Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363435.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323130363435.roa (raw, json)
Hash identifier:          MJJCb7GPFoZpPxTgi2OnS55nlkcyZR2mLg/Fx57oupM=
Subject key identifier:   11:3D:7E:47:E1:18:17:88:3D:04:77:68:1A:EB:CD:2E:2F:41:E0:22
Certificate issuer:       /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial:       3792F59CC5839F18F5252F2807BEBC0A050A0001
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363435.roa
Signing time:             Fri 05 Jun 2026 10:01:09 +0000
ROA not before:           Fri 05 Jun 2026 09:56:09 +0000
ROA not after:            Fri 04 Jun 2027 10:01:09 +0000
asID:                     210645
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 12:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:92:f5:9c:c5:83:9f:18:f5:25:2f:28:07:be:bc:0a:05:0a:00:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
        Validity
            Not Before: Jun  5 09:56:09 2026 GMT
            Not After : Jun  4 10:01:09 2027 GMT
        Subject: CN=113D7E47E11817883D0477681AEBCD2E2F41E022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0b:6a:72:8b:2b:ba:13:f2:50:1a:7b:f2:57:
                    54:27:80:a5:1f:ae:7a:7c:2e:84:06:39:5c:a8:77:
                    ce:a9:bb:89:94:34:3f:72:8b:0d:1d:5b:4f:13:82:
                    ce:a3:8c:d1:7c:6b:f9:9c:72:86:a6:89:aa:f9:e0:
                    8c:4e:51:15:73:28:2d:17:20:59:93:79:f5:a9:09:
                    7a:33:90:c5:0a:78:ee:cf:39:56:98:94:c4:68:ea:
                    d5:13:f0:28:c8:29:ca:ba:49:de:b3:ac:a9:3b:7f:
                    c6:de:c8:6f:15:8e:8a:e9:8f:5e:78:73:58:b5:e3:
                    c3:8e:24:0a:2a:2b:7d:fb:f9:e7:c0:89:3c:2a:14:
                    f0:67:74:bf:74:b2:66:78:80:a1:b2:8b:1c:e9:5e:
                    38:fe:59:de:bd:d2:cc:63:13:83:4c:9e:b9:58:fb:
                    48:66:8f:c3:a8:1c:72:52:cb:c9:e1:29:9b:00:2f:
                    a2:cd:4d:10:02:80:07:27:ff:3e:52:b8:b5:fa:ce:
                    45:fb:5a:5c:59:1d:0c:57:ec:88:1e:a8:e6:43:b5:
                    04:f5:28:1e:20:d6:1a:fe:2d:76:16:b0:b1:b9:46:
                    3d:dc:c5:cd:26:88:02:58:7e:8c:4c:c9:59:5d:bd:
                    f1:5b:9c:de:06:2e:80:ec:d1:cf:b0:d9:ff:5f:95:
                    98:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3D:7E:47:E1:18:17:88:3D:04:77:68:1A:EB:CD:2E:2F:41:E0:22
            X509v3 Authority Key Identifier:
                keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:40:36:c1:a2:38:b5:2d:43:34:b8:ba:f0:b1:cf:97:f4:e6:
         06:88:0a:49:50:c3:5e:8b:cd:b6:d8:a7:f7:a4:6c:26:7b:bc:
         6a:bd:57:e8:52:01:fc:2c:4a:8e:b6:64:83:6c:75:3d:99:ff:
         1b:89:89:f0:11:3e:42:70:6e:38:17:5b:83:e8:ee:dd:f4:48:
         b7:0a:87:2a:8c:4f:d7:ed:d9:b0:89:f8:15:5e:ce:90:6b:4b:
         25:d6:56:ee:77:b2:00:e9:01:9f:3e:23:8c:b0:8f:e2:f7:7d:
         f2:28:a4:1a:d3:4c:7d:e8:93:e4:cd:0c:61:49:72:41:d1:15:
         9e:6e:1f:25:be:27:14:03:a0:24:45:0c:0d:bd:4f:80:54:5f:
         c5:5b:50:81:3f:2b:9d:0c:15:15:5d:53:64:9e:70:ab:f6:f2:
         0e:95:39:6e:27:5b:95:1a:38:11:3f:a6:6f:62:ab:12:37:cc:
         71:7e:8f:86:a9:30:50:84:16:20:5c:96:5d:76:10:62:a2:63:
         76:a1:5e:4c:a0:42:84:7e:ac:4b:9a:bf:15:79:c3:1e:e9:d1:
         42:bb:de:f5:5d:c2:bd:4b:e8:d8:4d:c4:ad:4f:c5:8d:ca:22:
         b7:7d:e1:29:c1:0f:a6:30:09:ff:cf:1e:ea:25:a4:7a:9c:3c:
         eb:69:65:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:48:38 2026 by rpki-client