Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530303a3a2f34302d3438203d3e20343031353037.roa
File:                     326131343a373538313a333530303a3a2f34302d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          afvY2HwQuUeuZxZ7HUoxn7Lq55pm9npx+N8HBm9dPU0=
Subject key identifier:   C3:13:88:D6:3E:4B:6F:9B:7A:8A:45:23:6A:78:6F:A6:93:CB:FA:DA
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       6F4ACFA172A29E9E74A0EFC581D08318727FDEE4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530303a3a2f34302d3438203d3e20343031353037.roa
Signing time:             Thu 28 May 2026 09:06:20 +0000
ROA not before:           Thu 28 May 2026 09:01:20 +0000
ROA not after:            Thu 27 May 2027 09:06:20 +0000
asID:                     401507
IP address blocks:        2a14:7581:3500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4a:cf:a1:72:a2:9e:9e:74:a0:ef:c5:81:d0:83:18:72:7f:de:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 28 09:01:20 2026 GMT
            Not After : May 27 09:06:20 2027 GMT
        Subject: CN=C31388D63E4B6F9B7A8A45236A786FA693CBFADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:01:f3:74:ce:13:bd:d5:6e:16:a0:17:c7:
                    62:e1:9a:fd:97:e3:e6:8c:f3:0c:cf:ce:3f:cb:4c:
                    58:04:84:bc:0f:15:23:dc:ff:3a:1d:05:0c:ce:54:
                    39:1c:7c:8c:13:22:af:43:a0:48:92:4a:d9:52:21:
                    52:02:16:21:1f:c7:39:85:32:99:ee:bb:77:6a:d1:
                    09:50:d9:b7:79:79:73:e0:af:f1:fa:79:91:92:7d:
                    b3:0d:6f:9d:69:ed:e2:ab:d6:47:da:dd:b1:40:b0:
                    35:78:13:4d:97:fb:28:26:8d:83:75:ad:7b:f5:ee:
                    ce:35:98:41:1e:39:15:e5:c4:4f:5d:f5:78:2c:30:
                    0a:c0:71:b8:db:cc:cd:8e:09:a5:23:1c:9e:21:3f:
                    d3:c5:78:bb:0a:19:9f:d8:6a:74:b3:b4:c0:20:03:
                    a0:f4:be:11:44:14:9f:e4:7e:c9:6d:88:7b:42:ea:
                    ba:4d:29:46:c1:b2:46:92:98:ce:74:d6:57:09:0a:
                    65:53:43:6b:c7:bd:34:30:45:f4:8c:d3:ad:30:7a:
                    fd:13:c0:bf:42:b0:1e:89:cb:37:5b:7f:65:67:41:
                    15:a7:50:39:0d:45:b8:4d:7a:cb:51:aa:9e:43:3f:
                    a6:44:f0:57:ee:fa:d1:b8:df:55:b6:9a:ec:30:59:
                    aa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:13:88:D6:3E:4B:6F:9B:7A:8A:45:23:6A:78:6F:A6:93:CB:FA:DA
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530303a3a2f34302d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:3500::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:df:30:da:85:65:db:06:c2:86:68:b0:bd:5a:c7:16:77:ff:
         25:56:b9:77:8e:33:7a:e6:df:97:62:ad:84:5e:17:c0:6f:07:
         0b:75:2c:26:f0:85:cb:5f:a3:04:d0:d6:1e:48:89:df:37:33:
         99:c0:54:b7:08:2a:58:4d:2a:ba:94:0d:a1:d4:75:d0:76:5a:
         8a:35:f4:a0:52:93:a2:8c:3b:c5:57:8e:7f:ef:05:5f:2c:76:
         e2:c3:09:3a:3a:45:19:d0:71:56:d9:12:d9:68:16:70:a6:b5:
         69:c8:20:70:25:38:2c:52:a3:30:83:78:35:61:af:47:d3:3c:
         fe:0e:20:d4:c9:f9:34:e5:1f:00:b6:19:fc:6d:7d:d7:d9:5b:
         39:b1:24:2b:43:73:55:3c:0d:3b:6c:a3:60:32:9d:93:4b:67:
         fb:b4:f0:27:a5:7c:31:8b:96:cb:af:52:bd:d8:fc:d7:c4:f7:
         36:0a:36:d2:9a:7c:0d:cb:80:1e:74:3e:b1:25:79:19:b7:23:
         b9:72:4d:7e:19:03:f8:59:f9:f6:bf:fe:37:cf:e5:9a:16:98:
         e1:4e:ea:6f:88:ac:1b:1a:cb:48:77:1b:06:3f:7e:8d:2a:5e:
         e9:dc:1c:be:0c:a8:36:fb:bf:64:55:73:59:6f:dd:c3:13:89:
         7d:69:8e:90
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUb0rPoXKinp50oO/FgdCDGHJ/3uQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNjA1MjgwOTAxMjBaFw0yNzA1MjcwOTA2MjBaMDMxMTAvBgNV
BAMTKEMzMTM4OEQ2M0U0QjZGOUI3QThBNDUyMzZBNzg2RkE2OTNDQkZBREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCixgHzdM4TvdVuFqAXx2Lhmv2X
4+aM8wzPzj/LTFgEhLwPFSPc/zodBQzOVDkcfIwTIq9DoEiSStlSIVICFiEfxzmF
Mpnuu3dq0QlQ2bd5eXPgr/H6eZGSfbMNb51p7eKr1kfa3bFAsDV4E02X+ygmjYN1
rXv17s41mEEeORXlxE9d9XgsMArAcbjbzM2OCaUjHJ4hP9PFeLsKGZ/YanSztMAg
A6D0vhFEFJ/kfsltiHtC6rpNKUbBskaSmM501lcJCmVTQ2vHvTQwRfSM060wev0T
wL9CsB6Jyzdbf2VnQRWnUDkNRbhNestRqp5DP6ZE8Ffu+tG431W2muwwWap7AgMB
AAGjggJpMIICZTAdBgNVHQ4EFgQUwxOI1j5Lb5t6ikUjanhvppPL+towHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzEzYTMzMzUzMDMwM2EzYTJm
MzQzMDJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gTUw
DQYJKoZIhvcNAQELBQADggEBABnfMNqFZdsGwoZosL1axxZ3/yVWuXeOM3rm35di
rYReF8BvBwt1LCbwhctfowTQ1h5Iid83M5nAVLcIKlhNKrqUDaHUddB2Woo19KBS
k6KMO8VXjn/vBV8sduLDCTo6RRnQcVbZEtloFnCmtWnIIHAlOCxSozCDeDVhr0fT
PP4OINTJ+TTlHwC2GfxtfdfZWzmxJCtDc1U8DTtso2AynZNLZ/u08CelfDGLlsuv
Ur3Y/NfE9zYKNtKafA3LgB50PrEleRm3I7lyTX4ZA/hZ+fa//jfP5ZoWmOFO6m+I
rBsay0h3GwY/fo0qXuncHL4MqDb7v2RVc1lv3cMTiX1pjpA=
-----END CERTIFICATE-----
Generated at Sat Jun 6 05:27:21 2026 by rpki-client