Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa (raw, json)
Hash identifier:          TsWAIrg674GQJT0yOpi8B7ZqXIGLtoojNLgCNsv7hvI=
Subject key identifier:   32:73:99:21:3F:28:57:08:55:3C:C9:A7:64:94:DF:8B:06:91:3C:38
Certificate issuer:       /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial:       47D1B16B89FE0BC424EE67F2810AB30D3224E465
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa
Signing time:             Fri 04 Jul 2025 09:21:15 +0000
ROA not before:           Fri 04 Jul 2025 09:16:15 +0000
ROA not after:            Fri 03 Jul 2026 09:21:15 +0000
asID:                     60743
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d1:b1:6b:89:fe:0b:c4:24:ee:67:f2:81:0a:b3:0d:32:24:e4:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
        Validity
            Not Before: Jul  4 09:16:15 2025 GMT
            Not After : Jul  3 09:21:15 2026 GMT
        Subject: CN=327399213F285708553CC9A76494DF8B06913C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:93:d2:10:09:5a:90:3f:bb:d3:4d:4d:94:52:
                    17:ac:38:25:89:a3:f2:ee:c7:34:7a:ea:72:b6:9f:
                    e6:e0:56:b9:50:48:8e:3a:ca:b7:64:3f:b5:9a:9a:
                    28:b6:a1:de:56:79:8f:b2:eb:ea:bd:10:b8:61:2f:
                    f5:86:03:18:41:1a:bb:b6:4e:37:23:0e:aa:ed:ba:
                    90:d3:18:ce:10:83:dd:f9:06:3d:e8:6f:6a:f8:e2:
                    2e:2c:43:0d:88:f6:64:06:87:bd:6c:08:f5:13:a6:
                    9b:b0:6e:0c:de:97:a4:fb:40:58:db:cd:23:45:3e:
                    4a:7f:17:af:2c:05:71:4d:3e:c1:7d:f0:71:2f:bd:
                    a5:f7:1d:01:2b:cc:2e:fe:f5:22:ce:98:18:fa:6c:
                    5c:c5:a9:01:51:30:d8:6d:7d:5a:32:f9:02:4b:c1:
                    c8:7a:98:b6:91:92:26:71:4f:ec:21:c0:1b:ab:9a:
                    89:c9:ea:0d:9d:9f:48:e8:97:c6:63:5a:d6:ce:a4:
                    8b:93:7d:76:97:3f:64:cd:87:31:3c:04:23:bb:20:
                    4e:16:ad:50:be:f1:d7:d2:18:eb:e0:b2:73:19:cb:
                    00:4d:44:c4:30:9e:64:52:44:09:f3:ec:73:28:79:
                    19:4c:93:a9:26:18:22:69:f3:97:de:a1:39:1c:38:
                    80:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:73:99:21:3F:28:57:08:55:3C:C9:A7:64:94:DF:8B:06:91:3C:38
            X509v3 Authority Key Identifier:
                keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:b2:d9:c0:1b:5c:28:89:9c:98:62:c2:f2:5c:77:6e:28:80:
         ae:b1:51:65:98:14:c4:aa:ca:59:4b:18:1d:cd:ef:38:29:27:
         e6:51:c2:73:e2:06:8c:8d:11:c9:d4:31:6e:3c:9f:c9:00:79:
         dc:8d:8b:38:f4:aa:cb:51:da:d9:63:74:f1:fb:76:f0:b1:93:
         c5:7a:0f:8f:03:30:22:94:49:ac:87:39:de:7c:36:19:f3:44:
         46:b3:33:fb:1a:59:ab:c4:93:76:51:17:2b:b7:9d:6b:a7:bb:
         f9:b3:59:03:75:b0:53:39:03:04:76:71:78:f5:48:4a:5d:ba:
         45:04:72:c3:bf:67:d2:f5:a9:18:25:8b:f4:22:69:8a:f6:0f:
         66:a4:6d:67:5a:a9:30:d7:3e:c0:b8:a4:b4:24:b0:5d:16:eb:
         6f:6c:fc:93:e8:eb:2f:ec:f9:7a:6a:d4:e2:8b:12:a1:c1:a0:
         db:a4:82:d7:a3:48:e3:98:1c:b7:73:45:e3:c8:6c:8a:78:1b:
         2c:41:07:ca:89:29:6e:90:00:4d:5f:d6:47:2f:d6:4d:26:9f:
         48:ec:1b:a9:c0:f2:e5:93:52:88:4f:ab:07:da:28:89:b4:8b:
         f7:16:e0:ac:04:ed:3b:ab:e0:7c:7f:f5:f4:b2:63:f5:2a:10:
         d3:6d:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:57:27 2025 by rpki-client