Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa (raw, json)
Hash identifier:          8R2JcWoytSLEkAmJo/iEjnbb3JAgqvMX892011pEYDM=
Subject key identifier:   5E:38:6B:51:B2:E5:11:57:44:11:43:07:C1:7E:43:FC:A8:EF:EE:2A
Certificate issuer:       /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial:       75FF946B87EE9D686E2EABFF805F96425108E1E0
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa
Signing time:             Fri 05 Jun 2026 10:01:10 +0000
ROA not before:           Fri 05 Jun 2026 09:56:10 +0000
ROA not after:            Fri 04 Jun 2027 10:01:10 +0000
asID:                     211380
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 11:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ff:94:6b:87:ee:9d:68:6e:2e:ab:ff:80:5f:96:42:51:08:e1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
        Validity
            Not Before: Jun  5 09:56:10 2026 GMT
            Not After : Jun  4 10:01:10 2027 GMT
        Subject: CN=5E386B51B2E5115744114307C17E43FCA8EFEE2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f2:9d:c5:4a:5c:12:d6:69:7e:ef:8e:2c:c4:
                    ca:ca:6f:a5:a4:ba:a2:a9:ad:09:bd:89:b5:5a:58:
                    8a:e9:ee:80:66:db:bb:2b:67:7f:ba:6a:dd:8c:85:
                    64:b7:e6:22:60:6a:d2:1a:fa:ef:f9:5b:97:d7:bb:
                    c4:f1:c4:9e:ed:f0:f6:63:bc:37:86:04:2b:4e:76:
                    44:22:9e:a4:89:43:6d:2e:cb:44:9c:92:de:0e:a5:
                    26:7c:a9:e3:3f:35:8a:2d:07:f9:be:ff:8a:51:e0:
                    e2:84:80:d9:d4:50:1d:54:02:74:09:ef:72:87:a7:
                    42:d6:43:27:fa:94:ab:fb:ac:59:56:3d:0f:10:55:
                    1f:bb:cf:e2:5b:76:c5:3c:34:78:8c:8b:f3:38:eb:
                    5c:5e:19:bc:da:a2:1d:46:72:db:8f:dc:4a:90:b0:
                    bc:02:24:45:6e:2a:14:1c:ab:d8:0c:9f:e8:fa:6d:
                    65:f5:25:4b:39:5d:54:12:79:33:dd:2f:2e:91:5f:
                    5d:a9:52:88:52:cd:49:1c:c6:ae:31:3e:f2:a6:f9:
                    c7:c5:ca:6c:b2:26:01:1e:34:35:cf:8b:6c:46:3b:
                    8a:4b:48:bc:d8:ea:dd:e1:9c:46:0b:e1:07:99:43:
                    99:f1:06:a1:dc:a5:a4:0a:93:4b:14:1a:f9:1b:f3:
                    cf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:38:6B:51:B2:E5:11:57:44:11:43:07:C1:7E:43:FC:A8:EF:EE:2A
            X509v3 Authority Key Identifier:
                keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:61:9e:ec:81:5d:2e:40:44:89:68:6d:ad:60:74:94:b3:bd:
         69:5a:51:c4:23:46:ea:70:b8:ac:91:05:61:19:34:8f:93:fa:
         e6:a4:80:65:63:84:42:ad:20:7e:b9:cd:1e:4f:c6:b6:fd:41:
         2c:f0:a9:e2:09:f7:07:6e:36:79:2a:e3:fd:ea:cf:17:3a:2f:
         e2:ef:e7:79:08:90:3e:c8:5b:4a:95:e8:39:bb:4f:86:b6:2a:
         6f:10:ce:58:5c:bb:8d:9b:1a:33:00:c1:90:86:e0:5c:d2:b2:
         52:a6:37:e0:4b:17:b8:8d:57:14:b1:8b:29:62:bb:f0:d5:a4:
         3d:c9:09:54:3c:ea:1b:f6:3e:9a:bf:7f:5e:0c:79:17:ff:b7:
         ff:18:57:8b:91:a6:a1:1a:c3:c3:4a:96:d6:30:b0:fd:23:42:
         26:68:75:8b:90:4b:d3:36:e6:0d:df:6c:33:fc:4a:69:22:25:
         2d:b1:a9:64:49:23:62:f9:eb:d8:32:ac:fc:d3:90:23:95:66:
         dd:6e:90:95:ee:7d:f1:47:da:67:26:0b:40:94:c2:46:8d:8e:
         88:60:ea:ec:c7:0d:71:92:b7:9a:9b:99:b1:f6:b8:de:24:fb:
         6b:6c:f5:06:0c:5e:e5:ba:9e:c9:3b:30:02:84:c8:e8:af:22:
         c2:fa:d0:1f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUdf+Ua4funWhuLqv/gF+WQlEI4eAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg5NzNDMzlBMUVENDNCMTBERkFCRDZFQkNEQjZCNDgx
MEJFRDQxRDAeFw0yNjA2MDUwOTU2MTBaFw0yNzA2MDQxMDAxMTBaMDMxMTAvBgNV
BAMTKDVFMzg2QjUxQjJFNTExNTc0NDExNDMwN0MxN0U0M0ZDQThFRkVFMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+8p3FSlwS1ml+744sxMrKb6Wk
uqKprQm9ibVaWIrp7oBm27srZ3+6at2MhWS35iJgatIa+u/5W5fXu8TxxJ7t8PZj
vDeGBCtOdkQinqSJQ20uy0Sckt4OpSZ8qeM/NYotB/m+/4pR4OKEgNnUUB1UAnQJ
73KHp0LWQyf6lKv7rFlWPQ8QVR+7z+JbdsU8NHiMi/M461xeGbzaoh1GctuP3EqQ
sLwCJEVuKhQcq9gMn+j6bWX1JUs5XVQSeTPdLy6RX12pUohSzUkcxq4xPvKm+cfF
ymyyJgEeNDXPi2xGO4pLSLzY6t3hnEYL4QeZQ5nxBqHcpaQKk0sUGvkb8895AgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUXjhrUbLlEVdEEUMHwX5D/Kjv7iowHwYDVR0j
BBgwFoAUiJc8OaHtQ7EN+r1uvNtrSBC+1B0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvNS84ODk3M0MzOUEx
RUQ0M0IxMERGQUJENkVCQ0RCNkI0ODEwQkVENDFELmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj
YWUzZi80Lzg4OTczQzM5QTFFRDQzQjEwREZBQkQ2RUJDREI2QjQ4MTBCRUQ0MUQu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw
YzlmZWVjMTI0OWUvNS8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzIzMTMxMzMzODMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwP/u
MA0GCSqGSIb3DQEBCwUAA4IBAQAxYZ7sgV0uQESJaG2tYHSUs71pWlHEI0bqcLis
kQVhGTSPk/rmpIBlY4RCrSB+uc0eT8a2/UEs8KniCfcHbjZ5KuP96s8XOi/i7+d5
CJA+yFtKleg5u0+GtipvEM5YXLuNmxozAMGQhuBc0rJSpjfgSxe4jVcUsYspYrvw
1aQ9yQlUPOob9j6av39eDHkX/7f/GFeLkaahGsPDSpbWMLD9I0ImaHWLkEvTNuYN
32wz/EppIiUtsalkSSNi+evYMqz805AjlWbdbpCV7n3xR9pnJgtAlMJGjY6IYOrs
xw1xkream5mx9rjeJPtrbPUGDF7lup7JOzAChMjoryLC+tAf
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:47:06 2026 by rpki-client