Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613838303a3a2f34332d3433203d3e203533333433.roa
File:                     326130613a363034343a613838303a3a2f34332d3433203d3e203533333433.roa (raw, json)
Hash identifier:          aVrMh8neYSAJZJNMsJHXuG1FOsph/b6J1zm/1t3TlUc=
Subject key identifier:   09:5C:D8:76:A4:8E:A3:B1:C2:90:4F:7F:68:B0:94:D2:EC:21:58:C1
Certificate issuer:       /CN=E9EB50E364277CEB063DCA8C371364FE1CC98844
Certificate serial:       4AFAA0A76BB63CB9B974D6C8B7B65A4A8055D840
Authority key identifier: E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613838303a3a2f34332d3433203d3e203533333433.roa
Signing time:             Thu 03 Jul 2025 21:58:45 +0000
ROA not before:           Thu 03 Jul 2025 21:53:45 +0000
ROA not after:            Thu 02 Jul 2026 21:58:45 +0000
asID:                     53343
IP address blocks:        2a0a:6044:a880::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 19:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fa:a0:a7:6b:b6:3c:b9:b9:74:d6:c8:b7:b6:5a:4a:80:55:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9EB50E364277CEB063DCA8C371364FE1CC98844
        Validity
            Not Before: Jul  3 21:53:45 2025 GMT
            Not After : Jul  2 21:58:45 2026 GMT
        Subject: CN=095CD876A48EA3B1C2904F7F68B094D2EC2158C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:47:2a:0c:18:f6:9c:56:4a:bf:fc:14:88:5e:
                    34:c1:4f:b1:40:72:eb:8e:d5:b2:87:fc:9a:d8:b8:
                    50:a9:ba:e2:a6:37:8c:2b:5a:b1:82:73:29:f8:4e:
                    53:f5:15:93:6a:a1:09:7d:9f:55:05:51:02:11:be:
                    b7:4a:2b:bc:34:b3:d9:3a:bf:c3:2a:d9:a0:e1:05:
                    fc:02:1d:7d:40:2e:cc:b0:51:57:af:df:5b:45:90:
                    40:53:15:f5:13:11:90:11:32:c9:05:8c:05:82:d5:
                    29:47:75:0f:9e:f8:ff:89:e9:da:8b:25:75:da:07:
                    0a:2a:6d:d2:80:cf:cf:34:d3:dc:31:a8:d0:38:e0:
                    37:4b:96:69:66:6f:13:94:17:ad:a8:a7:1c:a3:5b:
                    86:d8:9e:dd:18:aa:d3:b1:c3:b8:39:f2:92:a8:af:
                    90:e8:0e:5b:8a:4d:ed:c2:24:2e:91:5e:bc:ea:eb:
                    94:e9:d6:1f:c7:25:51:e9:4f:60:a7:80:f8:dd:fd:
                    90:b5:fa:96:67:1c:64:1c:49:86:ad:18:25:07:d4:
                    7f:ed:68:74:72:e4:7f:d2:b6:f6:6a:eb:62:cb:be:
                    32:cd:71:82:09:b0:61:79:e5:6f:29:6f:2d:86:cd:
                    f1:89:07:ef:8a:5d:09:30:cb:0f:66:bc:9e:8a:a2:
                    6d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5C:D8:76:A4:8E:A3:B1:C2:90:4F:7F:68:B0:94:D2:EC:21:58:C1
            X509v3 Authority Key Identifier:
                keyid:E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613838303a3a2f34332d3433203d3e203533333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a880::/43

