Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a643165303a3a2f33322d3332203d3e203132383433.roa
File:                     326130303a643165303a3a2f33322d3332203d3e203132383433.roa (raw, json)
Hash identifier:          Nee41wiY84MmOJTvAQjqhg/npEpeQZj+k8enzepfp4Y=
Subject key identifier:   7D:49:2F:E2:22:CA:FE:4C:3A:E7:52:B1:54:90:62:E1:86:78:DA:3F
Certificate issuer:       /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial:       31A419E1C7071CAE921F93FA24F3AAE046DA956C
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a643165303a3a2f33322d3332203d3e203132383433.roa
Signing time:             Thu 25 Jun 2026 19:29:04 +0000
ROA not before:           Thu 25 Jun 2026 19:24:04 +0000
ROA not after:            Thu 24 Jun 2027 19:29:04 +0000
asID:                     12843
IP address blocks:        2a00:d1e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a4:19:e1:c7:07:1c:ae:92:1f:93:fa:24:f3:aa:e0:46:da:95:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
        Validity
            Not Before: Jun 25 19:24:04 2026 GMT
            Not After : Jun 24 19:29:04 2027 GMT
        Subject: CN=7D492FE222CAFE4C3AE752B1549062E18678DA3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4a:44:eb:ce:36:4e:c6:6a:1c:f7:98:e5:4f:
                    60:0c:79:76:79:7c:59:58:a2:95:64:1e:64:e8:47:
                    7a:76:fb:81:c6:a5:98:52:c7:f1:55:c7:04:72:b7:
                    7b:b7:7d:92:96:04:07:7e:8b:ec:13:a4:4c:da:95:
                    b5:33:9c:6a:07:a7:f4:81:0d:91:19:e7:7d:61:5e:
                    c7:f0:85:c9:9a:b1:0f:e0:d5:55:c6:72:13:30:42:
                    29:03:d3:60:b8:22:08:be:0d:f7:bc:7f:65:a9:45:
                    0c:75:c5:79:7f:2e:11:c5:85:b9:63:61:8a:18:b4:
                    d7:aa:0e:85:1c:ef:af:0c:d5:b0:ed:40:dd:06:c2:
                    12:1c:41:e0:4f:6c:9f:57:b1:d7:43:9b:bf:05:c1:
                    c7:4f:61:40:cc:82:bf:25:39:5a:fc:84:90:ce:39:
                    b5:c3:9d:65:0d:57:a8:bc:00:19:a4:0f:33:e9:82:
                    81:1b:cd:1d:d8:ba:b4:61:3d:32:67:61:10:f5:e8:
                    f8:42:92:e4:5f:15:82:fc:1b:8e:d1:79:c4:a3:69:
                    84:7c:92:27:55:d5:02:af:a6:e0:a6:59:18:6b:03:
                    2a:41:3b:8e:f5:b9:04:4f:67:87:e7:a3:fe:98:41:
                    1f:75:28:4a:e5:8f:c6:56:7a:d1:2b:5c:8c:50:a7:
                    e1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:49:2F:E2:22:CA:FE:4C:3A:E7:52:B1:54:90:62:E1:86:78:DA:3F
            X509v3 Authority Key Identifier:
                keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a643165303a3a2f33322d3332203d3e203132383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:d1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:22:52:61:9b:f7:e2:1f:46:c6:90:0f:c1:0a:a4:e4:bc:d2:
