Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363637.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323130363637.roa (raw, json)
Hash identifier:          CRjz36xKKnM/XT2veMOfgbu3sY6X+vm0sD+ABhtx27Y=
Subject key identifier:   54:27:C9:99:AA:FA:C9:03:54:BA:4C:67:F2:43:29:67:A1:18:2F:77
Certificate issuer:       /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial:       60567A7261039AE886C746DD049DEFD0A9344AAC
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363637.roa
Signing time:             Fri 05 Jun 2026 10:01:10 +0000
ROA not before:           Fri 05 Jun 2026 09:56:10 +0000
ROA not after:            Fri 04 Jun 2027 10:01:10 +0000
asID:                     210667
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 12:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:56:7a:72:61:03:9a:e8:86:c7:46:dd:04:9d:ef:d0:a9:34:4a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
        Validity
            Not Before: Jun  5 09:56:10 2026 GMT
            Not After : Jun  4 10:01:10 2027 GMT
        Subject: CN=5427C999AAFAC90354BA4C67F2432967A1182F77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:38:c6:e7:52:be:d3:97:b7:82:bd:0e:b7:b0:
                    82:04:5c:93:d8:c6:b3:84:4c:1c:14:e5:43:ce:79:
                    58:17:e9:58:2d:45:78:b7:1b:42:5a:3f:6c:d1:9c:
                    24:23:32:14:96:7e:c2:36:5f:ec:43:7c:e0:fb:11:
                    b9:3d:e9:aa:5a:c6:b6:89:9c:52:9f:24:93:2f:4b:
                    e4:1e:fe:95:d6:1e:f1:57:0c:a8:3b:57:01:70:6c:
                    ac:e8:b8:34:5c:fc:f9:30:13:9a:a5:c1:1d:c2:b6:
                    9c:4a:8e:8f:66:e4:59:48:33:05:b3:93:ea:50:b9:
                    87:b4:42:40:9e:0f:ae:24:14:c5:60:55:e9:49:aa:
                    17:68:f7:80:47:7d:d3:07:bc:90:b1:c1:5a:4a:82:
                    b3:b2:dc:5d:c3:7f:f8:46:7f:7d:93:9f:93:55:ef:
                    28:25:48:10:36:79:74:8b:00:7b:e1:61:f9:2b:0c:
                    35:fc:13:fe:66:67:87:6f:e6:67:ea:62:ea:1d:51:
                    ef:64:00:70:ed:c5:b9:2f:fe:75:00:d4:8a:60:38:
                    2d:3b:bf:a2:4b:aa:f4:63:6f:b0:22:2e:d3:59:be:
                    05:ae:7b:3b:00:c8:7d:96:b2:ef:d1:e7:e1:77:b6:
                    00:b7:5f:5b:9b:ab:6e:05:a9:87:cf:b0:47:a8:89:
                    2d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:27:C9:99:AA:FA:C9:03:54:BA:4C:67:F2:43:29:67:A1:18:2F:77
            X509v3 Authority Key Identifier:
                keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:ac:cf:61:c3:e0:8c:c1:b3:2a:f2:a5:cf:e1:a1:f3:60:cf:
