Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa (raw, json)
Hash identifier:          zYMY1oRpDAf55aUvq23IaxbYyAuR2YNn8C/LIZIanhU=
Subject key identifier:   94:05:A3:2D:7B:4F:94:B7:BC:5A:50:91:88:5B:B2:46:04:52:A7:71
Certificate issuer:       /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial:       0CEC8777C7089E0C71BC155AFE3BA347AF0FA1D3
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa
Signing time:             Fri 05 Jun 2026 10:01:09 +0000
ROA not before:           Fri 05 Jun 2026 09:56:09 +0000
ROA not after:            Fri 04 Jun 2027 10:01:09 +0000
asID:                     59993
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ec:87:77:c7:08:9e:0c:71:bc:15:5a:fe:3b:a3:47:af:0f:a1:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
        Validity
            Not Before: Jun  5 09:56:09 2026 GMT
            Not After : Jun  4 10:01:09 2027 GMT
        Subject: CN=9405A32D7B4F94B7BC5A5091885BB2460452A771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:95:91:74:de:4f:b0:b5:01:77:63:f7:76:d9:
                    32:24:c5:40:18:ed:79:c7:dc:d6:77:e6:5f:71:4d:
                    7a:88:f8:c6:c6:90:c0:09:86:8b:3c:0f:5d:29:63:
                    b6:71:ca:66:48:2d:c5:2e:bb:75:df:4c:a6:e3:fe:
                    1a:9f:d8:9a:37:9c:1f:13:fb:81:c8:8a:41:8c:25:
                    51:e9:cd:31:e3:14:62:b0:94:c1:82:90:2f:e4:5e:
                    84:63:8a:aa:86:06:3e:5f:fb:60:20:2f:40:cd:eb:
                    eb:55:1d:f6:89:1a:0e:93:2c:04:05:f5:04:08:8e:
                    7b:7e:c7:96:3f:2f:da:aa:80:89:7e:7b:36:c4:c6:
                    a7:95:ae:ad:63:ce:15:76:61:fc:13:68:99:81:23:
                    52:11:02:7d:4e:fa:e6:08:21:44:f3:83:81:58:95:
                    a9:25:c3:95:ce:35:40:7d:af:f5:73:18:b0:ba:73:
                    41:76:31:5f:e9:77:bd:ae:c5:3f:c7:f8:c3:68:9a:
                    5c:6b:9e:5f:f7:1a:14:7c:a8:51:e0:c7:4b:fa:68:
                    df:72:ef:c0:b3:b7:f6:f9:a0:a3:92:ca:4f:34:69:
                    04:bc:a6:b6:11:08:b6:24:67:82:8d:7f:f6:5b:ab:
                    53:a4:80:ef:95:03:1c:ed:0b:07:8a:55:b5:9f:41:
                    b5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:05:A3:2D:7B:4F:94:B7:BC:5A:50:91:88:5B:B2:46:04:52:A7:71
            X509v3 Authority Key Identifier:
                keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:90:d3:45:c7:13:4f:35:84:04:81:39:73:50:37:1d:42:58:
         12:ee:07:c1:98:ac:c5:28:07:85:8b:4b:fd:a3:92:05:5d:6f:
         75:50:fe:c9:e8:17:c9:29:5c:f3:19:7f:e2:44:67:9a:16:da:
         74:66:8d:7e:65:ee:11:c6:f9:83:93:cb:2b:70:44:ab:c0:2a:
         54:ae:4c:b3:a9:f1:13:fc:51:ea:86:cf:2c:0f:35:a6:6a:83:
         d3:19:60:a0:f3:1e:79:b3:2c:61:0b:6a:0f:b7:ab:9e:09:75:
         8a:5b:50:e5:76:25:42:84:5a:86:59:1a:b6:22:36:86:db:59:
         a7:0e:e0:77:d3:3f:7d:f3:62:26:fe:a4:f7:81:a3:1d:34:6d:
         83:e4:64:09:4f:df:47:62:ce:97:a5:b1:a2:1a:08:f6:c3:0a:
         54:03:1c:7b:ed:23:2b:ac:5f:3d:1e:b4:ba:cd:ca:e4:a3:ba:
         21:34:df:a2:0f:73:f0:c4:a3:10:59:10:9d:32:aa:6e:6c:55:
         6f:73:4a:96:ac:d9:8d:00:24:0b:e0:17:11:e4:94:ea:f9:b0:
         33:66:2b:a5:c4:b2:de:7a:e5:82:d5:a0:68:f2:6c:25:d0:b0:
         7d:eb:da:a3:84:9e:e9:0b:99:f3:39:eb:5d:f1:cb:07:03:c5:
         b4:cc:ad:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 22:01:17 2026 by rpki-client