Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363930.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323030363930.roa (raw, json)
Hash identifier:          0U1RCBcUZlWR+6opXVSRxTSSloe/CuSjjQf0aTQmDHI=
Subject key identifier:   DB:F0:0A:2F:C5:2C:18:FB:90:E8:80:85:03:43:01:5E:B1:9B:6D:F6
Certificate issuer:       /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial:       647F59774FBAF1FA042F18FBCF866BF6362DBC7A
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363930.roa
Signing time:             Fri 05 Jun 2026 10:01:09 +0000
ROA not before:           Fri 05 Jun 2026 09:56:09 +0000
ROA not after:            Fri 04 Jun 2027 10:01:09 +0000
asID:                     200690
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 12:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7f:59:77:4f:ba:f1:fa:04:2f:18:fb:cf:86:6b:f6:36:2d:bc:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
        Validity
            Not Before: Jun  5 09:56:09 2026 GMT
            Not After : Jun  4 10:01:09 2027 GMT
        Subject: CN=DBF00A2FC52C18FB90E880850343015EB19B6DF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:ef:c8:e6:15:b8:47:40:71:69:a9:ff:43:
                    e2:51:e4:c2:51:41:30:b8:df:0f:be:25:76:ca:75:
                    d5:1f:c4:75:6c:a0:3e:4e:92:a9:b4:05:4e:ad:45:
                    b2:db:99:e1:8b:3f:fa:e1:56:91:a4:2b:05:10:52:
                    ee:71:47:6a:46:7a:7a:07:c7:6c:91:dc:bc:1a:e4:
                    3d:10:3e:c8:77:09:f4:5c:1c:2f:06:27:49:73:5d:
                    8f:bd:ca:b7:1b:06:e3:4d:9a:21:e2:68:16:9c:0a:
                    a7:cd:30:ce:01:c9:86:50:2c:82:a0:32:ca:e3:c5:
                    c5:08:22:ec:cf:db:39:d7:d4:c9:e4:db:c6:bf:fd:
                    92:63:62:9a:8c:ae:af:aa:e0:80:f9:6d:c5:80:d4:
                    d9:aa:31:03:58:51:1e:9b:c5:d0:c2:c0:91:14:1d:
                    f4:c2:b2:f6:dc:63:47:d5:c6:b4:71:ff:c9:b6:38:
                    20:5f:ba:d4:92:ee:aa:bb:42:ef:2d:eb:65:b4:b6:
                    a6:93:3d:4f:7f:a9:ff:7a:73:b2:c6:6a:59:71:7e:
                    28:3b:18:7e:ed:e1:b9:96:10:55:63:00:7d:f3:99:
                    38:2f:f1:1e:dd:8d:b4:24:db:83:6f:2d:c8:b8:c7:
                    49:31:67:26:e5:56:8d:4b:4b:c9:18:f6:8a:84:b7:
                    38:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F0:0A:2F:C5:2C:18:FB:90:E8:80:85:03:43:01:5E:B1:9B:6D:F6
            X509v3 Authority Key Identifier:
                keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:ec:f5:1f:3e:b9:82:65:0e:6f:a7:02:78:e4:3a:44:c5:11:
         0c:ed:d9:34:a9:c4:13:76:86:ed:40:85:8b:9c:0a:fc:9d:86:
         30:81:f8:2b:d2:f0:5d:c9:63:35:fa:b6:eb:21:cc:d7:53:1d:
         ae:ca:61:bd:89:5b:95:9c:74:6f:9a:f0:61:d6:bd:75:8a:e3:
         55:a8:f6:b7:d9:4a:23:10:7c:2c:fe:34:64:b8:d3:f6:da:c2:
         22:7d:c1:36:fe:86:99:c8:da:10:6e:f6:b6:a7:e4:84:26:37:
         0f:ea:4c:4e:c6:18:95:5c:2b:8c:34:37:8e:f0:9b:6f:eb:68:
         23:46:dd:76:f1:01:e3:fa:c3:0d:0a:12:5a:7f:81:86:4e:fb:
         2f:12:2f:11:20:18:7f:94:ce:a4:1c:c5:b8:cd:77:7a:17:76:
         4e:d5:0a:89:ae:77:f6:09:6c:54:0c:04:97:09:22:ef:19:c4:
         fe:60:c9:9d:8d:eb:7d:39:51:c2:be:45:44:c1:b5:87:9a:f4:
         47:f2:42:a6:3e:df:c3:51:13:dd:5a:a4:4e:09:2d:70:48:df:
         9f:fc:5e:0b:0f:a1:23:da:b8:f5:00:09:27:e6:89:22:4f:2a:
         17:64:d2:3e:6d:72:26:cd:8f:fb:ed:2e:81:08:15:77:a7:5f:
         83:62:2f:cf
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUZH9Zd0+68foELxj7z4Zr9jYtvHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg5NzNDMzlBMUVENDNCMTBERkFCRDZFQkNEQjZCNDgx
MEJFRDQxRDAeFw0yNjA2MDUwOTU2MDlaFw0yNzA2MDQxMDAxMDlaMDMxMTAvBgNV
BAMTKERCRjAwQTJGQzUyQzE4RkI5MEU4ODA4NTAzNDMwMTVFQjE5QjZERjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATu/I5hW4R0Bxaan/Q+JR5MJR
QTC43w++JXbKddUfxHVsoD5Okqm0BU6tRbLbmeGLP/rhVpGkKwUQUu5xR2pGenoH
x2yR3Lwa5D0QPsh3CfRcHC8GJ0lzXY+9yrcbBuNNmiHiaBacCqfNMM4ByYZQLIKg
MsrjxcUIIuzP2znX1Mnk28a//ZJjYpqMrq+q4ID5bcWA1NmqMQNYUR6bxdDCwJEU
HfTCsvbcY0fVxrRx/8m2OCBfutSS7qq7Qu8t62W0tqaTPU9/qf96c7LGallxfig7
GH7t4bmWEFVjAH3zmTgv8R7djbQk24NvLci4x0kxZyblVo1LS8kY9oqEtzjNAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQU2/AKL8UsGPuQ6ICFA0MBXrGbbfYwHwYDVR0j
BBgwFoAUiJc8OaHtQ7EN+r1uvNtrSBC+1B0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvNS84ODk3M0MzOUEx
RUQ0M0IxMERGQUJENkVCQ0RCNkI0ODEwQkVENDFELmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj
YWUzZi80Lzg4OTczQzM5QTFFRDQzQjEwREZBQkQ2RUJDREI2QjQ4MTBCRUQ0MUQu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw
YzlmZWVjMTI0OWUvNS8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzIzMDMwMzYzOTMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwP/u
MA0GCSqGSIb3DQEBCwUAA4IBAQAJ7PUfPrmCZQ5vpwJ45DpExREM7dk0qcQTdobt
QIWLnAr8nYYwgfgr0vBdyWM1+rbrIczXUx2uymG9iVuVnHRvmvBh1r11iuNVqPa3
2UojEHws/jRkuNP22sIifcE2/oaZyNoQbva2p+SEJjcP6kxOxhiVXCuMNDeO8Jtv
62gjRt128QHj+sMNChJaf4GGTvsvEi8RIBh/lM6kHMW4zXd6F3ZO1QqJrnf2CWxU
DASXCSLvGcT+YMmdjet9OVHCvkVEwbWHmvRH8kKmPt/DURPdWqROCS1wSN+f/F4L
D6Ej2rj1AAkn5okiTyoXZNI+bXImzY/77S6BCBV3p1+DYi/P
-----END CERTIFICATE-----
Generated at Sat Jun 6 02:34:24 2026 by rpki-client