Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a31303a3a2f34382d3438203d3e203336323336.roa
File:                     326130303a646438303a31303a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier:          fRE1svsuxDk6PCggLMU4bw+Ehs3DSxqXF3f0LPbfxZA=
Subject key identifier:   01:EE:AF:EB:65:35:FD:49:43:DA:9D:56:17:19:8A:DA:31:CC:73:1A
Certificate issuer:       /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial:       4142E97E2216AB74B5CD4EFE5A12EFCA90A0E4E8
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a31303a3a2f34382d3438203d3e203336323336.roa
Signing time:             Mon 06 Jul 2026 20:29:07 +0000
ROA not before:           Mon 06 Jul 2026 20:24:07 +0000
ROA not after:            Mon 05 Jul 2027 20:29:07 +0000
asID:                     36236
IP address blocks:        2a00:dd80:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:42:e9:7e:22:16:ab:74:b5:cd:4e:fe:5a:12:ef:ca:90:a0:e4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
        Validity
            Not Before: Jul  6 20:24:07 2026 GMT
            Not After : Jul  5 20:29:07 2027 GMT
        Subject: CN=01EEAFEB6535FD4943DA9D5617198ADA31CC731A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c5:c6:48:67:89:75:e2:cb:09:14:33:d8:e0:
                    cb:b9:30:8b:1c:f8:2e:97:3e:ce:ff:c4:94:ad:99:
                    66:0d:2f:2c:a4:74:01:68:b9:aa:b9:b5:53:6f:7d:
                    87:e2:c9:c9:c0:5a:5d:57:a5:7f:5e:9e:4a:aa:71:
                    87:8e:50:ac:00:f7:be:ae:ea:ff:b5:fa:7e:43:b1:
                    af:8a:f6:b5:ea:a9:50:0a:71:65:9c:d4:10:0f:94:
                    45:32:40:7d:a3:3e:3e:72:91:b1:70:da:20:57:3a:
                    4e:7c:7c:52:46:af:e3:ee:ff:1b:b9:ef:e7:d2:48:
                    c4:36:f2:e0:1d:ee:27:6f:7e:93:18:62:76:ae:6d:
                    9b:50:9c:6a:9d:9f:a5:9d:d2:6f:20:d7:fd:c9:ea:
                    19:05:61:3b:12:36:8e:05:db:d5:ea:aa:c1:25:93:
                    6a:fe:7c:fa:48:c3:8a:f1:f1:ca:94:e2:6a:70:c7:
                    20:43:a3:9a:82:c6:ac:ca:f2:dd:e0:60:10:40:13:
                    f6:4e:d9:28:03:8e:13:cd:34:ec:cc:dc:c1:45:69:
                    c0:00:54:0b:fd:b7:d7:1d:0e:74:34:b5:6e:16:3c:
                    e4:66:f5:09:12:74:28:db:63:b2:ce:d5:45:11:46:
                    6f:2a:10:d2:d5:fc:28:33:62:75:38:7e:cd:28:67:
                    e1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EE:AF:EB:65:35:FD:49:43:DA:9D:56:17:19:8A:DA:31:CC:73:1A
            X509v3 Authority Key Identifier:
                keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a31303a3a2f34382d3438203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:dd80:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:29:b9:16:ce:df:66:01:4d:65:fd:01:b9:72:84:5e:8a:6f:
         05:70:04:11:c6:49:08:06:2f:b0:31:95:33:b0:d9:45:c9:a9:
         4e:ad:a1:9d:74:16:bb:f4:1b:3d:02:75:26:d6:a7:6d:14:2d:
         aa:a9:eb:00:43:f7:52:d5:0a:f3:c4:fc:b4:23:85:d6:57:1e:
         05:4a:0a:be:48:47:de:4c:8a:e7:8f:49:f4:18:9e:fb:33:37:
         48:8f:94:ae:7f:e3:aa:99:35:74:9d:50:6f:d6:4b:c4:e8:6b:
         87:a6:18:31:41:96:4d:9d:03:e2:3e:d0:02:43:af:ee:53:9b:
         38:53:fa:30:9b:d1:13:c8:e4:0a:02:35:58:34:dc:b1:ac:51:
         c7:92:dc:df:e1:06:4c:6e:78:7e:3a:1a:ce:a7:0c:04:5d:44:
         b3:5a:11:2a:53:10:12:e3:c5:dd:f1:fa:c2:59:69:38:bf:e6:
         09:7f:d7:5b:e1:55:a2:7d:e0:5c:ed:78:3b:f2:7e:08:95:24:
         92:c2:8c:0f:04:f8:fb:7c:42:0f:7b:52:f9:ab:eb:d9:dc:d7:
         53:e6:0b:dd:e1:d0:af:27:72:50:5d:4d:d8:ee:ba:c2:43:30:
         6e:97:75:26:1c:04:2c:9c:f5:08:67:6e:6a:d1:ec:6f:94:7e:
         16:4a:01:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:42:45 2026 by rpki-client