Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613866623a3a2f34382d3438203d3e20323134343935.roa
File:                     326130613a363034343a613866623a3a2f34382d3438203d3e20323134343935.roa (raw, json)
Hash identifier:          Wmhlsy1MexasaVhl7oJHuMuquK34muLDpuJR88SeZfE=
Subject key identifier:   82:2C:80:DE:89:7A:1C:17:AD:DE:38:A2:62:A2:43:58:38:F5:8C:75
Certificate issuer:       /CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B
Certificate serial:       55759F365A02977139221B3B7CE9372F61D5E1B8
Authority key identifier: 6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613866623a3a2f34382d3438203d3e20323134343935.roa
Signing time:             Mon 26 May 2025 07:50:56 +0000
ROA not before:           Mon 26 May 2025 07:45:56 +0000
ROA not after:            Mon 25 May 2026 07:50:56 +0000
asID:                     214495
IP address blocks:        2a0a:6044:a8fb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 13:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:75:9f:36:5a:02:97:71:39:22:1b:3b:7c:e9:37:2f:61:d5:e1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B
        Validity
            Not Before: May 26 07:45:56 2025 GMT
            Not After : May 25 07:50:56 2026 GMT
        Subject: CN=822C80DE897A1C17ADDE38A262A2435838F58C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:f1:aa:db:63:9c:9d:2d:3f:a2:43:4a:1a:
                    0d:3b:35:bf:a6:a3:67:12:9c:57:d6:a1:67:27:d0:
                    6e:22:24:ec:8a:ce:6d:e6:44:e3:94:e2:4c:a4:fe:
                    27:ad:da:78:01:4e:d8:a7:c5:9c:2b:43:cb:62:ba:
                    fe:45:e6:c4:ab:13:dd:d5:aa:7b:67:5f:8c:ff:15:
                    a7:5c:6b:11:a5:50:9d:7b:28:26:40:25:22:ea:c9:
                    8b:60:1c:24:4a:56:35:ee:3a:ca:4b:f2:ca:6c:5f:
                    62:2f:f7:fc:24:1c:d5:5b:08:6c:c2:dc:ea:df:fc:
                    ab:67:c0:a5:11:06:b9:e1:39:2f:f3:18:c1:9e:b4:
                    b8:91:3d:b4:ee:ae:11:28:ee:30:48:5b:4a:15:30:
                    a4:50:32:d8:da:0b:a7:86:0a:26:6d:c7:d5:76:86:
                    94:97:49:92:4f:2e:d9:9c:19:22:7f:3e:19:e7:6a:
                    89:c9:21:8f:e1:66:14:80:04:38:f1:59:2f:90:4b:
                    e4:0d:89:0b:a4:80:47:28:26:bb:18:a9:c7:39:b2:
                    69:8e:c5:8b:da:83:44:da:6b:e9:1b:d9:45:47:36:
                    a1:3f:e9:82:f2:33:5f:06:f9:52:89:1e:c7:5c:e5:
                    c9:fb:ee:b8:d8:f6:e4:65:65:01:1d:a1:2b:1e:95:
                    9d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2C:80:DE:89:7A:1C:17:AD:DE:38:A2:62:A2:43:58:38:F5:8C:75
            X509v3 Authority Key Identifier:
                keyid:6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613866623a3a2f34382d3438203d3e20323134343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a8fb::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:8b:00:94:aa:27:a2:e7:fd:c6:8d:3d:17:81:55:aa:6a:c5:
         ca:e0:09:19:da:61:76:61:0e:35:92:96:c1:67:5e:a5:33:4d:
         63:e2:4d:88:b9:bc:e8:1a:c2:a7:0a:4c:95:66:73:99:e8:7f:
         34:96:8b:9d:ee:63:e4:ca:3c:18:54:7c:81:88:09:5c:f7:20:
         64:63:e9:a6:d2:e8:c9:b3:45:d6:32:bc:9a:9a:9f:a3:31:62:
         41:d2:62:dc:cf:6d:dd:ca:18:f7:53:16:23:42:00:45:50:42:
         3a:65:b8:79:d8:af:c7:b0:73:3b:ed:d0:0c:85:a7:e9:51:da:
         53:4a:5b:1d:e9:b8:bc:9f:d2:af:40:7e:5b:25:5c:fa:e5:2d:
         9f:72:d7:7f:46:37:af:4f:a9:cc:db:b7:97:67:df:c4:6f:77:
         7e:87:fa:22:26:20:4a:9a:01:3a:e7:8b:39:0f:75:03:f4:8a:
         3c:53:99:ee:0f:3b:63:93:25:a0:27:73:8a:12:be:52:47:87:
         6d:c8:68:ef:1f:07:fd:07:43:23:c1:1d:89:e3:23:47:ac:3e:
         05:40:f9:3f:ae:72:0c:48:41:33:c6:fb:02:48:61:e1:fb:a4:
         b6:39:46:1f:4f:32:4b:d1:72:30:3b:ae:82:a3:ba:79:6c:63:
         5a:d8:74:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:34 2025 by rpki-client