Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa (raw, json)
Hash identifier:          7ABUd2taHG8932lIWK0dScnix4cE5RbXgmShCF8u5E0=
Subject key identifier:   E6:8B:28:DF:BC:40:93:02:2A:E7:24:F1:23:9F:C1:F1:DA:64:37:A4
Certificate issuer:       /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial:       1500A908BA14FC7AB8831A19D4CEA91AA79EE3F5
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa
Signing time:             Fri 04 Jul 2025 09:21:13 +0000
ROA not before:           Fri 04 Jul 2025 09:16:13 +0000
ROA not after:            Fri 03 Jul 2026 09:21:13 +0000
asID:                     203619
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 15:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:00:a9:08:ba:14:fc:7a:b8:83:1a:19:d4:ce:a9:1a:a7:9e:e3:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
        Validity
            Not Before: Jul  4 09:16:13 2025 GMT
            Not After : Jul  3 09:21:13 2026 GMT
        Subject: CN=E68B28DFBC4093022AE724F1239FC1F1DA6437A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:12:1a:d8:e3:ab:ea:a7:d8:78:98:36:22:a7:
                    ae:5a:d1:be:e6:ff:8c:1c:43:84:e0:7c:d2:92:08:
                    8d:de:1e:ed:f4:63:0f:e5:c7:23:66:41:0d:60:ed:
                    69:90:e3:4a:0b:6a:04:d7:32:43:04:63:ef:8f:87:
                    a2:55:69:c2:e0:3e:ca:08:f0:84:08:02:31:a4:07:
                    25:33:d7:79:2d:17:e4:c5:5b:d3:ac:78:11:5a:34:
                    77:83:72:eb:12:92:98:cc:87:d0:01:8c:e9:0b:7f:
                    05:29:7a:a6:ca:87:c9:39:13:b8:96:df:f9:83:32:
                    71:75:2f:2c:c1:ec:af:19:19:9c:15:a5:18:37:17:
                    24:3c:e9:e6:b8:ab:44:68:a4:d4:f0:10:98:16:5f:
                    04:29:9b:fd:1c:7d:84:78:0a:b1:58:85:52:31:85:
                    17:c7:7f:af:ed:00:c3:31:c7:08:8a:d9:57:a4:41:
                    7c:43:40:9b:3b:5a:c0:bf:6a:b5:ba:0a:1a:ed:b2:
                    74:5d:7a:cc:42:15:84:bc:26:f2:ce:e5:03:6d:a1:
                    58:7b:16:dc:8a:71:35:e7:c3:3b:65:88:c1:ca:22:
                    13:df:b4:6b:df:27:3e:a6:41:52:f6:de:c5:56:3f:
                    df:1a:35:b9:ad:40:45:92:b2:ba:04:4a:b6:c7:aa:
                    3e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8B:28:DF:BC:40:93:02:2A:E7:24:F1:23:9F:C1:F1:DA:64:37:A4
            X509v3 Authority Key Identifier:
                keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:a8:2f:81:37:d1:0c:e7:99:37:ba:d1:b5:62:48:03:fb:d3:
         ee:bc:8c:ed:cc:e7:47:b8:41:92:c1:31:9c:6b:e5:48:66:3d:
         6e:a8:41:48:4b:c1:50:5c:35:38:00:36:ef:35:77:5f:cf:b1:
         e1:3b:97:90:13:6c:f0:a8:7e:1c:4b:7e:df:07:09:cd:1b:c1:
         78:f5:86:74:aa:3f:47:b5:1a:0c:2d:0e:99:18:4e:11:86:f0:
         60:a5:8b:0f:7e:85:7a:e7:49:9a:18:af:18:c7:74:be:38:a8:
         d8:8b:85:d5:2f:4f:e7:e7:c9:16:cd:0c:6e:4a:c2:67:8c:bd:
         49:0e:bc:bc:36:47:24:95:29:1b:27:50:c7:c7:78:2d:12:de:
         70:d8:17:70:91:91:65:f3:32:dd:eb:60:21:51:58:88:f8:98:
         6b:ee:2f:7f:fc:4b:cb:5a:79:9e:4c:da:6d:b9:5d:cb:69:66:
         de:e1:f6:be:6b:90:18:32:e3:48:90:30:c8:8a:84:a0:5e:d4:
         5a:cf:6f:4d:f2:23:c7:09:ef:c7:5f:1c:9e:cb:dc:fd:b3:d0:
         28:4a:fc:96:96:62:f9:f2:6e:97:3c:cb:e3:87:a2:00:12:1b:
         43:b3:0b:7e:df:b7:5a:59:9d:56:6c:17:29:3f:1e:14:83:25:
         bd:ff:8c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 02:19:06 2025 by rpki-client