a9:81:d2:e9:58:ac:
         5e:35:93:48:9f:41:b3:c3:50:9f:8f:b5:33:16:4f:2d:eb:73:
         d0:cd:65:e6:2e:ed:ab:c1:8b:b7:6d:45:68:02:a1:62:e9:8b:
         70:1f:34:77:56:b6:9c:70:58:db:c7:f7:b6:a8:75:64:21:b2:
         da:25:14:20:14:f1:55:dc:3d:20:c0:89:3a:a7:72:a4:70:e1:
         6c:e1:35:41:b7:d6:67:59:5c:e4:2a:08:33:7b:e9:f2:8a:8d:
         fe:9e:84:0d
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUNAszhPcuWY1lxBscM7EGxDKCIKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg5NzNDMzlBMUVENDNCMTBERkFCRDZFQkNEQjZCNDgx
MEJFRDQxRDAeFw0yNTA3MDQwOTE2MTNaFw0yNjA3MDMwOTIxMTNaMDMxMTAvBgNV
BAMTKDc2REU0NDk2MkQ3MTMxRERGQzE5MDk1QkY1QUU5RDkwRjVDNDM3OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKn3h0O4bk2+R0DwbHB5eWKXoq
kYdRK8LAm1UUReipWjvjfrZXuPBgG2cvF4JVJAz4LEGuLTtlZAQlqzFFynK5CdFS
+G3EhZJmLIO2kfuyBH4N3aeIdi099ZaqhP3HQ47AImq+CDToSFeHLzik/aU+dIW9
tYJVHoZwdG8z+NR3910l4ZWLTLPs0lW0xq4SKRIs4GH+p+lao38VHyjfirVYzYLk
JoEmwM7xVPafuM6eytLu8lrForg/9NstjlxYTycqWf1Ouu5mXfR+e25Mv0mXkEW2
+i8EqUAhYFR91BxAWnWwDSIfqMU18WjjOIInISmLkTpr00MrjlANrE7MXHYBAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUdt5Eli1xMd38GQlb9a6dkPXEN5wwHwYDVR0j
BBgwFoAUiJc8OaHtQ7EN+r1uvNtrSBC+1B0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvNS84ODk3M0MzOUEx
RUQ0M0IxMERGQUJENkVCQ0RCNkI0ODEwQkVENDFELmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj
YWUzZi80Lzg4OTczQzM5QTFFRDQzQjEwREZBQkQ2RUJDREI2QjQ4MTBCRUQ0MUQu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw
YzlmZWVjMTI0OWUvNS8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzIzMTMxMzMzODMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwP/u
MA0GCSqGSIb3DQEBCwUAA4IBAQBQbIFiSB/MU06nkOCv07oo5IMRaB1M4NiboGSe
Kvrmp1eBAIZJJ6v8PlEZWEukHlc1+87tq1bgSFPT/345lr1Ngi4phVEyUYqyyzUc
sqSR9KpgBtMIdTcMTcEl+2UVm8iPOrjCOEdGvqhYhYe6X7q2PR1zZdml0ajoFEY+
zqVDShyZkdqQvJsreOixHYXrBAmaSKtouF/9H9LKNoqpgdLpWKxeNZNIn0Gzw1Cf
j7UzFk8t63PQzWXmLu2rwYu3bUVoAqFi6YtwHzR3VraccFjbx/e2qHVkIbLaJRQg
FPFV3D0gwIk6p3KkcOFs4TVBt9ZnWVzkKggze+nyio3+noQN
-----END CERTIFICATE-----
Generated at Tue Jul 22 19:18:15 2025 by rpki-client