Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/326130363a313238313a393030303a3a2f33362d3336203d3e20313938303136.roa
File:                     326130363a313238313a393030303a3a2f33362d3336203d3e20313938303136.roa (raw, json)
Hash identifier:          oLu7z117NCVwlvkWyPC9/0giT83Pr1XJzvMLvQVrMy0=
Subject key identifier:   E3:C4:A3:C4:E3:44:E6:AB:19:D2:E3:27:16:06:1A:61:E6:84:9A:B3
Certificate issuer:       /CN=78739F607E14E11BD03439F7A388E78EDD031A1B
Certificate serial:       7EB30A2997A057CB8A23EE78161EE78EA5510C53
Authority key identifier: 78:73:9F:60:7E:14:E1:1B:D0:34:39:F7:A3:88:E7:8E:DD:03:1A:1B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/78739F607E14E11BD03439F7A388E78EDD031A1B.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/326130363a313238313a393030303a3a2f33362d3336203d3e20313938303136.roa
Signing time:             Fri 11 Apr 2025 19:08:43 +0000
ROA not before:           Fri 11 Apr 2025 19:03:43 +0000
ROA not after:            Fri 10 Apr 2026 19:08:43 +0000
asID:                     198016
IP address blocks:        2a06:1281:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/78739F607E14E11BD03439F7A388E78EDD031A1B.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/78739F607E14E11BD03439F7A388E78EDD031A1B.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/78739F607E14E11BD03439F7A388E78EDD031A1B.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 08:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b3:0a:29:97:a0:57:cb:8a:23:ee:78:16:1e:e7:8e:a5:51:0c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78739F607E14E11BD03439F7A388E78EDD031A1B
        Validity
            Not Before: Apr 11 19:03:43 2025 GMT
            Not After : Apr 10 19:08:43 2026 GMT
        Subject: CN=E3C4A3C4E344E6AB19D2E32716061A61E6849AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4b:89:2e:65:42:bc:0b:c4:d0:73:b5:4c:2c:
                    9f:d2:df:ec:ce:58:06:41:30:9e:ea:4c:9d:64:7f:
                    ac:79:22:cd:d9:cf:69:5a:51:48:66:cc:ca:56:27:
                    38:91:74:23:e0:d4:e1:03:ce:69:95:75:96:e1:0a:
                    16:ef:89:16:1b:21:cb:69:91:37:be:83:ce:f4:34:
                    2a:b2:5e:7f:44:6b:0a:dd:e1:b5:69:e8:aa:b5:d4:
                    7d:ad:e2:be:4f:91:d4:a5:bc:86:9f:37:2f:e5:9d:
                    06:d8:9b:08:23:35:ff:f8:30:30:3c:04:d5:87:fd:
                    fd:0d:26:39:88:48:37:75:c9:07:3f:79:03:67:7a:
                    e8:ce:e8:96:79:41:87:da:55:99:e2:b8:14:a8:4f:
                    e7:d3:33:c9:2a:42:72:03:f7:b9:0e:93:3f:ab:0c:
                    ae:43:90:9c:20:3f:90:db:dd:ca:ed:23:e6:00:18:
                    1d:01:f9:06:17:97:1c:3a:0f:e7:dc:ba:f6:0d:9f:
                    b1:69:3c:9e:58:ec:39:39:43:89:44:9c:72:ef:20:
                    64:b2:b0:d6:ea:74:6b:f4:19:71:09:9f:19:3a:79:
                    34:b8:52:66:34:98:00:d0:1b:da:36:00:08:cd:f0:
                    a0:ca:ab:28:65:a9:35:a8:41:02:ee:ce:bd:1a:9f:
                    e1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C4:A3:C4:E3:44:E6:AB:19:D2:E3:27:16:06:1A:61:E6:84:9A:B3
            X509v3 Authority Key Identifier:
                keyid:78:73:9F:60:7E:14:E1:1B:D0:34:39:F7:A3:88:E7:8E:DD:03:1A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/78739F607E14E11BD03439F7A388E78EDD031A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/78739F607E14E11BD03439F7A388E78EDD031A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/326130363a313238313a393030303a3a2f33362d3336203d3e20313938303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1b:24:e7:85:dc:ed:d0:61:ac:85:6c:13:ac:bd:1b:52:18:53:
         7b:cf:bc:60:54:4d:92:03:59:f1:61:b8:1c:95:c7:bc:e7:86:
         f2:4b:02:66:ee:e2:c6:d0:4b:ef:e8:b3:4f:0a:56:a7:4e:0a:
         54:26:51:d8:39:df:c9:9f:76:1e:d7:e8:51:bb:f0:ce:51:5c:
         5e:6b:c8:19:c5:0d:9c:8b:6d:d2:16:23:f1:12:24:9c:45:f2:
         cf:af:c4:fe:fa:1a:53:11:d8:b8:c7:3d:13:87:36:ff:e7:03:
         98:3c:95:b7:25:01:21:e7:4c:18:22:a9:46:b8:61:31:25:ce:
         d5:5e:59:e5:ef:c5:c6:cc:50:3a:44:53:9c:c7:26:3e:a9:4e:
         de:15:a9:c4:56:f7:d0:27:47:bb:61:5e:d9:06:c2:4d:8d:58:
         a4:81:73:7d:28:57:f6:21:00:85:e0:df:b7:00:94:43:d8:71:
         25:08:ad:72:18:2a:cb:7f:91:65:29:a9:35:d5:b5:32:04:f3:
         d2:d2:56:09:30:4a:de:be:72:44:9b:1f:05:3c:a5:e1:8c:ba:
         bb:f7:b5:02:36:7c:11:0d:5c:b6:67:c2:ad:3f:19:5a:41:a6:
         8e:ea:2e:99:44:80:05:1d:74:f7:af:15:37:ae:5a:d0:e4:aa:
         f5:9f:e7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:12 2025 by rpki-client