Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa
File:                     326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa (raw, json)
Hash identifier:          G0zoH/bSXVa8bPsjD+KTz7+M5ISsfMbmvIPi6yzb9tA=
Subject key identifier:   E0:2F:2C:B6:1C:03:C3:04:4E:56:8B:4E:C9:6A:7A:82:83:06:3B:20
Certificate issuer:       /CN=E9EB50E364277CEB063DCA8C371364FE1CC98844
Certificate serial:       05821913C8D9D4121191542FED133212717C7AA4
Authority key identifier: E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa
Signing time:             Thu 03 Jul 2025 21:58:46 +0000
ROA not before:           Thu 03 Jul 2025 21:53:46 +0000
ROA not after:            Thu 02 Jul 2026 21:58:46 +0000
asID:                     53343
IP address blocks:        2a0a:6044:a880::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 19:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:82:19:13:c8:d9:d4:12:11:91:54:2f:ed:13:32:12:71:7c:7a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9EB50E364277CEB063DCA8C371364FE1CC98844
        Validity
            Not Before: Jul  3 21:53:46 2025 GMT
            Not After : Jul  2 21:58:46 2026 GMT
        Subject: CN=E02F2CB61C03C3044E568B4EC96A7A8283063B20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e0:8c:c8:21:dd:1f:d8:0d:3b:e5:3f:ec:05:
                    f6:9d:4f:6d:fa:c4:40:a6:9d:14:81:37:fb:ed:73:
                    77:60:a1:77:63:fc:e5:81:d7:75:56:8c:c4:3b:d3:
                    59:a3:63:e1:35:37:4a:88:8c:ac:68:99:66:5f:28:
                    c7:cf:ef:59:d9:67:27:b2:0c:f9:60:95:a0:68:45:
                    40:2b:dc:ad:93:64:9f:54:65:f2:a8:30:49:99:a6:
                    0a:f1:b8:fe:3b:68:ec:25:df:ed:ac:2e:d3:e5:e4:
                    9d:3b:d0:56:62:e5:20:6e:72:5c:92:70:76:19:6e:
                    a3:08:9e:d4:6b:d2:b5:a1:26:27:7a:9a:28:01:ea:
                    ed:d7:1c:8d:f2:e5:35:3b:cd:b8:36:72:f3:69:e0:
                    c5:53:ca:c4:0b:56:6e:05:2e:6a:46:20:68:28:41:
                    76:d7:4b:ad:91:65:a6:13:08:26:a0:87:ab:26:ef:
                    16:1d:63:f4:2f:76:fe:eb:c8:ca:8c:09:b2:7f:4b:
                    8c:a5:a3:97:a1:e3:ee:11:97:ff:e6:48:59:0e:8f:
                    81:f1:59:c4:7d:f1:72:1c:42:c5:6e:fb:7f:44:53:
                    ef:7a:48:08:c1:b8:5e:2a:88:f2:34:03:64:b3:50:
                    0a:0b:64:3e:35:8c:4c:94:00:0d:16:ce:35:4b:1f:
                    ad:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2F:2C:B6:1C:03:C3:04:4E:56:8B:4E:C9:6A:7A:82:83:06:3B:20
            X509v3 Authority Key Identifier:
                keyid:E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a880::/44

    Signature Algorithm: sha256WithRSAEncryption
         4f:30:8f:d3:e5:0f:b6:7f:14:07:59:1e:56:9a:9f:ad:f2:6d:
         df:27:ab:72:37:0c:ca:28:c5:1b:80:f8:13:b4:49:ca:d8:dd:
         f8:a1:ce:63:36:13:83:64:58:90:e5:ed:f5:54:09:69:96:21:
         59:4c:7e:53:5d:50:f2:b7:e7:fa:c2:f0:59:84:ee:a7:df:ed:
         bf:ed:2a:cf:ab:70:33:57:ac:86:b6:ee:33:f1:c1:90:fa:07:
         31:49:dd:cb:a0:96:a0:9e:a3:1b:59:74:d7:46:f6:cd:32:d1:
         0d:ef:1c:57:15:f8:b7:1f:87:ed:78:92:15:22:6b:d3:bb:d3:
         8e:7b:cb:da:2e:86:64:d7:97:56:3a:cc:98:6e:b9:42:66:5d:
         c0:12:6a:e6:bc:3d:78:bb:d7:e2:78:6a:f2:19:a1:86:71:0c:
         7a:3e:c9:d4:b1:d0:4e:48:32:b9:3f:cd:7c:27:1b:5c:b8:7c:
         c1:19:0f:80:97:99:6a:46:05:59:02:fb:15:22:29:a4:1b:37:
         c8:c3:91:e4:48:57:0b:fb:22:dd:3c:20:26:41:91:12:45:7b:
         e9:b6:3f:4c:48:55:e3:44:e3:60:44:95:c2:19:a8:0f:d4:27:
         8f:23:bf:ec:d1:69:ea:e1:82:6c:c1:7c:9d:80:50:76:7f:14:
         00:ae:37:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:47:38 2025 by rpki-client