Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/326130373a353463313a646561643a3a2f34382d3438203d3e203534313438.roa
File:                     326130373a353463313a646561643a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          01hzGhqxX8J7RD/NhWRTdMVnjXuMEtdOzo2hGS7RyZc=
Subject key identifier:   BE:31:85:AB:2F:45:9E:63:E6:BD:F9:34:8E:BF:65:A0:DE:89:2E:D2
Certificate issuer:       /CN=EDEA491E366952BB35E14C57B2C7DC604C2908C1
Certificate serial:       626A23B0E14B9FA43B5EECB884E396C026F20F5A
Authority key identifier: ED:EA:49:1E:36:69:52:BB:35:E1:4C:57:B2:C7:DC:60:4C:29:08:C1
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/326130373a353463313a646561643a3a2f34382d3438203d3e203534313438.roa
Signing time:             Sat 05 Jul 2025 10:45:02 +0000
ROA not before:           Sat 05 Jul 2025 10:40:02 +0000
ROA not after:            Sat 04 Jul 2026 10:45:02 +0000
asID:                     54148
IP address blocks:        2a07:54c1:dead::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 16:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6a:23:b0:e1:4b:9f:a4:3b:5e:ec:b8:84:e3:96:c0:26:f2:0f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDEA491E366952BB35E14C57B2C7DC604C2908C1
        Validity
            Not Before: Jul  5 10:40:02 2025 GMT
            Not After : Jul  4 10:45:02 2026 GMT
        Subject: CN=BE3185AB2F459E63E6BDF9348EBF65A0DE892ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fb:4a:75:69:3c:94:2d:de:d2:d0:6e:33:59:
                    82:6b:81:33:3f:2c:4d:47:da:cc:05:8e:ce:ce:a6:
                    a2:4f:8a:d2:2b:9f:2b:a0:1c:23:54:fe:5f:71:27:
                    ae:8f:39:d1:b3:ee:d6:0e:6d:67:70:4d:22:4b:6d:
                    c2:49:ca:f9:b7:fa:81:1a:d2:d4:0b:2e:d6:2f:08:
                    87:f9:42:c0:13:cf:78:2f:7c:2e:0b:a3:96:ce:b3:
                    fa:91:ac:0b:35:b1:38:d1:47:1a:8a:78:ac:8e:82:
                    7a:73:c8:bd:a2:95:e4:a9:43:2b:40:11:95:36:31:
                    50:61:9d:6c:45:3b:2a:98:84:04:bf:db:d8:81:70:
                    f3:e0:08:97:77:be:c1:23:c7:ea:ce:97:95:56:4c:
                    06:06:4e:0e:aa:16:25:02:0b:fb:4f:66:8f:65:bf:
                    72:c7:95:d8:d8:a0:fe:dc:1e:d0:10:b3:7f:e2:b3:
                    d8:c1:5c:f0:b4:9a:2d:e7:2e:8f:bb:e5:62:46:f2:
                    19:7e:8b:07:a7:b6:ed:24:7c:2c:3c:60:94:86:b2:
                    00:74:d1:c3:0a:02:4b:3c:c1:1f:cd:30:6a:fb:f5:
                    b1:ba:4d:be:d8:3a:4b:ca:07:5d:0d:eb:dc:73:67:
                    c2:dc:6d:24:9a:23:f3:e9:e7:28:4f:5d:5e:73:e6:
                    12:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:31:85:AB:2F:45:9E:63:E6:BD:F9:34:8E:BF:65:A0:DE:89:2E:D2
            X509v3 Authority Key Identifier:
