Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363566303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a363566303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          EiIGPu5o0gmfx4LaFnhHevYoLFdadNQjmd1RpgR2iXc=
Subject key identifier:   22:93:B9:AC:06:7F:8C:38:F3:FA:05:34:61:88:69:51:49:9E:02:BD
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       26A49EE227AE2023490B3C4FFA28A5BDC66B9491
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363566303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sun 22 Dec 2024 10:13:49 +0000
ROA not before:           Sun 22 Dec 2024 10:08:49 +0000
ROA not after:            Sun 21 Dec 2025 10:13:49 +0000
asID:                     16909
IP address blocks:        2a14:7584:65f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Feb 2025 13:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a4:9e:e2:27:ae:20:23:49:0b:3c:4f:fa:28:a5:bd:c6:6b:94:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Dec 22 10:08:49 2024 GMT
            Not After : Dec 21 10:13:49 2025 GMT
        Subject: CN=2293B9AC067F8C38F3FA053461886951499E02BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1c:4c:b2:28:21:22:e5:43:87:fe:9e:eb:ed:
                    d9:91:bf:27:5f:c8:70:3b:06:10:71:1f:15:a3:83:
                    5e:66:ed:02:63:1f:f1:f9:68:2f:47:79:fa:d3:ef:
                    67:46:5f:ff:24:6f:70:1f:0a:21:e2:96:28:97:b1:
                    00:21:5d:f3:82:a4:b8:42:db:06:e7:57:59:0c:f3:
                    96:ad:c1:b3:d9:d0:a3:cc:63:22:35:47:9f:8e:75:
                    01:bc:06:d8:48:32:7c:ed:9c:ac:a3:98:93:25:d1:
                    8b:e3:aa:88:21:82:c1:8f:78:eb:69:3e:80:0f:84:
                    e1:5e:c2:bc:59:5d:9a:02:cb:cb:a3:b5:ef:7c:a7:
                    cb:84:d4:2d:1a:02:dc:4e:bf:08:0b:18:a5:a2:e9:
                    c5:15:d6:f2:ca:06:f8:30:60:db:f5:21:78:e5:1d:
                    61:0b:02:67:c2:e8:2c:8a:46:38:24:15:d0:7f:6b:
                    2e:95:85:fb:07:19:39:87:5f:2d:e6:f1:03:89:75:
                    d5:bc:b5:27:e1:d1:dc:25:d4:c3:d6:6b:81:95:9f:
                    eb:19:2a:f8:5b:08:33:82:7c:8e:de:07:e0:a4:fe:
                    d7:1e:94:f9:21:b6:a0:ba:f8:70:19:16:70:fc:8a:
                    55:6b:e6:f1:e4:63:ef:3e:1e:b4:78:af:3c:25:6e:
                    b7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:93:B9:AC:06:7F:8C:38:F3:FA:05:34:61:88:69:51:49:9E:02:BD
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363566303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:65f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:54:2c:21:87:22:14:1d:b5:ce:bc:fb:1d:fa:56:25:f4:eb:
         36:b8:d2:33:cb:06:6a:18:31:cd:43:a5:23:e3:86:f9:c7:b7:
         b6:72:4d:52:78:0b:36:c7:67:b1:7d:ef:33:19:50:a8:06:01:
         a7:a7:b6:46:45:08:f5:c1:29:ef:95:da:c7:ca:5a:68:d2:dd:
         d4:fa:0f:27:4b:33:b4:77:1d:55:b2:fd:ce:5c:92:c6:3c:c9:
         09:c9:b3:6f:a2:5c:70:e1:06:8b:fb:6c:10:a4:dc:7a:25:96:
         11:3a:3a:de:a7:37:aa:a3:20:8d:06:8e:24:82:09:1b:d4:24:
         42:bb:d7:e6:98:7b:f7:89:9c:72:b8:d6:6f:19:02:de:8f:b0:
         53:d6:3a:2a:5e:6c:36:7a:d2:fb:cf:d4:65:46:de:7b:61:02:
         78:a1:a9:44:b0:00:bc:0c:b2:c7:b9:f4:3d:b1:d1:50:25:77:
         53:f5:4c:f6:26:e1:9b:02:a7:bb:6b:0d:71:45:aa:9a:75:c1:
         41:a6:92:6f:6f:53:a1:45:94:6b:6e:26:4d:d0:24:3b:a2:8f:
         69:19:fc:e7:a3:d2:1d:be:b7:81:2a:6b:25:22:a3:b4:b4:39:
         44:e4:3d:ee:93:7e:d0:79:92:9c:55:b6:22:4b:9d:02:98:64:
         5f:11:24:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:50:24 2025 by rpki-client