Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613834303a3a2f34332d3433203d3e203533333433.roa
File:                     326130613a363034343a613834303a3a2f34332d3433203d3e203533333433.roa (raw, json)
Hash identifier:          YwN5VXKRuA2ytsXsaIhEWVD7EcVizXTIn2zeRxkXdwE=
Subject key identifier:   7D:BF:4C:76:6D:50:DA:3F:7C:1D:F5:4D:B4:DA:A4:BA:A8:7A:09:A6
Certificate issuer:       /CN=E9EB50E364277CEB063DCA8C371364FE1CC98844
Certificate serial:       238518B2CF4E1828F420396CCDAB388E07D0C418
Authority key identifier: E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613834303a3a2f34332d3433203d3e203533333433.roa
Signing time:             Thu 03 Jul 2025 21:58:45 +0000
ROA not before:           Thu 03 Jul 2025 21:53:45 +0000
ROA not after:            Thu 02 Jul 2026 21:58:45 +0000
asID:                     53343
IP address blocks:        2a0a:6044:a840::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 19:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:85:18:b2:cf:4e:18:28:f4:20:39:6c:cd:ab:38:8e:07:d0:c4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9EB50E364277CEB063DCA8C371364FE1CC98844
        Validity
            Not Before: Jul  3 21:53:45 2025 GMT
            Not After : Jul  2 21:58:45 2026 GMT
        Subject: CN=7DBF4C766D50DA3F7C1DF54DB4DAA4BAA87A09A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0d:a6:2b:64:02:eb:83:ff:2c:e5:75:08:71:
                    d9:d5:38:67:70:ab:3e:d5:92:b4:ea:be:74:64:ed:
                    fa:c0:e7:fc:0a:01:b5:2e:57:bb:24:be:5f:70:de:
                    3b:c7:a9:3a:fd:b4:c0:fc:c3:34:1b:ce:81:e7:62:
                    66:fc:4e:e0:bd:bd:a1:c4:73:c7:c3:1b:c4:22:39:
                    78:f3:74:26:42:fa:a9:9f:5d:4c:eb:57:5f:84:10:
                    e0:dc:b7:ff:6b:af:db:05:ad:2e:97:61:3d:61:99:
                    a9:21:68:ae:9f:8e:1f:8f:81:85:28:9c:99:d8:0c:
                    f9:0f:f2:3e:9b:0d:ba:88:57:d6:3a:c5:1d:05:ee:
                    c3:4e:c9:82:9a:7c:11:d0:2d:b9:e7:ec:f9:e6:0d:
                    89:0c:e0:2c:52:d7:68:73:8c:52:c1:91:de:5b:b5:
                    92:59:c5:91:7c:32:e0:77:5f:a3:72:71:55:2a:da:
                    2d:a2:52:5a:c1:61:f8:29:d1:70:61:c3:1d:49:6b:
                    3d:b1:90:d0:b4:fb:79:27:17:32:ad:e4:5c:fe:ba:
                    aa:f4:67:50:90:a6:96:e5:70:5d:08:aa:2d:ca:39:
                    a2:4e:0c:4a:65:2c:d8:cf:39:0e:1c:c1:16:b2:f1:
                    66:23:e5:17:8a:3f:a2:dc:e5:29:06:3a:02:3a:1f:
                    ff:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BF:4C:76:6D:50:DA:3F:7C:1D:F5:4D:B4:DA:A4:BA:A8:7A:09:A6
            X509v3 Authority Key Identifier:
                keyid:E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613834303a3a2f34332d3433203d3e203533333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a840::/43

    Signature Algorithm: sha256WithRSAEncryption
         ad:07:29:15:2d:ac:ac:ab:66:50:4b:af:6d:3c:79:87:ff:40:
         69:00:85:c1:e3:1d:b6:f6:79:af:08:34:37:45:03:51:73:39:
         d7:d7:8e:49:ba:b3:3c:10:10:b1:81:bc:8c:0e:26:86:d1:5b:
         e7:c8:cd:98:b2:ea:d2:4e:33:d7:f2:a5:80:e8:88:c9:3d:09:
         3e:0f:af:2f:02:52:95:07:41:1e:fc:42:10:f7:37:7d:23:ed:
         9d:9b:1a:6a:0b:da:95:c7:81:6f:c1:cc:32:29:8d:d4:72:f4:
         0c:d0:4f:12:b3:8c:d2:1b:02:12:65:25:70:35:13:fd:55:b7:
         16:3d:ef:36:ef:21:ec:f9:ab:b3:c4:6a:7b:33:a1:cd:7c:4f:
         8e:f7:85:93:a5:5b:ec:f9:87:93:94:6b:52:75:db:70:5c:df:
         ba:60:5b:7d:5d:6f:64:26:7e:89:ca:02:d1:0e:62:f4:bc:72:
         12:9c:28:a2:4c:6f:a0:7e:6c:d8:59:db:c2:7f:c2:27:ff:9d:
         77:22:7e:76:e3:e4:da:ae:7d:6d:3e:f2:9e:27:27:0b:d3:15:
         a8:c0:f6:55:66:b8:28:ad:6c:e0:c7:9d:37:7e:e1:8f:1a:5f:
         c8:3c:b4:fb:e2:98:fc:64:1e:91:f7:fa:64:92:49:1b:18:0d:
         4c:b1:65:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:42:54 2025 by rpki-client