Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa (raw, json)
Hash identifier:          dWKp9ZT9cC+C0ZHdEBjSnEIXtZUkv9OBKf4qPbhvIhk=
Subject key identifier:   1A:09:D0:C2:4A:A3:B8:23:D8:C2:AB:FF:FE:33:75:9D:E4:DA:43:D2
Certificate issuer:       /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial:       13DD7063D33FE362DC99DC3D8475AAB6A62E5D95
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa
Signing time:             Mon 27 Jan 2025 12:14:13 +0000
ROA not before:           Mon 27 Jan 2025 12:09:13 +0000
ROA not after:            Mon 26 Jan 2026 12:14:13 +0000
asID:                     200454
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Apr 2025 21:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:dd:70:63:d3:3f:e3:62:dc:99:dc:3d:84:75:aa:b6:a6:2e:5d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892843788777A43273322096510EA10880E7E5EA
        Validity
            Not Before: Jan 27 12:09:13 2025 GMT
            Not After : Jan 26 12:14:13 2026 GMT
        Subject: CN=1A09D0C24AA3B823D8C2ABFFFE33759DE4DA43D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:84:12:8e:4d:39:75:05:ea:df:1f:9b:e8:48:
                    29:15:28:4d:ee:d0:2f:64:e0:61:27:16:33:3c:c2:
                    33:d0:3c:92:5d:be:f5:ad:48:55:b0:2a:55:1a:aa:
                    cc:4b:17:4d:17:20:c2:d0:15:ca:87:2d:9d:29:03:
                    94:b6:18:59:1b:06:d2:cb:0e:c6:8a:10:ab:b6:14:
                    bb:07:8e:d4:f6:68:bb:2c:16:3d:67:ce:04:af:6d:
                    c0:2b:42:9f:24:c9:4e:16:f5:3b:0d:38:3a:f4:28:
                    c7:47:7a:be:e6:a8:f1:c3:45:45:90:bf:f1:d5:d9:
                    e4:a9:52:1e:b2:32:2c:cc:88:ad:70:26:83:e2:f4:
                    9b:d6:45:41:13:d5:cb:ea:12:b1:a6:31:24:5f:38:
                    b7:e7:38:9d:f5:35:7e:94:ce:cd:c7:0e:43:47:ab:
                    88:c0:70:22:b4:23:f6:7a:22:de:a8:e1:ea:72:34:
                    0a:22:77:87:1a:da:e5:0a:bd:50:87:26:d8:20:68:
                    a7:a1:f1:35:4c:d8:de:1a:54:cc:9e:7c:25:05:77:
                    57:02:e0:39:f9:3b:d8:75:fb:fa:11:46:3b:f8:eb:
                    69:f9:64:72:49:bb:d0:7d:83:fc:21:ae:4a:5d:bf:
                    50:c6:0c:46:f6:26:ae:a3:75:5f:e6:48:28:68:58:
                    98:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:09:D0:C2:4A:A3:B8:23:D8:C2:AB:FF:FE:33:75:9D:E4:DA:43:D2
            X509v3 Authority Key Identifier:
                keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:37:70:3b:c7:bf:a0:ee:62:c1:a5:8d:17:ec:6a:ec:5e:85:
         42:39:e5:b1:a0:ad:96:9e:1a:84:4b:19:27:32:ae:db:2c:df:
         7f:a3:d9:ce:a0:b4:e6:21:cd:e0:57:84:7f:c7:84:c1:67:63:
         e3:04:ae:50:f9:17:45:0e:9e:c0:4b:cf:75:3b:15:a5:48:9a:
         cf:2d:3d:32:02:f2:6b:8a:74:bc:1d:5e:a1:c4:2b:30:41:65:
         a2:24:fd:fe:99:31:64:eb:a2:99:44:c4:b9:9d:51:5f:4c:e1:
         a2:f5:68:0b:dd:98:3e:cc:4c:ef:ef:87:28:e1:dd:f0:52:04:
         65:26:9d:e4:cb:f1:ae:84:8c:d8:0b:3f:31:2e:22:2e:c1:5e:
         e0:2a:6e:61:16:16:4a:06:5f:bc:91:f3:02:ad:f1:f1:10:8a:
         3e:7e:36:ce:36:60:56:12:c4:69:3e:30:26:bf:66:d9:3e:5a:
         d7:41:03:de:6c:3e:3b:fe:7f:84:f9:bf:a1:18:77:99:cd:08:
         61:43:56:b2:15:41:b5:4c:9a:44:ae:2b:06:3a:8a:c0:85:28:
         68:6f:2e:37:04:29:7b:7b:25:3b:ff:96:66:0f:0b:e9:2e:41:
         31:0d:69:5d:ba:9c:ae:ac:9d:49:56:e8:32:74:10:7b:a3:65:
         70:55:15:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:19:46 2025 by rpki-client