Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203530373535.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203530373535.roa (raw, json)
Hash identifier:          VP0T3vJDrcQRhu24IsBxLL2NmHzOPfupYaV6NBcwHiI=
Subject key identifier:   BB:85:01:E4:4B:14:10:78:41:C5:DB:5F:D2:99:D7:EF:F5:5A:64:B2
Certificate issuer:       /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial:       5B83FFE49097B457F11BC0273F783CC82D0FD37C
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203530373535.roa
Signing time:             Fri 05 Jun 2026 10:01:10 +0000
ROA not before:           Fri 05 Jun 2026 09:56:10 +0000
ROA not after:            Fri 04 Jun 2027 10:01:10 +0000
asID:                     50755
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 12:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:83:ff:e4:90:97:b4:57:f1:1b:c0:27:3f:78:3c:c8:2d:0f:d3:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
        Validity
            Not Before: Jun  5 09:56:10 2026 GMT
            Not After : Jun  4 10:01:10 2027 GMT
        Subject: CN=BB8501E44B14107841C5DB5FD299D7EFF55A64B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:d2:c9:de:c1:73:69:aa:66:4c:c3:10:8c:
                    be:c4:4e:ac:aa:00:4e:f4:86:06:37:5a:cb:6f:2e:
                    00:5a:78:f5:a7:12:2a:b7:37:59:cf:5e:d9:f0:42:
                    a9:9a:d2:f9:59:50:66:45:e5:2b:47:c8:1a:0e:55:
                    40:27:d2:b1:79:ad:32:66:77:7e:57:b2:65:2e:20:
                    71:bf:95:08:10:8f:96:78:67:83:3e:1a:7b:5b:9f:
                    be:f6:c7:53:20:40:43:d7:88:8a:b4:1f:1a:69:64:
                    11:36:7e:78:1d:2f:42:d3:48:f8:e4:03:ee:88:dd:
                    21:0b:7d:b6:9b:01:6b:b9:da:98:67:e1:69:3d:eb:
                    73:15:e3:d7:1d:d7:5b:03:35:32:99:46:fc:d4:ae:
                    73:3b:2b:be:ad:f2:15:2d:83:df:3e:6c:70:af:67:
                    06:93:ce:6e:ec:99:7c:49:2f:ec:0c:b3:27:f3:da:
                    06:89:d4:67:10:4e:e1:0e:5b:b9:0e:04:55:7e:e3:
                    50:c3:b6:4c:bd:1a:8a:2c:df:0e:5f:61:3b:db:18:
                    b3:51:b7:38:06:3b:6f:1f:73:dc:0b:5c:9a:01:96:
                    56:21:94:5a:f6:11:be:d1:4c:a2:17:ee:9d:50:ad:
                    de:b7:94:ce:87:8c:70:60:92:d9:be:3d:e3:6f:0f:
                    29:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:85:01:E4:4B:14:10:78:41:C5:DB:5F:D2:99:D7:EF:F5:5A:64:B2
            X509v3 Authority Key Identifier:
                keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203530373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:0b:0e:53:38:4e:82:31:71:6f:ed:1a:92:96:97:ec:37:07:
         33:30:e6:a0:b0:fc:c3:be:7b:a5:c6:91:5e:78:16:5b:fc:75:
         19:b0:cd:85:59:5a:37:97:42:a2:36:34:01:29:bf:41:7e:a8:
         44:7d:93:ad:b7:c6:eb:c2:c4:87:e1:ff:47:c7:89:79:8b:e5:
         5a:77:f4:3c:2b:46:9f:45:e0:52:e1:e4:b9:38:33:cd:36:af:
         2d:74:fc:b4:6a:9a:21:05:59:9f:c6:03:f0:89:3f:b1:8b:29:
         35:29:de:ca:3e:9b:81:ca:8e:aa:04:1e:e2:cc:05:f4:36:1b:
         9f:c8:52:2d:c1:15:c4:f7:ef:62:6d:97:76:4a:fa:97:41:2d:
         65:2a:d3:51:7e:d8:33:ed:08:a3:03:08:71:ff:7a:d1:b3:9b:
         64:d4:63:4c:b7:a5:99:b9:d5:73:dd:1e:8d:e2:7d:de:c1:f3:
         7b:bc:37:ba:3a:90:58:0d:40:f3:e9:66:50:90:dd:3c:fb:fb:
         4a:32:0e:01:87:81:2d:3c:95:f3:d1:24:a1:58:55:23:01:7f:
         ec:66:1a:e8:9d:af:8b:a0:9b:fc:e1:7f:1d:32:94:fe:b7:1a:
         04:cd:1d:ed:04:cb:7c:2d:10:2a:66:1e:45:d9:42:45:20:4e:
         c8:87:d0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:34:25 2026 by rpki-client