Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          RGY238ItPF6MbTAIz/6smYWJWxRauaXh4en1QUpHZts=
Subject key identifier:   43:AF:75:0F:1A:7B:08:B3:B2:A9:E1:43:71:0C:38:45:37:FE:1A:00
Certificate issuer:       /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial:       34F73535D96A31EFF85FAA5C1C72162683F4A0D9
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa
Signing time:             Fri 04 Jul 2025 09:21:13 +0000
ROA not before:           Fri 04 Jul 2025 09:16:13 +0000
ROA not after:            Fri 03 Jul 2026 09:21:13 +0000
asID:                     57870
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 22:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f7:35:35:d9:6a:31:ef:f8:5f:aa:5c:1c:72:16:26:83:f4:a0:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
        Validity
            Not Before: Jul  4 09:16:13 2025 GMT
            Not After : Jul  3 09:21:13 2026 GMT
        Subject: CN=43AF750F1A7B08B3B2A9E143710C384537FE1A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:12:aa:1b:31:68:39:42:c3:8e:33:a0:0c:97:
                    1d:b5:9b:c0:18:0c:5b:b2:c1:06:f4:f0:40:d0:4f:
                    b7:f3:d2:3f:95:e7:49:51:37:bd:77:6e:d2:2f:ab:
                    c5:cf:72:64:af:28:c1:40:3f:6a:82:6b:89:f8:86:
                    18:97:3c:b6:fc:28:96:43:4a:4e:f7:98:c8:74:f2:
                    b5:bd:bf:0c:d1:be:34:b9:6e:e8:d2:e4:00:14:df:
                    cb:9b:95:55:87:8f:58:31:6b:08:7b:a5:fa:a1:56:
                    40:a0:ef:c9:fa:fe:1a:5c:1e:2d:0c:42:b0:36:dc:
                    93:38:25:90:cc:e0:15:c7:dc:75:27:dd:8c:bd:13:
                    78:fc:fe:52:cc:9c:6c:77:14:51:5f:89:87:02:bb:
                    50:06:9a:90:f4:9f:ad:8b:bb:28:3b:77:b9:89:80:
                    f0:d4:78:a7:2e:34:31:39:f0:b9:0f:16:8e:ad:76:
                    f5:e9:5d:1d:e2:02:48:76:4f:0f:55:61:17:64:ad:
                    86:f1:fd:aa:90:2e:02:50:2f:20:9e:98:7b:6b:8f:
                    56:8c:8a:71:b2:be:e0:12:f3:9a:ca:4f:dd:c3:15:
                    7f:76:b1:7e:c4:39:4a:3e:e0:16:24:38:3a:15:f1:
                    72:0e:c4:67:d8:83:64:ef:17:b4:50:bb:aa:15:d3:
                    a7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AF:75:0F:1A:7B:08:B3:B2:A9:E1:43:71:0C:38:45:37:FE:1A:00
            X509v3 Authority Key Identifier:
                keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:77:8c:69:7a:22:b1:22:af:5e:bb:40:7e:8c:ed:59:fa:27:
         e5:e0:af:3f:11:df:79:b4:33:19:cd:97:c6:d9:08:fc:7e:ca:
         9d:fc:9f:85:26:8c:58:8e:95:73:86:f4:53:d4:30:64:81:7e:
         1c:b7:be:d2:28:3c:95:42:71:3e:e0:b0:d7:21:3f:17:a9:c3:
         94:e0:e9:19:cc:94:b1:a9:74:36:61:cf:e6:0f:1a:ad:15:3c:
         89:a9:c2:50:aa:f1:1e:8c:6c:a8:e3:7e:b7:53:db:40:b1:7b:
         15:af:c4:40:92:c6:12:d0:dc:80:08:cc:d1:02:17:1f:8c:39:
         b8:80:a9:5f:8a:0f:bd:79:00:57:64:82:b2:42:10:47:e6:07:
         9d:cb:52:f9:c7:00:8f:50:64:07:14:f7:53:9a:65:3f:0c:26:
         46:31:64:71:00:49:8f:f8:1d:33:44:ee:7b:c6:7d:b0:0d:78:
         b8:b9:ef:86:ff:3d:7b:9e:eb:e9:b5:1a:3a:53:02:49:f8:6d:
         f3:64:c3:9e:dc:72:ff:ed:4c:54:8a:df:78:e1:dc:28:d8:b4:
         98:7c:38:e9:59:aa:ce:18:3e:1a:0d:6a:39:82:48:33:75:da:
         39:a9:3a:00:55:2d:20:ea:27:c8:98:db:3d:0c:b2:d4:74:9e:
         32:a8:73:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:13:39 2025 by rpki-client