Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366265303a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538343a366265303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          tfM75Sc4fEEhNkHpFquhcielDdz9wGBYQYVZOx4i0PA=
Subject key identifier:   AB:3E:F5:64:5D:35:D3:48:81:87:07:E1:0A:AD:41:B3:CD:92:46:02
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       6E797442C91FFDD42742382001464A000732127D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366265303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Sat 01 Feb 2025 19:33:45 +0000
ROA not before:           Sat 01 Feb 2025 19:28:45 +0000
ROA not after:            Sat 31 Jan 2026 19:33:45 +0000
asID:                     16909
IP address blocks:        2a14:7584:6be0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Feb 2025 13:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:79:74:42:c9:1f:fd:d4:27:42:38:20:01:46:4a:00:07:32:12:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Feb  1 19:28:45 2025 GMT
            Not After : Jan 31 19:33:45 2026 GMT
        Subject: CN=AB3EF5645D35D348818707E10AAD41B3CD924602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c1:b2:54:f8:83:cf:a0:0b:45:b1:c8:dd:33:
                    f5:e4:84:a1:dd:69:c6:be:2c:15:a8:f2:ee:cb:c3:
                    ef:b4:42:9c:bf:4a:db:da:8f:dc:84:3c:a7:c5:3c:
                    55:85:15:c2:7e:a7:95:d8:15:b8:e1:12:23:00:e6:
                    ab:1c:8c:e3:47:cf:bc:d1:2b:fa:4b:2b:50:30:2d:
                    79:8f:96:0d:0f:e9:7d:aa:18:4c:8e:5d:cf:ad:08:
                    a9:62:e2:ad:34:a7:14:19:5e:51:bf:94:f7:92:bf:
                    5e:bb:4e:b7:87:27:d1:ff:f0:00:ac:1a:bd:9f:0f:
                    8d:52:91:32:c2:cb:5f:03:b2:ca:e6:2b:99:01:9a:
                    86:cb:72:76:9f:8d:f9:2b:4b:21:ed:92:26:f1:80:
                    e6:a2:ad:1f:fa:ed:d3:38:ec:cd:6f:de:63:73:4d:
                    f0:6c:80:5a:bd:55:89:40:e7:02:4f:af:14:68:d5:
                    2e:91:2c:71:4b:97:ac:1b:ae:eb:54:83:8b:7c:97:
                    25:4b:82:20:6b:c3:47:60:38:9a:0b:c6:fa:24:66:
                    ce:e4:8f:03:9a:7f:f8:74:2c:c2:15:5f:b4:20:5e:
                    50:cb:75:ae:7f:d9:83:b4:94:5b:96:bb:2c:b2:1a:
                    61:07:c8:ab:37:25:70:9a:31:4b:8a:25:b5:aa:ce:
                    d8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3E:F5:64:5D:35:D3:48:81:87:07:E1:0A:AD:41:B3:CD:92:46:02
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366265303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6be0::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:ed:5e:65:34:af:e8:8f:ac:fc:eb:05:57:56:e9:b2:07:02:
         21:48:99:7e:6c:ee:c1:2b:28:52:87:98:e0:ae:ed:e9:1f:52:
         b8:20:31:c4:05:58:99:f8:e5:cf:e7:2e:ae:23:52:69:a2:8a:
         9f:16:44:5e:44:58:fb:1d:18:7a:97:c4:fd:10:e8:c9:c5:85:
         4f:0c:e7:fd:80:0c:24:07:ef:55:a4:e7:0b:58:22:38:86:d2:
         df:4c:79:b6:0d:35:41:82:7f:a8:21:62:22:a0:2e:83:6e:7b:
         b0:1e:55:03:cd:86:b1:a6:6b:3e:94:6b:96:6c:c7:43:4b:51:
         0a:9c:b0:15:60:55:73:df:06:d0:b6:5c:0f:8a:49:5c:72:b1:
         af:33:47:87:2f:8e:17:2b:b3:ab:e8:e6:8f:62:39:e2:f9:81:
         83:3a:f6:b4:3c:39:66:44:54:92:5f:2a:97:9f:37:a8:45:2e:
         cb:82:10:f3:a9:89:2a:63:79:d1:18:40:34:f5:7d:4b:c6:8a:
         5d:18:01:93:f8:af:a5:39:ad:ac:47:03:5d:c5:74:b8:25:3e:
         ae:66:5c:1b:98:bb:e5:eb:cd:71:7e:4c:8a:b3:27:96:44:5c:
         99:0d:4b:7a:12:db:e0:4b:0e:7d:d1:aa:3e:22:16:25:0f:a0:
         01:f7:6f:8a
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUbnl0Qskf/dQnQjggAUZKAAcyEn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAyMDExOTI4NDVaFw0yNjAxMzExOTMzNDVaMDMxMTAvBgNV
BAMTKEFCM0VGNTY0NUQzNUQzNDg4MTg3MDdFMTBBQUQ0MUIzQ0Q5MjQ2MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbwbJU+IPPoAtFscjdM/XkhKHd
aca+LBWo8u7Lw++0Qpy/Stvaj9yEPKfFPFWFFcJ+p5XYFbjhEiMA5qscjONHz7zR
K/pLK1AwLXmPlg0P6X2qGEyOXc+tCKli4q00pxQZXlG/lPeSv167TreHJ9H/8ACs
Gr2fD41SkTLCy18DssrmK5kBmobLcnafjfkrSyHtkibxgOairR/67dM47M1v3mNz
TfBsgFq9VYlA5wJPrxRo1S6RLHFLl6wbrutUg4t8lyVLgiBrw0dgOJoLxvokZs7k
jwOaf/h0LMIVX7QgXlDLda5/2YO0lFuWuyyyGmEHyKs3JXCaMUuKJbWqztj9AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUqz71ZF0100iBhwfhCq1Bs82SRgIwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjI2NTMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRr4DAN
BgkqhkiG9w0BAQsFAAOCAQEAk+1eZTSv6I+s/OsFV1bpsgcCIUiZfmzuwSsoUoeY
4K7t6R9SuCAxxAVYmfjlz+curiNSaaKKnxZEXkRY+x0YepfE/RDoycWFTwzn/YAM
JAfvVaTnC1giOIbS30x5tg01QYJ/qCFiIqAug257sB5VA82GsaZrPpRrlmzHQ0tR
CpywFWBVc98G0LZcD4pJXHKxrzNHhy+OFyuzq+jmj2I54vmBgzr2tDw5ZkRUkl8q
l583qEUuy4IQ86mJKmN50RhANPV9S8aKXRgBk/ivpTmtrEcDXcV0uCU+rmZcG5i7
5evNcX5MirMnlkRcmQ1LehLb4EsOfdGqPiIWJQ+gAfdvig==
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:45:07 2025 by rpki-client