Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063383a3a2f34382d3438203d3e20343031353037.roa
File:                     326131343a373538343a363063383a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          q/du5SGFUBxtNbQYX5NQVZTIS6ysuGqWpH2vyVYcRBU=
Subject key identifier:   74:B9:42:D6:DD:CB:E6:92:5C:D7:6E:DF:39:12:E7:27:92:A9:38:B1
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       0375B47B4C8D43FBC7A4C91160545C890EF83689
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063383a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Sat 22 Mar 2025 15:21:28 +0000
ROA not before:           Sat 22 Mar 2025 15:16:28 +0000
ROA not after:            Sat 21 Mar 2026 15:21:28 +0000
asID:                     401507
IP address blocks:        2a14:7584:60c8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Apr 2025 20:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:75:b4:7b:4c:8d:43:fb:c7:a4:c9:11:60:54:5c:89:0e:f8:36:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Mar 22 15:16:28 2025 GMT
            Not After : Mar 21 15:21:28 2026 GMT
        Subject: CN=74B942D6DDCBE6925CD76EDF3912E72792A938B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:33:5c:b4:57:c3:56:2f:93:61:ea:a0:4e:
                    09:d4:de:53:30:2f:b8:50:8a:78:05:dd:f2:6c:d6:
                    88:ee:e4:09:a4:28:68:18:ab:9a:a3:32:92:81:1b:
                    fb:19:35:a8:dd:9f:b0:c6:1b:08:3e:ea:ed:20:86:
                    e8:58:8d:0c:84:11:94:c7:c3:f8:9e:c2:34:0a:0b:
                    75:80:e3:9b:99:12:3a:95:a0:78:0c:98:ba:55:dd:
                    2b:d9:21:8d:14:3d:89:f6:bf:1a:f6:4e:c1:32:76:
                    83:82:7b:a8:ba:03:41:d8:fc:43:5a:fe:89:ff:e1:
                    10:d1:6e:ca:1f:40:7c:0d:64:37:84:03:84:14:b0:
                    1d:66:59:b5:ef:e8:b6:1c:b2:6e:24:f0:f2:fb:5e:
                    8e:72:36:a5:63:af:96:df:2d:63:6c:f3:64:48:20:
                    69:13:50:52:77:49:05:9e:37:c2:57:63:7f:d3:1e:
                    89:5f:18:2e:3c:c7:27:1c:de:99:08:3d:48:99:f9:
                    da:22:38:fa:92:3a:16:f6:c9:7d:37:91:be:f9:7e:
                    8f:95:1c:3a:7e:3e:bc:96:27:b7:19:bc:5c:1f:ff:
                    c1:ba:be:59:fb:f7:ec:84:2a:eb:e8:bb:c1:ea:0a:
                    b0:01:ef:2f:19:ce:1e:f0:51:dc:ea:77:79:be:8c:
                    f8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B9:42:D6:DD:CB:E6:92:5C:D7:6E:DF:39:12:E7:27:92:A9:38:B1
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063383a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:60c8::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:82:cd:4d:94:f6:94:1a:f6:59:f2:00:50:5e:40:15:ec:30:
         e2:e9:83:5c:1a:93:ef:1a:08:fa:94:12:ac:83:50:1b:5d:d7:
         bc:8b:89:c1:5a:38:30:26:52:d7:5d:aa:8a:6d:04:d7:c1:06:
         b8:c5:df:81:86:09:12:9f:de:eb:e9:a7:06:5e:4c:d2:ec:6c:
         69:a8:88:f8:d9:f4:11:b5:69:3a:25:3f:7e:03:6b:25:35:e1:
         ca:47:c4:ae:c8:fe:15:6c:b0:25:24:56:b8:12:3b:ab:96:55:
         1b:2b:3a:47:56:66:43:93:f4:45:23:bb:2b:31:c1:a4:88:be:
         84:e7:bd:34:36:a8:ec:03:e8:a8:0a:33:04:5b:2c:ef:17:19:
         6d:c5:a9:72:29:32:49:33:0a:ee:05:99:f8:e7:ee:60:47:da:
         66:6a:12:b3:cf:80:60:bb:b6:05:ad:c2:39:f6:9f:05:47:af:
         43:aa:4f:bb:22:01:93:a6:28:6d:c4:53:60:5e:59:c7:f9:7c:
         bc:4b:6c:3f:e7:72:c4:29:b5:5f:fd:93:8a:fc:8f:eb:c2:cb:
         93:9c:29:de:8d:97:a1:c2:34:25:ea:46:e4:5c:73:32:57:2e:
         16:1b:65:f1:15:8f:dd:2a:20:ab:d3:b8:7e:58:57:82:23:50:
         44:67:70:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:36:58 2025 by rpki-client