    Signature Algorithm: sha256WithRSAEncryption
         10:4a:ba:53:63:b7:fe:37:66:59:3c:34:d8:91:47:d9:f2:67:
         44:d9:54:86:d0:ca:7c:f2:c7:4a:6a:3b:d2:7d:1b:77:e8:d1:
         75:38:27:08:fb:c4:b6:15:44:7f:7e:23:38:63:ae:52:c4:39:
         48:d2:2d:e2:50:4e:41:d2:21:87:8b:e8:4e:5b:99:b4:5a:03:
         f9:3f:38:f4:cf:96:f7:3a:ee:0f:be:b7:61:88:0e:57:a1:7e:
         63:b8:c3:98:ba:ca:ef:af:93:33:11:fd:6c:33:98:17:77:a3:
         76:b8:d2:66:35:11:25:48:8e:9e:f0:75:9f:9d:45:7b:57:69:
         0b:48:79:dd:bf:fe:72:e8:b4:ca:bf:ce:df:e8:6b:d5:e7:1a:
         6a:20:47:2c:16:a9:4d:2b:0e:7d:ae:d9:e9:d8:4c:74:8a:56:
         79:d8:02:d1:b9:d4:41:98:34:8a:7b:e5:d7:7c:aa:9c:71:e1:
         47:41:db:bd:7a:35:a0:0a:f1:d7:16:d3:6d:e7:ee:48:2b:05:
         ca:1b:81:72:eb:4b:b7:83:23:db:5f:17:78:0c:9a:e1:d8:7d:
         6f:0e:a8:61:ec:f3:32:dd:82:75:76:c3:93:27:d4:d9:19:36:
         ac:c7:a0:f7:a5:35:e4:f9:4a:a4:29:8b:98:9e:f0:da:fd:83:
         97:6c:6b:ed
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIUSvqgp2u2PLm5dNbIt7ZaSoBV2EAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlFQjUwRTM2NDI3N0NFQjA2M0RDQThDMzcxMzY0RkUx
Q0M5ODg0NDAeFw0yNTA3MDMyMTUzNDVaFw0yNjA3MDIyMTU4NDVaMDMxMTAvBgNV
BAMTKDA5NUNEODc2QTQ4RUEzQjFDMjkwNEY3RjY4QjA5NEQyRUMyMTU4QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDERyoMGPacVkq//BSIXjTBT7FA
cuuO1bKH/JrYuFCpuuKmN4wrWrGCcyn4TlP1FZNqoQl9n1UFUQIRvrdKK7w0s9k6
v8Mq2aDhBfwCHX1ALsywUVev31tFkEBTFfUTEZARMskFjAWC1SlHdQ+e+P+J6dqL
JXXaBwoqbdKAz88009wxqNA44DdLlmlmbxOUF62opxyjW4bYnt0YqtOxw7g58pKo
r5DoDluKTe3CJC6RXrzq65Tp1h/HJVHpT2CngPjd/ZC1+pZnHGQcSYatGCUH1H/t
aHRy5H/StvZq62LLvjLNcYIJsGF55W8pby2GzfGJB++KXQkwyw9mvJ6Kom2HAgMB
AAGjggI4MIICNDAdBgNVHQ4EFgQUCVzYdqSOo7HCkE9/aLCU0uwhWMEwHwYDVR0j
BBgwFoAU6etQ42QnfOsGPcqMNxNk/hzJiEQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQzZDU4MzZmZjFiMjkvNC9FOUVCNTBFMzY0
Mjc3Q0VCMDYzRENBOEMzNzEzNjRGRTFDQzk4ODQ0LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81L0U5RUI1MEUzNjQyNzdDRUIwNjNEQ0E4QzM3MTM2NEZFMUNDOTg4NDQu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQz
ZDU4MzZmZjFiMjkvNC8zMjYxMzA2MTNhMzYzMDM0MzQzYTYxMzgzODMwM2EzYTJm
MzQzMzJkMzQzMzIwM2QzZTIwMzUzMzMzMzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBSoKYESogDAN
BgkqhkiG9w0BAQsFAAOCAQEAEEq6U2O3/jdmWTw02JFH2fJnRNlUhtDKfPLHSmo7
0n0bd+jRdTgnCPvEthVEf34jOGOuUsQ5SNIt4lBOQdIhh4voTluZtFoD+T849M+W
9zruD763YYgOV6F+Y7jDmLrK76+TMxH9bDOYF3ejdrjSZjURJUiOnvB1n51Fe1dp
C0h53b/+cui0yr/O3+hr1ecaaiBHLBapTSsOfa7Z6dhMdIpWedgC0bnUQZg0invl
13yqnHHhR0HbvXo1oArx1xbTbefuSCsFyhuBcutLt4Mj218XeAya4dh9bw6oYezz
Mt2CdXbDkyfU2Rk2rMeg96U15PlKpCmLmJ7w2v2Dl2xr7Q==
-----END CERTIFICATE-----
Generated at Sat Jul 5 08:45:29 2025 by rpki-client