Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030303a3a2f33362d3438203d3e20343031353037.roa
File:                     326131343a373538343a363030303a3a2f33362d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          Yz4uCjFPEbepkF+JS8nyKHOdFnGvISeFaxZkZM4zQA8=
Subject key identifier:   7C:06:A9:68:C7:93:37:9C:D0:0E:B4:00:C2:70:6C:2F:FD:9B:80:FB
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       0EDA835A71F9B79B94B94EE8B5FBE1A9BCACD237
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030303a3a2f33362d3438203d3e20343031353037.roa
Signing time:             Mon 10 Mar 2025 11:57:09 +0000
ROA not before:           Mon 10 Mar 2025 11:52:09 +0000
ROA not after:            Mon 09 Mar 2026 11:57:09 +0000
asID:                     401507
IP address blocks:        2a14:7584:6000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Apr 2025 20:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:da:83:5a:71:f9:b7:9b:94:b9:4e:e8:b5:fb:e1:a9:bc:ac:d2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 10 11:52:09 2025 GMT
            Not After : Mar  9 11:57:09 2026 GMT
        Subject: CN=7C06A968C793379CD00EB400C2706C2FFD9B80FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:01:7e:bb:b7:f2:08:9f:04:68:f0:a4:a7:91:
                    30:42:1c:66:ba:56:49:ee:03:33:11:34:82:b5:3b:
                    43:cd:54:da:40:2c:08:4d:d6:2b:64:45:02:57:9b:
                    cb:04:cc:7f:92:1f:ad:80:5f:40:15:e9:71:12:e4:
                    ef:ef:ab:09:ff:e6:12:5a:ea:1f:e1:b0:49:86:40:
                    cc:8a:e3:dd:b9:41:7c:1b:e8:67:a3:b6:d3:9f:ca:
                    9c:ef:4b:ea:ca:85:64:35:36:03:85:91:52:f2:ab:
                    f4:06:fb:93:15:b8:f8:f1:19:2a:b1:66:cb:b4:6f:
                    8e:12:a5:d3:7e:f2:51:5f:f9:4d:b6:f6:2b:d5:50:
                    b8:a4:52:e1:ab:4c:84:ee:67:e3:79:11:7a:69:48:
                    61:c9:a6:26:a1:83:6e:6c:f0:05:6b:65:03:82:77:
                    3e:f7:9d:b5:f5:20:c8:b1:04:76:c0:77:f4:93:4f:
                    8d:15:16:1a:74:66:e9:42:e6:6d:04:bd:4f:e6:ea:
                    cb:df:1a:cf:25:6d:64:ef:50:a3:9a:9e:e1:a9:14:
                    05:fa:b7:27:93:0a:ef:6f:d3:b3:88:10:02:79:0b:
                    07:c2:ea:1e:af:86:d5:65:36:35:7f:e0:b7:29:19:
                    42:88:1a:5b:2a:c3:16:b8:6a:67:1b:c3:67:ff:50:
                    64:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:06:A9:68:C7:93:37:9C:D0:0E:B4:00:C2:70:6C:2F:FD:9B:80:FB
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030303a3a2f33362d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         29:db:a6:7c:d5:06:c3:4b:c2:9c:9c:45:55:4c:3e:9f:26:7d:
         7a:fd:88:a0:5e:18:fb:18:f8:f1:5f:da:0c:ad:99:54:93:ec:
         f3:91:e7:b7:80:b1:96:02:09:c3:77:1f:34:bf:b0:9e:c5:d4:
         ce:55:cf:54:f8:a8:82:f7:ad:41:a3:ec:6e:d9:43:6e:4b:db:
         a5:ef:72:4b:b3:64:a9:38:2d:63:f1:4f:a6:b9:3b:05:d1:6a:
         16:03:f9:55:10:a8:21:aa:f8:72:b4:d4:c4:04:42:83:5b:71:
         5c:49:7e:90:23:3f:c9:ec:8a:1d:7e:c4:90:44:f3:58:ab:fe:
         07:0c:07:05:cf:ac:44:b3:2f:f3:7b:e4:7b:ae:79:3a:7c:4d:
         3f:d9:a1:82:32:e1:a7:93:60:43:ba:a7:21:e1:b8:c3:6e:19:
         1a:ad:04:ff:79:2f:6f:a5:8c:41:dc:fb:29:13:e5:d4:cc:7a:
         d3:65:43:11:b3:f5:1c:33:c3:51:c3:a8:c5:21:ec:1d:0a:08:
         c7:99:7b:8d:fc:8d:91:54:72:ee:18:c9:e0:d3:70:4c:97:ec:
         a5:6c:0a:c8:75:70:93:88:f8:e1:c3:21:e5:9b:ac:be:07:4a:
         3e:14:80:4a:dc:1c:e0:31:72:b7:4c:f4:e0:b4:b6:8d:27:12:
         12:35:34:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:36:16 2025 by rpki-client