Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363930.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323030363930.roa (raw, json)
Hash identifier:          DnHTQyFSSqqFT3VujNofh5fH0QWuFi7N28m7zUa+D5E=
Subject key identifier:   9B:EF:EC:7A:A8:9B:C4:C9:B4:3D:12:5A:DA:96:B4:06:94:81:9A:DE
Certificate issuer:       /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial:       74DF4BFF24F5FB3D006B0FFAF8E8C21EE377AEAE
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363930.roa
Signing time:             Mon 27 Jan 2025 12:14:13 +0000
ROA not before:           Mon 27 Jan 2025 12:09:13 +0000
ROA not after:            Mon 26 Jan 2026 12:14:13 +0000
asID:                     200690
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 18:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:df:4b:ff:24:f5:fb:3d:00:6b:0f:fa:f8:e8:c2:1e:e3:77:ae:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892843788777A43273322096510EA10880E7E5EA
        Validity
            Not Before: Jan 27 12:09:13 2025 GMT
            Not After : Jan 26 12:14:13 2026 GMT
        Subject: CN=9BEFEC7AA89BC4C9B43D125ADA96B40694819ADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:af:be:7d:91:e0:d8:be:5c:97:03:81:af:8a:
                    12:7f:6b:62:50:dd:c7:c0:66:44:87:24:24:da:cd:
                    23:ac:c1:67:70:df:d3:21:9c:90:d7:4b:70:6a:82:
                    9a:de:99:0a:55:1c:41:4a:f0:bf:bf:50:a9:6e:e5:
                    fa:85:0c:fe:76:96:b9:14:3f:5e:c5:da:c2:af:e4:
                    ae:9a:84:34:c9:85:99:90:47:fb:fd:79:38:f7:1f:
                    8b:22:f3:f2:68:8a:b9:0d:52:2e:c0:4c:63:f5:5d:
                    db:68:99:00:83:a8:93:65:78:b0:84:f6:70:eb:e3:
                    31:c2:85:3e:ad:ba:45:81:89:ff:4a:bd:a6:12:88:
                    55:e1:5d:d9:42:50:2d:db:75:40:71:ad:51:41:2a:
                    01:bf:19:9c:30:3b:1f:e2:c3:a9:ad:51:ff:c3:ef:
                    06:e7:fd:db:69:c8:70:32:10:17:7e:b8:ea:62:d3:
                    9d:53:6b:bc:29:76:f2:6b:f9:38:9f:62:2d:21:1d:
                    c9:e6:87:be:ca:8e:5e:88:29:72:d1:4e:18:4e:98:
                    a2:c0:34:11:62:0b:10:f6:b2:5e:d2:65:6d:95:d1:
                    25:6a:d7:18:cb:72:cd:47:3f:92:2b:6b:0b:df:a1:
                    69:e1:c2:91:1c:f6:f2:93:51:35:41:0c:1e:a2:3b:
                    89:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:EF:EC:7A:A8:9B:C4:C9:B4:3D:12:5A:DA:96:B4:06:94:81:9A:DE
            X509v3 Authority Key Identifier:
                keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:46:b0:61:09:c9:ce:06:16:32:c2:1f:b0:61:29:88:b6:1c:
         a7:a4:48:d6:54:3c:ad:29:c5:fb:a1:d5:bd:d5:7c:8e:87:34:
         9c:39:90:4c:54:ad:6c:5d:43:a7:60:11:dd:ab:2f:94:70:bc:
         5b:4e:21:9e:f8:c9:84:08:02:86:3d:9c:00:fb:23:b3:88:3a:
         93:ae:86:24:99:89:78:b0:7a:47:fc:6e:c4:cd:e7:e8:a6:8e:
         cf:e5:4a:38:cb:62:e0:1f:33:29:8d:4b:03:43:cb:36:a4:44:
         2f:9d:9b:e1:d6:de:cb:6e:95:ef:92:82:7c:16:d1:f2:b4:0d:
         a8:9c:82:87:9f:05:3e:6f:ea:a5:40:a6:d3:1e:37:ab:61:9a:
         f2:22:6f:8b:6b:5d:7f:ea:2d:65:3c:8e:e0:60:e7:d9:2c:9c:
         ab:a6:dd:c3:3c:b9:d3:27:3f:83:80:40:a9:17:05:54:09:33:
         99:66:9a:45:38:69:56:ce:23:41:5c:ad:8f:cf:78:5c:a9:df:
         a4:d7:5c:84:5e:1d:a2:ed:2e:b4:a5:9b:0a:f0:e4:ad:8c:7b:
         1a:46:72:60:7f:4a:e5:4b:8a:f8:8f:2a:ef:c0:c7:eb:05:89:
         4e:54:b7:0f:40:44:3b:9f:8a:b0:71:22:75:a5:ba:63:25:82:
         df:92:9a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:16:51 2025 by rpki-client