                keyid:ED:EA:49:1E:36:69:52:BB:35:E1:4C:57:B2:C7:DC:60:4C:29:08:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/326130373a353463313a646561643a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:dead::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:c0:43:2b:84:04:82:f1:9d:9f:b0:ab:a0:70:8e:77:71:19:
         12:ef:99:e2:96:d8:ba:54:57:a4:90:21:86:d1:b9:fe:f7:2c:
         c4:b6:bf:2c:69:80:c1:f7:65:39:a2:50:f9:c8:4a:64:9a:11:
         ea:4a:88:e9:7b:7e:95:52:10:b7:8f:7e:7b:24:bf:21:e3:05:
         37:7b:dc:7e:13:a5:e3:09:82:6c:2a:74:b1:21:82:24:bc:7a:
         8c:72:b3:a0:05:f7:f7:91:a3:84:af:7a:3a:52:f7:c2:15:98:
         c9:94:e1:95:e3:a1:1c:7f:1c:16:8b:40:7b:c5:27:d6:8c:70:
         10:e5:69:2a:5d:a2:74:da:c7:7d:86:4e:bd:ab:b7:79:90:da:
         45:7e:57:4b:eb:01:d2:9c:78:9e:26:2b:9d:c7:7f:59:97:01:
         16:e3:7e:b7:c9:a0:47:76:fa:77:ed:02:d8:e1:81:77:c3:16:
         a8:81:13:75:4a:83:04:56:12:2a:c3:3f:e3:a5:da:80:4b:97:
         b3:bb:b7:d9:6e:6f:6d:0b:2c:dd:7e:5e:ef:d1:bf:f7:e8:53:
         73:b5:29:71:4e:e8:03:31:6c:1c:c2:8e:8a:6a:b5:86:c5:30:
         b7:04:9a:e3:2e:9e:fe:66:19:8c:e0:35:4a:07:89:3e:8b:c3:
         61:54:11:7c
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUYmojsOFLn6Q7Xuy4hOOWwCbyD1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURFQTQ5MUUzNjY5NTJCQjM1RTE0QzU3QjJDN0RDNjA0
QzI5MDhDMTAeFw0yNTA3MDUxMDQwMDJaFw0yNjA3MDQxMDQ1MDJaMDMxMTAvBgNV
BAMTKEJFMzE4NUFCMkY0NTlFNjNFNkJERjkzNDhFQkY2NUEwREU4OTJFRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG+0p1aTyULd7S0G4zWYJrgTM/
LE1H2swFjs7OpqJPitIrnyugHCNU/l9xJ66POdGz7tYObWdwTSJLbcJJyvm3+oEa
0tQLLtYvCIf5QsATz3gvfC4Lo5bOs/qRrAs1sTjRRxqKeKyOgnpzyL2ileSpQytA
EZU2MVBhnWxFOyqYhAS/29iBcPPgCJd3vsEjx+rOl5VWTAYGTg6qFiUCC/tPZo9l
v3LHldjYoP7cHtAQs3/is9jBXPC0mi3nLo+75WJG8hl+iwentu0kfCw8YJSGsgB0
0cMKAks8wR/NMGr79bG6Tb7YOkvKB10N69xzZ8LcbSSaI/Pp5yhPXV5z5hIvAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUvjGFqy9FnmPmvfk0jr9loN6JLtIwHwYDVR0j
BBgwFoAU7epJHjZpUrs14UxXssfcYEwpCMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU5MWZiNDNiNDAxOTJiYWNiN2FiYjdhMjgvNC9FREVBNDkxRTM2
Njk1MkJCMzVFMTRDNTdCMkM3REM2MDRDMjkwOEMxLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj
YWUzZi80L0VERUE0OTFFMzY2OTUyQkIzNUUxNEM1N0IyQzdEQzYwNEMyOTA4QzEu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU5MWZiNDNiNDAxOTJi
YWNiN2FiYjdhMjgvNC8zMjYxMzAzNzNhMzUzNDYzMzEzYTY0NjU2MTY0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzUzNDMxMzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMHerTAN
BgkqhkiG9w0BAQsFAAOCAQEAO8BDK4QEgvGdn7CroHCOd3EZEu+Z4pbYulRXpJAh
htG5/vcsxLa/LGmAwfdlOaJQ+chKZJoR6kqI6Xt+lVIQt49+eyS/IeMFN3vcfhOl
4wmCbCp0sSGCJLx6jHKzoAX395GjhK96OlL3whWYyZThleOhHH8cFotAe8Un1oxw
EOVpKl2idNrHfYZOvau3eZDaRX5XS+sB0px4niYrncd/WZcBFuN+t8mgR3b6d+0C
2OGBd8MWqIETdUqDBFYSKsM/46XagEuXs7u32W5vbQss3X5e79G/9+hTc7UpcU7o
AzFsHMKOimq1hsUwtwSa4y6e/mYZjOA1SgeJPovDYVQRfA==
-----END CERTIFICATE-----
Generated at Wed Jul 23 06:08:07 2025 by rpki-client