Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207466.roa
File:                     AS207466.roa (raw, json)
Hash identifier:          vivpN3r8UkKyp2Q1tSraeCkU4FMO42hUxVKMTke8+10=
Subject key identifier:   66:39:4A:1F:41:FF:44:16:EE:53:2F:E2:99:3F:9B:C3:BE:07:08:C3
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       55033C0E240D6F611B3AB7CDFD8F05589E18DEF7
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207466.roa
Signing time:             Thu 03 Jul 2025 15:52:15 +0000
ROA not before:           Thu 03 Jul 2025 15:47:15 +0000
ROA not after:            Thu 02 Jul 2026 15:52:15 +0000
asID:                     207466
IP address blocks:        2a06:a001:a080::/44 maxlen: 48
                          2a06:a005:15d2::/48 maxlen: 48
                          2a06:a005:15d3::/48 maxlen: 48
                          2a06:a005:187a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:03:3c:0e:24:0d:6f:61:1b:3a:b7:cd:fd:8f:05:58:9e:18:de:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jul  3 15:47:15 2025 GMT
            Not After : Jul  2 15:52:15 2026 GMT
        Subject: CN=66394A1F41FF4416EE532FE2993F9BC3BE0708C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b6:f5:3d:46:37:4b:d1:cf:22:9e:0c:92:59:
                    a4:c6:ef:0d:16:f8:47:61:76:9e:d4:b3:30:52:75:
                    de:26:3a:61:78:86:d8:36:87:39:f7:33:35:76:26:
                    e0:70:c1:42:c0:23:45:e9:09:f0:36:d2:3d:05:1c:
                    5d:e5:83:e2:18:aa:f2:82:65:2b:32:4d:c8:7d:5a:
                    be:e2:d3:05:17:02:2d:26:e6:b3:d5:dd:f5:f5:2f:
                    47:a9:fb:97:29:50:04:04:c4:6e:1e:8d:fb:40:2f:
                    d4:f3:2e:b3:17:3c:0e:18:eb:32:80:87:37:1a:ff:
                    90:4c:69:02:0c:31:94:3d:dc:04:25:9e:46:7a:54:
                    f5:f7:f7:93:ce:f5:b1:82:2a:83:6c:5f:94:2d:71:
                    7d:a7:b8:20:e3:86:87:14:c7:ae:6e:b6:d1:c5:51:
                    d1:40:a3:2f:cc:56:07:f2:b1:b6:90:3d:61:7a:96:
                    eb:e6:12:3e:9f:e0:fd:6d:06:89:e6:7b:80:fd:0e:
                    d7:90:fa:d4:6a:df:95:be:9c:1c:f2:e0:0e:1d:d8:
                    95:c5:28:19:ff:c6:b1:19:d7:be:e1:b7:16:b3:65:
                    5b:2e:fe:5b:0b:c2:ea:2c:39:db:6c:f5:77:f7:a4:
                    2e:6a:6f:60:18:60:2c:da:10:69:7e:23:8a:a0:d2:
                    1c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:39:4A:1F:41:FF:44:16:EE:53:2F:E2:99:3F:9B:C3:BE:07:08:C3
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207466.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a001:a080::/44
                  2a06:a005:15d2::/47
                  2a06:a005:187a::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:ce:4a:03:86:42:03:15:c8:8d:b1:62:2e:46:c6:76:ae:67:
         c8:70:dc:2b:6e:bd:01:a5:7b:c2:c5:9e:2d:66:67:ea:e6:1b:
         28:60:c8:bc:0f:18:3b:f1:e6:d3:b3:7a:4d:dc:05:b0:97:65:
         ba:c1:4f:31:11:9d:98:a6:24:fc:39:54:1d:90:75:70:bc:da:
         22:76:84:d9:4f:f7:67:ef:3c:a6:7e:9e:fe:e3:0c:fe:2a:ad:
         6a:7e:9c:6f:d5:17:50:84:b6:18:46:2c:d9:70:dd:ad:b0:be:
         52:23:1e:0f:4d:0f:35:af:7d:c9:51:9f:ab:96:06:ac:00:b6:
         8c:23:da:c4:ad:69:b4:c6:6b:73:0f:87:c5:e9:2e:c0:e4:5a:
         da:63:1c:19:21:ff:2a:24:36:3a:69:94:12:84:ee:7b:2e:9a:
         6c:87:63:09:a2:f0:f9:84:2a:c9:9a:1a:68:4d:6c:3d:51:7c:
         9a:1a:ee:2b:39:d4:20:ea:ad:ff:b0:36:ce:d1:a1:3b:bc:93:
         1b:9c:09:94:a9:11:16:77:0f:78:b8:36:95:cb:37:ce:f4:ac:
         55:8d:1b:6e:e9:74:8a:f7:81:c5:d9:31:ef:17:37:48:57:58:
         42:ce:7b:a8:02:28:3a:3f:38:8c:f4:be:d3:33:ef:0c:b2:de:
         34:17:77:f0
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIUVQM8DiQNb2EbOrfN/Y8FWJ4Y3vcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTA3MDMxNTQ3MTVaFw0yNjA3MDIxNTUyMTVaMDMxMTAvBgNV
BAMTKDY2Mzk0QTFGNDFGRjQ0MTZFRTUzMkZFMjk5M0Y5QkMzQkUwNzA4QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNtvU9RjdL0c8ingySWaTG7w0W
+Edhdp7UszBSdd4mOmF4htg2hzn3MzV2JuBwwULAI0XpCfA20j0FHF3lg+IYqvKC
ZSsyTch9Wr7i0wUXAi0m5rPV3fX1L0ep+5cpUAQExG4ejftAL9TzLrMXPA4Y6zKA
hzca/5BMaQIMMZQ93AQlnkZ6VPX395PO9bGCKoNsX5QtcX2nuCDjhocUx65uttHF
UdFAoy/MVgfysbaQPWF6luvmEj6f4P1tBonme4D9DteQ+tRq35W+nBzy4A4d2JXF
KBn/xrEZ177htxazZVsu/lsLwuosOdts9Xf3pC5qb2AYYCzaEGl+I4qg0hwjAgMB
AAGjggIEMIICADAdBgNVHQ4EFgQUZjlKH0H/RBbuUy/imT+bw74HCMMwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjA3NDY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzAhBAIAAjAbAwcEKgagAaCAAwcBKgagBRXSAwcAKgagBRh6MA0GCSqG
SIb3DQEBCwUAA4IBAQCzzkoDhkIDFciNsWIuRsZ2rmfIcNwrbr0BpXvCxZ4tZmfq
5hsoYMi8Dxg78ebTs3pN3AWwl2W6wU8xEZ2YpiT8OVQdkHVwvNoidoTZT/dn7zym
fp7+4wz+Kq1qfpxv1RdQhLYYRizZcN2tsL5SIx4PTQ81r33JUZ+rlgasALaMI9rE
rWm0xmtzD4fF6S7A5FraYxwZIf8qJDY6aZQShO57Lppsh2MJovD5hCrJmhpoTWw9
UXyaGu4rOdQg6q3/sDbO0aE7vJMbnAmUqREWdw94uDaVyzfO9KxVjRtu6XSK94HF
2THvFzdIV1hCznuoAig6PziM9L7TM+8Mst40F3fw
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:00:43 2025 by rpki-client