         8f:3b:ba:b8:dc:8b:c0:28:65:d8:cc:45:f7:f2:5e:72:79:28:
         bc:7e:2d:84:a2:7a:93:35:57:37:ec:9a:23:01:bf:c4:ea:46:
         2c:a8:0d:cf:56:6f:20:82:3c:de:e2:d0:e9:d3:33:f2:94:73:
         aa:ec:50:f5:12:5e:4a:99:3b:b1:75:57:a2:a8:b5:40:8c:cc:
         88:a1:2b:8b:ea:7a:18:e0:89:8d:86:03:37:15:70:a8:de:ea:
         ae:15:83:40:94:b9:30:c9:25:57:3f:68:05:90:e9:eb:e5:e3:
         f8:fe:14:3e:0d:e3:f5:31:00:63:65:04:4b:3c:06:bc:59:61:
         3e:6b:1f:0a:a9:46:0a:8e:22:62:1b:e9:71:11:74:a6:ff:7a:
         cc:ae:4f:1c:b6:46:dc:32:86:ec:4d:01:a2:1f:6f:87:5e:16:
         7f:90:15:9e:b1:f1:69:44:bb:e0:b8:df:18:8d:e8:48:b3:4f:
         f7:e4:88:b4:9f:ad:38:3a:06:16:c6:d3:1c:fa:bc:14:28:c8:
         cf:11:60:e5:7c:5e:2f:c7:a6:99:b0:5a:89:80:41:af:15:28:
         87:f0:9d:b0:09:aa:45:ab:56:cd:15:b7:65:a7:c3:bd:ef:1d:
         23:ec:eb:df
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUMaQZ4ccHHK6SH5P6JPOq4EbalWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWIyYzdlNjI1MDNiMDYzNGViNGFiNTNmODhjMDY5NTBh
Yzc2ZGNkMTAeFw0yNjA2MjUxOTI0MDRaFw0yNzA2MjQxOTI5MDRaMDMxMTAvBgNV
BAMTKDdENDkyRkUyMjJDQUZFNEMzQUU3NTJCMTU0OTA2MkUxODY3OERBM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLSkTrzjZOxmoc95jlT2AMeXZ5
fFlYopVkHmToR3p2+4HGpZhSx/FVxwRyt3u3fZKWBAd+i+wTpEzalbUznGoHp/SB
DZEZ531hXsfwhcmasQ/g1VXGchMwQikD02C4Igi+Dfe8f2WpRQx1xXl/LhHFhblj
YYoYtNeqDoUc768M1bDtQN0GwhIcQeBPbJ9XsddDm78FwcdPYUDMgr8lOVr8hJDO
ObXDnWUNV6i8ABmkDzPpgoEbzR3YurRhPTJnYRD16PhCkuRfFYL8G47RecSjaYR8
kidV1QKvpuCmWRhrAypBO471uQRPZ4fno/6YQR91KErlj8ZWetErXIxQp+GlAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUfUkv4iLK/kw651KxVJBi4YZ42j8wHwYDVR0j
BBgwFoAU6yx+YlA7BjTrSrU/iMBpUKx23NEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEwODRiODYvMS9FQjJDN0U2MjUw
M0IwNjM0RUI0QUI1M0Y4OEMwNjk1MEFDNzZEQ0QxLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNnl4LVlsQTdCalRyU3JVX2lNQnBVS3gyM05FLmNlcjCBoAYIKwYB
BQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2
LzEvMzI2MTMwMzAzYTY0MzE2NTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzEz
MjM4MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcB
BwEB/wQRMA8wDQQCAAIwBwMFACoA0eAwDQYJKoZIhvcNAQELBQADggEBAEoiUmGb
9+IfRsaQD8EKpOS80o87urjci8AoZdjMRffyXnJ5KLx+LYSiepM1VzfsmiMBv8Tq
RiyoDc9WbyCCPN7i0OnTM/KUc6rsUPUSXkqZO7F1V6KotUCMzIihK4vqehjgiY2G
AzcVcKje6q4Vg0CUuTDJJVc/aAWQ6evl4/j+FD4N4/UxAGNlBEs8BrxZYT5rHwqp
RgqOImIb6XERdKb/esyuTxy2RtwyhuxNAaIfb4deFn+QFZ6x8WlEu+C43xiN6Eiz
T/fkiLSfrTg6BhbG0xz6vBQoyM8RYOV8Xi/HppmwWomAQa8VKIfwnbAJqkWrVs0V
t2Wnw73vHSPs698=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:04 2026 by rpki-client