Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203534363831.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203534363831.roa (raw, json)
Hash identifier:          bMoEMWZbUhh8o8GiNSTMS+w1AfR2oDgGEyyb/rEZ6fc=
Subject key identifier:   C0:1C:16:CD:1E:79:08:CA:2E:0D:8A:B7:BE:0C:32:62:09:EB:9F:A5
Certificate issuer:       /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial:       6A637E823DAE94FAAE301AECA5127391F79E5B77
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203534363831.roa
Signing time:             Mon 27 Jan 2025 12:14:14 +0000
ROA not before:           Mon 27 Jan 2025 12:09:14 +0000
ROA not after:            Mon 26 Jan 2026 12:14:14 +0000
asID:                     54681
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 18:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:63:7e:82:3d:ae:94:fa:ae:30:1a:ec:a5:12:73:91:f7:9e:5b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892843788777A43273322096510EA10880E7E5EA
        Validity
            Not Before: Jan 27 12:09:14 2025 GMT
            Not After : Jan 26 12:14:14 2026 GMT
        Subject: CN=C01C16CD1E7908CA2E0D8AB7BE0C326209EB9FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:85:3d:94:ba:50:46:9d:cb:0d:b8:45:af:82:
                    51:de:29:95:d4:2a:cc:79:07:bb:ca:2e:d2:49:ca:
                    70:99:34:6c:44:ab:bd:1a:3f:29:e1:6b:c3:b0:d1:
                    c7:3e:75:08:10:30:5f:6b:68:f9:50:da:7e:51:87:
                    3c:c6:62:fc:c6:24:31:2f:12:dc:d2:cb:10:64:e2:
                    0b:9b:1f:32:36:3b:43:42:6e:45:a2:9e:26:94:54:
                    3a:b0:9e:bf:69:4d:06:c2:7d:72:d6:03:93:8d:30:
                    3c:33:8b:7a:88:a5:9c:e3:32:3c:45:e1:67:a6:ba:
                    5c:16:18:bd:27:09:c0:f8:b4:95:82:be:14:80:e6:
                    01:aa:11:a8:db:70:fb:40:89:64:7c:b2:d8:57:73:
                    7f:d5:a8:75:6d:34:89:30:d1:db:a1:e0:47:b4:0a:
                    13:e6:8a:59:b3:d1:18:d4:cd:23:0f:ab:5f:32:f6:
                    39:2c:ba:cf:9e:42:d0:8a:8b:57:10:21:7d:e9:38:
                    0a:11:e3:30:21:6e:a0:e3:27:8a:e2:f7:c5:78:5c:
                    98:82:19:45:f1:ad:ea:70:c6:fd:1e:01:ca:a1:85:
                    33:b1:ee:95:d7:55:93:64:f5:6d:03:f6:d8:28:0b:
                    e6:d7:db:ed:4b:40:98:73:0a:81:e6:75:6e:b9:ee:
                    ad:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1C:16:CD:1E:79:08:CA:2E:0D:8A:B7:BE:0C:32:62:09:EB:9F:A5
            X509v3 Authority Key Identifier:
                keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203534363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:19:c9:aa:41:1b:a1:2a:b0:45:b3:c3:a2:75:ae:7f:9a:a8:
         ad:86:99:88:6a:f5:1a:b6:66:58:33:77:30:38:5e:a9:8e:86:
         98:21:b6:8c:99:a3:f1:26:ad:97:3f:f3:88:ee:7e:21:03:4b:
         06:af:ff:cf:87:9d:c4:30:c7:b2:c9:c4:2c:70:44:97:b5:54:
         34:19:3e:8a:6a:31:7a:af:de:3d:36:4b:ee:d2:1a:8a:7f:69:
         12:11:2d:88:99:c0:c2:e5:b1:02:0d:24:59:ed:b8:26:d5:33:
         38:40:1b:e8:a1:74:7f:63:5e:e4:79:5e:65:1b:2d:75:ca:ee:
         65:e0:10:24:4a:67:56:17:fe:5c:87:87:1a:11:47:d8:a2:9f:
         c6:58:fb:27:fd:43:05:56:2a:57:cc:4d:28:2f:50:4c:8f:58:
         72:80:26:c6:cf:1d:a1:76:4c:49:94:7e:b0:45:02:9f:74:16:
         6f:b2:f4:d2:3c:ca:20:d3:5b:74:2a:46:2b:55:ef:d6:52:1b:
         b4:b1:92:16:e0:c4:50:0b:df:60:4d:67:4c:71:03:5a:a0:7a:
         5c:be:41:63:cf:3b:01:83:8e:c9:f8:c2:96:35:dc:a3:a8:d0:
         97:62:e7:ab:e6:a4:0d:9f:0b:89:b3:db:4b:c8:8e:ab:d8:8d:
         a3:8d:35:49
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUamN+gj2ulPquMBrspRJzkfeeW3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkyODQzNzg4Nzc3QTQzMjczMzIyMDk2NTEwRUExMDg4
MEU3RTVFQTAeFw0yNTAxMjcxMjA5MTRaFw0yNjAxMjYxMjE0MTRaMDMxMTAvBgNV
BAMTKEMwMUMxNkNEMUU3OTA4Q0EyRTBEOEFCN0JFMEMzMjYyMDlFQjlGQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkhT2UulBGncsNuEWvglHeKZXU
Ksx5B7vKLtJJynCZNGxEq70aPynha8Ow0cc+dQgQMF9raPlQ2n5RhzzGYvzGJDEv
EtzSyxBk4gubHzI2O0NCbkWiniaUVDqwnr9pTQbCfXLWA5ONMDwzi3qIpZzjMjxF
4WemulwWGL0nCcD4tJWCvhSA5gGqEajbcPtAiWR8sthXc3/VqHVtNIkw0duh4Ee0
ChPmilmz0RjUzSMPq18y9jksus+eQtCKi1cQIX3pOAoR4zAhbqDjJ4ri98V4XJiC
GUXxrepwxv0eAcqhhTOx7pXXVZNk9W0D9tgoC+bX2+1LQJhzCoHmdW657q1zAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUwBwWzR55CMouDYq3vgwyYgnrn6UwHwYDVR0j
BBgwFoAUiShDeId3pDJzMiCWUQ6hCIDn5eowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvMi84OTI4NDM3ODg3
NzdBNDMyNzMzMjIwOTY1MTBFQTEwODgwRTdFNUVBLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj
YWUzZi8wLzg5Mjg0Mzc4ODc3N0E0MzI3MzMyMjA5NjUxMEVBMTA4ODBFN0U1RUEu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw
YzlmZWVjMTI0OWUvMi8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzUzNDM2MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMD/7jAN
BgkqhkiG9w0BAQsFAAOCAQEAGRnJqkEboSqwRbPDonWuf5qorYaZiGr1GrZmWDN3
MDheqY6GmCG2jJmj8Satlz/ziO5+IQNLBq//z4edxDDHssnELHBEl7VUNBk+imox
eq/ePTZL7tIain9pEhEtiJnAwuWxAg0kWe24JtUzOEAb6KF0f2Ne5HleZRstdcru
ZeAQJEpnVhf+XIeHGhFH2KKfxlj7J/1DBVYqV8xNKC9QTI9YcoAmxs8doXZMSZR+
sEUCn3QWb7L00jzKINNbdCpGK1Xv1lIbtLGSFuDEUAvfYE1nTHEDWqB6XL5BY887
AYOOyfjCljXco6jQl2Lnq+akDZ8LibPbS8iOq9iNo401SQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:52:52 2025 by rpki-client