Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530303a3a2f34302d3438203d3e20333936393638.roa
File:                     326131343a373538313a333530303a3a2f34302d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          kVNDbL8wWROl5K8KoHfr6RYjHdwPZ7ESKX4cU+b3E1U=
Subject key identifier:   4C:B3:BB:8B:9D:88:1D:FD:4D:2B:F9:F5:A9:F8:6C:F6:D7:16:8F:01
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       2711CEEC902F6274D78B7F889332EA8FC5914149
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530303a3a2f34302d3438203d3e20333936393638.roa
Signing time:             Thu 28 May 2026 09:06:20 +0000
ROA not before:           Thu 28 May 2026 09:01:20 +0000
ROA not after:            Thu 27 May 2027 09:06:20 +0000
asID:                     396968
IP address blocks:        2a14:7581:3500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:11:ce:ec:90:2f:62:74:d7:8b:7f:88:93:32:ea:8f:c5:91:41:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 28 09:01:20 2026 GMT
            Not After : May 27 09:06:20 2027 GMT
        Subject: CN=4CB3BB8B9D881DFD4D2BF9F5A9F86CF6D7168F01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ce:ee:43:52:9d:27:5b:5e:c9:de:4d:ff:69:
                    ab:e9:45:d0:32:0c:45:d3:6f:53:91:c8:e9:5e:0a:
                    b6:33:ea:7c:ef:90:ab:46:69:58:b4:19:a0:ac:cd:
                    ba:20:d8:bf:50:9c:53:73:34:c3:4d:9b:9c:09:eb:
                    d7:de:61:68:b5:44:1a:5d:90:40:9c:29:15:cc:01:
                    72:f6:66:11:6d:7c:31:4f:5f:35:43:6d:bd:52:95:
                    9e:36:6c:06:9b:b9:b8:49:21:c1:d3:78:45:d5:1f:
                    3b:6b:0c:da:1e:24:47:3f:10:46:60:ea:69:27:5f:
                    e5:5a:e5:be:54:3b:17:32:a7:86:e1:24:bd:8c:b2:
                    b1:52:98:bc:65:84:f6:dc:aa:03:48:97:0e:d7:a0:
                    0f:14:da:6c:8c:69:33:89:a0:ca:64:49:c7:82:4d:
                    07:15:35:ff:d1:c2:0a:f9:ad:e5:20:88:a4:a3:73:
                    ee:82:3c:bf:5e:44:a2:f8:22:0f:97:2e:92:3c:30:
                    6c:50:46:8f:0b:9a:59:86:06:20:0f:4d:b3:0e:31:
                    4b:b0:f7:59:b7:c0:c8:74:34:22:c3:7e:21:a4:8a:
                    62:d4:b7:cc:eb:be:bc:8f:65:ad:43:5b:71:95:15:
                    38:89:2c:e6:6a:d1:30:96:62:22:e2:52:61:9d:73:
                    65:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B3:BB:8B:9D:88:1D:FD:4D:2B:F9:F5:A9:F8:6C:F6:D7:16:8F:01
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530303a3a2f34302d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:3500::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:86:4d:67:1a:96:85:be:4a:8e:f3:cb:4e:b1:36:78:f2:c5:
         64:62:68:f8:01:4c:3b:f4:4c:24:7b:38:99:9d:cb:2d:c9:ea:
         e2:33:9b:3f:f7:38:de:d8:a2:4e:6b:8e:f7:b0:6c:3b:6a:04:
         85:38:8d:99:80:ac:2a:05:2b:c9:56:a4:0a:c1:65:2d:07:89:
         19:d5:89:e6:67:3e:44:81:9a:cf:5c:6e:ed:c8:62:da:2c:29:
         1c:f6:89:4f:d9:de:28:72:87:9e:6e:83:4f:a0:d0:28:89:fa:
         fb:77:fd:cc:bd:f4:98:7a:f8:f3:0d:0b:5a:c8:e1:6d:27:a6:
         39:5f:01:18:0f:a4:17:1b:e7:85:df:d8:e2:30:73:1c:c4:d2:
         08:0f:fa:fe:41:f1:00:80:d8:2b:93:46:e0:eb:7e:7c:59:e1:
         34:f2:7f:91:af:4b:c7:01:52:82:db:6c:2c:e8:5b:05:d8:fe:
         7c:49:95:1b:f6:f3:99:ba:aa:37:6e:7a:19:2f:01:0d:77:84:
         f0:1d:26:86:f9:3a:c4:80:69:15:d7:a0:5e:7c:73:e7:b6:e0:
         25:49:57:5d:37:db:3e:80:84:a1:8e:76:ea:5d:32:b3:28:0e:
         c0:53:0e:16:30:61:22:71:a9:32:a1:f1:43:47:a7:e6:ec:cc:
         66:6d:7b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:26:47 2026 by rpki-client