Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          0nm82AHKgeNaH8gZFNO7SKfmfQxII8a9vCZMZP0aHKI=
Subject key identifier:   B6:63:41:2D:D0:87:53:16:DB:AF:A5:1A:62:95:2A:A3:08:F2:A6:31
Certificate issuer:       /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial:       09D518E5B48C93520ECFD9E770F36343EBAF1606
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa
Signing time:             Fri 04 Jul 2025 09:21:14 +0000
ROA not before:           Fri 04 Jul 2025 09:16:14 +0000
ROA not after:            Fri 03 Jul 2026 09:21:14 +0000
asID:                     60900
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 15:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d5:18:e5:b4:8c:93:52:0e:cf:d9:e7:70:f3:63:43:eb:af:16:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
        Validity
            Not Before: Jul  4 09:16:14 2025 GMT
            Not After : Jul  3 09:21:14 2026 GMT
        Subject: CN=B663412DD0875316DBAFA51A62952AA308F2A631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:84:88:46:2d:2c:24:d0:7f:f2:62:28:7e:2d:
                    6a:f7:f8:6b:a2:cf:4b:72:40:ff:30:ce:20:f2:52:
                    a9:4f:af:44:95:bc:8e:17:e1:27:c9:1f:85:da:e6:
                    24:05:3a:28:ca:a9:02:6d:6c:9f:b3:98:65:23:7a:
                    d9:55:6f:36:27:de:34:32:ca:54:ac:f5:52:41:9a:
                    ed:1e:58:c1:6a:73:a1:2d:61:d0:03:6e:8a:15:eb:
                    44:09:d2:a0:3b:f9:3d:09:d6:f3:a3:ae:14:5b:60:
                    53:21:a7:3b:2c:b8:46:a7:8d:a8:13:71:c4:2e:44:
                    72:45:01:50:bb:e0:54:c2:d0:ad:be:18:ea:b9:67:
                    89:e6:3f:89:22:eb:88:eb:c9:34:59:2f:47:62:5a:
                    1b:6d:1a:94:a0:19:f2:8f:ac:67:ab:ec:7e:f2:b7:
                    90:45:f1:5f:ad:33:1a:2c:82:0e:18:9e:e3:ec:6d:
                    4f:d2:77:3a:e5:85:4b:36:9b:1a:f4:c7:d1:55:c4:
                    97:8a:35:dc:43:c3:82:e6:41:2b:83:60:ae:8f:a6:
                    0c:18:24:1b:22:c6:e9:c2:8c:71:0e:f3:89:a3:bd:
                    d7:07:d5:b8:3b:ee:89:92:7c:88:eb:df:72:3f:3b:
                    0d:35:bd:b5:c2:bd:a1:c7:88:e6:66:38:91:71:65:
                    76:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:63:41:2D:D0:87:53:16:DB:AF:A5:1A:62:95:2A:A3:08:F2:A6:31
            X509v3 Authority Key Identifier:
                keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:8a:42:e8:9a:9f:a7:51:c4:24:69:12:1c:b3:9b:b4:cb:93:
         e6:d3:e4:dc:6c:02:e9:3b:9a:23:5e:03:01:57:e3:09:2a:69:
         e7:19:45:8d:3a:e9:f4:14:75:17:d1:39:37:e7:21:ea:67:ee:
         dd:72:f6:33:d8:96:8a:39:26:b4:f6:83:37:5a:71:40:cd:c4:
         12:65:39:bd:81:62:3f:0e:91:a6:7a:17:c9:2b:4c:c7:18:c0:
         bf:a9:e3:c3:05:9a:14:cc:ed:f6:4b:63:cf:35:c6:0c:c0:30:
         5c:e9:94:15:52:f6:55:bc:71:d3:68:aa:f4:07:65:74:8c:d5:
         cd:88:08:fe:89:00:79:0f:bb:21:52:17:ce:91:9d:7f:96:fa:
         02:70:13:c6:d2:20:0f:90:6b:1f:bb:d3:46:d3:0b:79:8d:7c:
         e3:35:b9:b0:32:44:40:5e:e8:9c:0a:05:52:60:db:c0:9e:e2:
         a3:96:8b:3f:50:94:a6:ad:1c:75:df:29:4a:6c:23:e7:e6:b1:
         89:10:1d:1f:12:7c:f4:3a:81:7e:75:cc:4e:8d:ea:86:3f:e3:
         81:a7:d9:96:ec:19:d3:c9:4d:b3:9f:0c:a0:7c:68:2b:01:b9:
         3f:a6:d8:87:0b:53:f7:2f:d3:f2:ed:cc:b2:c4:c5:62:54:22:
         a7:d8:49:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 05:43:15 2025 by rpki-client