         35:34:76:a0:94:3f:9f:8b:05:d3:68:ae:37:53:e6:7d:d4:3b:
         0a:ad:d2:6e:16:6d:ee:df:bb:1a:df:e0:6d:cd:10:c5:48:41:
         d0:b9:1c:3a:73:3e:0e:8e:63:72:83:4f:cd:4b:8a:43:2a:37:
         7b:d9:7a:2a:ff:5d:2b:22:d8:c5:a9:c2:18:04:f5:f0:c7:a5:
         86:f3:00:83:8f:bb:34:de:53:f4:1e:ac:ba:8b:93:a5:96:60:
         1f:f0:fc:10:52:f8:e6:78:ad:95:e6:2f:92:0b:51:b6:33:ab:
         73:3e:b8:e0:ec:a1:0b:10:56:5e:7a:11:4f:6b:7a:8a:66:bc:
         59:a1:93:80:5c:99:35:46:af:1c:9b:e4:b0:3e:c7:63:1d:b5:
         67:14:4a:b1:8f:9d:36:3b:0f:38:8d:22:f4:f7:21:e5:27:47:
         a2:22:5b:29:f6:e6:be:e6:c0:77:e3:4c:3b:4c:da:12:3d:09:
         7c:d4:76:ce:f7:1a:b6:e3:01:ac:c7:a3:67:99:38:f8:86:53:
         9e:2e:8f:80:aa:4a:92:d6:e1:07:0c:f1:07:6e:a8:08:19:4d:
         9e:20:05:d3:6d:81:e9:73:6d:01:3d:c8:be:7b:3c:05:e4:09:
         fa:17:34:5e
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUYFZ6cmEDmuiGx0bdBJ3v0Kk0SqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg5NzNDMzlBMUVENDNCMTBERkFCRDZFQkNEQjZCNDgx
MEJFRDQxRDAeFw0yNjA2MDUwOTU2MTBaFw0yNzA2MDQxMDAxMTBaMDMxMTAvBgNV
BAMTKDU0MjdDOTk5QUFGQUM5MDM1NEJBNEM2N0YyNDMyOTY3QTExODJGNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0OMbnUr7Tl7eCvQ63sIIEXJPY
xrOETBwU5UPOeVgX6VgtRXi3G0JaP2zRnCQjMhSWfsI2X+xDfOD7Ebk96apaxraJ
nFKfJJMvS+Qe/pXWHvFXDKg7VwFwbKzouDRc/PkwE5qlwR3CtpxKjo9m5FlIMwWz
k+pQuYe0QkCeD64kFMVgVelJqhdo94BHfdMHvJCxwVpKgrOy3F3Df/hGf32Tn5NV
7yglSBA2eXSLAHvhYfkrDDX8E/5mZ4dv5mfqYuodUe9kAHDtxbkv/nUA1IpgOC07
v6JLqvRjb7AiLtNZvgWuezsAyH2Wsu/R5+F3tgC3X1ubq24FqYfPsEeoiS03AgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUVCfJmar6yQNUukxn8kMpZ6EYL3cwHwYDVR0j
BBgwFoAUiJc8OaHtQ7EN+r1uvNtrSBC+1B0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvNS84ODk3M0MzOUEx
RUQ0M0IxMERGQUJENkVCQ0RCNkI0ODEwQkVENDFELmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj
YWUzZi80Lzg4OTczQzM5QTFFRDQzQjEwREZBQkQ2RUJDREI2QjQ4MTBCRUQ0MUQu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw
YzlmZWVjMTI0OWUvNS8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzIzMTMwMzYzNjM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwP/u
MA0GCSqGSIb3DQEBCwUAA4IBAQCvrM9hw+CMwbMq8qXP4aHzYM81NHaglD+fiwXT
aK43U+Z91DsKrdJuFm3u37sa3+BtzRDFSEHQuRw6cz4OjmNyg0/NS4pDKjd72Xoq
/10rItjFqcIYBPXwx6WG8wCDj7s03lP0Hqy6i5OllmAf8PwQUvjmeK2V5i+SC1G2
M6tzPrjg7KELEFZeehFPa3qKZrxZoZOAXJk1Rq8cm+SwPsdjHbVnFEqxj502Ow84
jSL09yHlJ0eiIlsp9ua+5sB340w7TNoSPQl81HbO9xq24wGsx6NnmTj4hlOeLo+A
qkqS1uEHDPEHbqgIGU2eIAXTbYHpc20BPci+ezwF5An6FzRe
-----END CERTIFICATE-----
Generated at Fri Jun 5 23:37:51 2026 by rpki-client