Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa (raw, json)
Hash identifier:          IqrBLwaB6Ud6y8cUbAdAosH8szEn0KkX5WONAY4aEDc=
Subject key identifier:   D0:42:E8:D9:14:F1:D1:25:ED:31:4D:A4:E7:0E:A2:F5:84:6B:C9:AC
Certificate issuer:       /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial:       4272B206A21ECF7CE690FB61AC366DD3D48D3A62
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa
Signing time:             Fri 04 Jul 2025 09:21:14 +0000
ROA not before:           Fri 04 Jul 2025 09:16:14 +0000
ROA not after:            Fri 03 Jul 2026 09:21:14 +0000
asID:                     59993
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:72:b2:06:a2:1e:cf:7c:e6:90:fb:61:ac:36:6d:d3:d4:8d:3a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
        Validity
            Not Before: Jul  4 09:16:14 2025 GMT
            Not After : Jul  3 09:21:14 2026 GMT
        Subject: CN=D042E8D914F1D125ED314DA4E70EA2F5846BC9AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2a:8a:6a:74:a2:d5:7a:8c:6e:27:38:1a:83:
                    56:40:f6:8c:8b:72:f8:e7:e3:b2:47:b6:3e:33:b1:
                    8a:68:b8:25:19:94:c1:f1:84:f0:e4:26:b6:94:54:
                    77:6a:57:2b:1c:a4:3a:72:ba:bf:25:29:49:ed:ea:
                    2e:9f:14:85:70:e6:f1:5e:8f:9b:33:8d:cb:65:5f:
                    85:fb:ae:c0:43:c4:63:cd:09:97:2e:c0:50:b2:5d:
                    20:5f:26:69:e1:9d:f0:5c:3c:8b:d8:0e:90:db:f9:
                    88:5b:c3:f6:2e:32:b0:2b:61:c4:f6:9e:ce:4d:aa:
                    e8:3e:65:9b:7d:f3:0e:0b:00:79:ab:04:d8:b8:88:
                    8f:6b:86:1a:69:1e:a6:50:7e:a2:26:7c:c2:4c:f4:
                    d8:3c:4b:17:88:ea:15:9e:4a:fb:22:04:39:2d:8a:
                    8b:b5:91:82:b6:e0:f9:1a:9e:67:45:26:84:03:20:
                    6c:f2:d1:6d:73:c9:ed:57:eb:8a:b5:03:14:0e:ca:
                    68:71:7f:c3:85:74:0c:92:c5:70:56:46:ca:54:57:
                    53:2a:29:64:b7:7f:68:fd:c7:1b:c1:e5:f0:a1:52:
                    bd:69:1e:c7:f9:0e:0a:56:66:8c:01:b2:86:87:13:
                    13:90:1e:bc:25:17:35:cd:39:9c:32:f0:ad:6c:2e:
                    f1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:42:E8:D9:14:F1:D1:25:ED:31:4D:A4:E7:0E:A2:F5:84:6B:C9:AC
            X509v3 Authority Key Identifier:
                keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:fd:57:34:29:ab:2b:0b:04:5c:70:ff:dc:ea:76:18:d5:c1:
         82:9f:22:17:10:57:72:af:24:8a:aa:a1:16:b6:00:b7:69:c5:
         53:f8:be:45:6e:a2:74:63:ff:71:bb:db:02:f8:0b:28:d9:0c:
         95:64:a8:77:3a:31:2e:f2:5f:be:16:89:ac:f1:e9:f2:5a:42:
         0e:44:1d:f6:dd:64:4c:3c:9f:d6:2d:63:d6:d5:c4:ee:63:f2:
         76:f6:48:0f:1c:6c:d1:a7:94:fa:e2:58:33:8d:3a:17:31:21:
         ed:f4:4b:b3:7d:b6:7c:82:da:1b:24:5c:f6:bd:07:ba:d9:d0:
         40:62:d5:2d:4a:a4:ae:bf:24:6c:fb:18:a7:2d:3e:9a:20:10:
         12:ae:cf:81:ce:09:c9:5f:0b:78:15:79:cf:d9:f1:9a:7c:eb:
         87:9c:f1:ee:13:6c:72:94:c2:61:ae:1b:4a:fc:4a:5a:2e:a1:
         df:02:ca:e8:48:bd:b6:19:63:fb:8c:98:43:15:96:f9:1f:26:
         f5:2d:5c:f7:70:47:02:6d:71:75:3b:ae:89:de:70:d0:24:cc:
         5c:3e:f2:fe:15:a1:70:11:7d:bb:43:3e:99:20:e0:50:3e:f6:
         35:67:fe:af:43:be:6e:42:0a:aa:74:ce:cd:84:a8:2d:08:6d:
         9f:b9:3a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:02:36 2025 by rpki-client