Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          6GVyeI0YXLgBafv5D9XfdBqNLw/0vImavNqOgmZsyfg=
Subject key identifier:   66:3A:BF:7E:30:5F:6B:01:DD:76:4C:E1:66:BC:E9:C8:CA:4E:E6:44
Certificate issuer:       /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial:       4AF9479FC5D2F28C4DFA812C6B14A383930242A8
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa
Signing time:             Mon 27 Jan 2025 12:14:14 +0000
ROA not before:           Mon 27 Jan 2025 12:09:14 +0000
ROA not after:            Mon 26 Jan 2026 12:14:14 +0000
asID:                     60900
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 12:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f9:47:9f:c5:d2:f2:8c:4d:fa:81:2c:6b:14:a3:83:93:02:42:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892843788777A43273322096510EA10880E7E5EA
        Validity
            Not Before: Jan 27 12:09:14 2025 GMT
            Not After : Jan 26 12:14:14 2026 GMT
        Subject: CN=663ABF7E305F6B01DD764CE166BCE9C8CA4EE644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f1:07:e9:9d:ee:8b:71:87:f0:24:95:0b:6c:
                    6b:bd:7a:f9:dc:5d:07:a1:e1:28:0a:b7:fc:2b:50:
                    8a:cf:6d:79:db:c7:bb:70:7b:6d:8e:11:af:2e:b8:
                    0f:13:44:95:f5:da:2f:03:dc:38:35:7e:71:34:2b:
                    dc:6a:b2:30:f3:e0:0c:62:a9:fe:a9:67:e4:1a:df:
                    61:16:5c:38:1a:38:9f:f2:4d:f8:85:93:c4:4c:bf:
                    61:45:64:22:7e:7d:dc:88:1b:1a:67:07:a2:1d:d7:
                    64:54:1d:b0:bf:ca:16:91:e8:0d:d6:4b:3b:bb:c7:
                    84:be:80:70:bc:1e:3b:52:57:39:16:a9:ed:c7:92:
                    19:bc:b5:49:6d:1b:4d:05:63:fc:05:59:5e:83:75:
                    77:cb:f0:16:9e:99:a2:cb:50:49:07:96:9c:e0:ca:
                    ab:d3:4d:68:33:dc:ef:d0:cd:63:98:42:6d:0e:56:
                    f6:3a:ef:4c:6f:3e:07:d6:e8:c6:2c:2d:e9:c2:ae:
                    cd:65:41:71:14:e3:94:7a:cb:20:96:92:9d:4e:a5:
                    5c:1e:27:6b:43:48:55:d4:2f:3c:a1:92:49:d9:18:
                    97:ff:79:32:52:21:34:2f:fd:92:0f:17:ec:ee:dd:
                    f1:bf:c8:3a:89:d5:cf:2a:f4:e5:24:76:36:72:01:
                    0d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3A:BF:7E:30:5F:6B:01:DD:76:4C:E1:66:BC:E9:C8:CA:4E:E6:44
            X509v3 Authority Key Identifier:
                keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:86:03:c1:74:1b:1f:88:7f:df:b9:9b:c4:ef:e7:7e:c4:31:
         f2:a4:0a:2f:3b:c4:77:bf:aa:65:e1:72:aa:00:0b:09:d0:1e:
         f9:6d:1c:20:33:a6:93:44:59:b3:43:29:e2:63:b1:e9:5a:12:
         56:dc:af:56:c8:28:70:2a:94:07:36:65:93:c3:71:47:4c:7f:
         27:c2:1c:8f:bc:24:dc:cb:01:1c:03:c2:85:11:91:b6:e0:40:
         91:9d:fe:28:2e:2c:d6:30:1a:95:22:2e:e8:c9:01:52:b9:25:
         95:26:f9:38:23:17:47:37:aa:8b:45:88:23:f8:1d:08:41:5d:
         50:66:e4:ef:51:40:86:b4:e0:96:ca:f7:4f:e2:58:1b:38:84:
         8d:d3:c1:61:2c:4e:72:a5:90:9c:19:88:91:8c:d2:9a:68:60:
         31:d0:91:fd:28:ed:0c:5e:ff:58:6c:92:17:56:fc:09:13:0d:
         35:81:0b:37:53:02:21:62:a0:b7:04:c5:cd:84:28:81:b5:48:
         64:d3:64:33:a7:6a:e9:69:36:29:48:62:89:14:dd:6c:79:6e:
         76:3d:e2:51:59:a5:f4:ba:c0:95:12:0b:83:8f:9b:bc:3f:0a:
         1a:d6:f5:61:c5:02:ca:3d:5c:c4:fb:53:e2:75:26:90:72:49:
         10:4f:78:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:02:09 2025 by rpki-client