Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333538643a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538313a333538643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          a6t/Pdfg0OqJvTigiTtEJGz52iWdSeiiENMe95dyffM=
Subject key identifier:   F6:75:9A:03:58:9C:D8:F2:FE:83:10:46:4A:F6:0B:8A:DC:50:27:24
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       22BD0E99CD4AC527A6A21CC55D4CCAA877757E16
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333538643a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 28 May 2026 09:06:20 +0000
ROA not before:           Thu 28 May 2026 09:01:20 +0000
ROA not after:            Thu 27 May 2027 09:06:20 +0000
asID:                     16909
IP address blocks:        2a14:7581:358d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bd:0e:99:cd:4a:c5:27:a6:a2:1c:c5:5d:4c:ca:a8:77:75:7e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: May 28 09:01:20 2026 GMT
            Not After : May 27 09:06:20 2027 GMT
        Subject: CN=F6759A03589CD8F2FE8310464AF60B8ADC502724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:70:83:db:3e:c5:60:d5:c6:07:2d:18:82:c3:
                    b4:a8:dc:92:a3:67:9e:a3:6a:e5:4d:b2:23:b7:7b:
                    54:0b:b6:b1:b1:6c:4a:1d:ca:2b:96:e5:d9:dc:39:
                    33:b3:ee:19:9c:a6:ea:2b:af:ad:8b:af:8c:cf:98:
                    41:df:44:9d:6b:1b:2c:ad:b9:76:ab:65:56:fd:c0:
                    fe:5d:fe:81:bc:68:00:5b:f2:62:21:bd:86:7d:bc:
                    00:04:fc:dd:bf:45:95:0a:c7:d4:47:cf:ae:85:d0:
                    ce:13:da:85:48:9b:56:b0:d5:98:8b:ee:e5:f1:b0:
                    e5:c2:b1:72:57:4e:41:b2:38:45:1f:4c:f7:7c:0d:
                    c1:3c:4c:8c:7c:93:e4:44:df:da:af:dd:87:02:6a:
                    96:3b:6b:84:56:69:b5:48:7b:e0:b0:e9:38:9d:c3:
                    d4:08:f2:85:95:dd:d2:c0:52:02:7a:9c:79:99:8f:
                    e4:3a:bc:5f:e5:74:1b:89:f5:13:1e:2b:64:1e:5b:
                    d5:04:4c:65:67:1e:d7:28:3c:e9:90:1d:a5:51:8f:
                    8e:fc:77:df:5f:b9:79:92:a2:40:7d:e2:46:24:9b:
                    7f:24:79:68:4d:20:32:ff:87:f3:9f:ee:1d:66:f6:
                    ad:58:49:d4:4f:e4:7e:55:91:a2:16:2b:67:20:37:
                    3d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:75:9A:03:58:9C:D8:F2:FE:83:10:46:4A:F6:0B:8A:DC:50:27:24
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333538643a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:358d::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:09:63:1e:8b:b4:d0:f4:cf:52:f3:f9:58:8e:68:cc:62:0d:
         7f:7f:0d:7c:19:45:ab:bb:0d:2f:1f:e9:1f:17:3d:c7:a6:75:
         1c:c9:8e:40:d7:ea:a6:35:7a:ce:b5:99:a2:44:da:32:3f:85:
         71:24:97:0d:3f:fb:69:7f:e1:ca:bc:5c:50:31:96:51:7f:88:
         4b:1d:e3:c4:4b:57:fe:5a:1d:47:98:94:11:24:7c:e3:76:86:
         ba:b8:75:2e:48:ba:67:c6:a9:c9:b8:ad:68:15:e1:f0:d8:77:
         0e:33:eb:5a:98:86:22:f5:01:e1:93:46:db:96:3b:89:17:ce:
         99:7b:fd:4b:81:0d:6d:16:b2:b8:ab:9d:4b:39:43:3e:cf:42:
         74:3f:03:ed:04:5e:63:7f:aa:e8:6c:46:0c:40:23:9b:88:e4:
         8f:75:05:ef:9d:e2:3d:75:47:59:6d:21:4f:c6:f8:d3:9a:8c:
         a2:ed:c1:5e:1c:b5:f4:25:1c:f7:fb:4e:e4:a1:05:ad:51:09:
         a4:8f:86:fc:2d:27:3d:93:08:d3:af:c8:4e:0c:3f:0f:0b:0e:
         42:5d:ce:34:a1:be:62:27:b2:e9:1a:a3:17:9b:84:8e:a1:ee:
         2c:ff:a2:bf:b0:88:15:08:61:52:e7:ea:f2:cd:14:21:63:07:
         3a:a7:44:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:27:23 2026 by rpki-client