Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/326130373a353463313a643335313a3a2f34382d3438203d3e20323030333531.roa
File:                     326130373a353463313a643335313a3a2f34382d3438203d3e20323030333531.roa (raw, json)
Hash identifier:          ARMJlTELdx4weZFSs2A9q9Hsu5emnaqOW6G3CtUqhqw=
Subject key identifier:   05:B6:E0:2F:4E:BA:A3:2B:76:21:40:15:EF:6E:08:67:83:9F:06:3D
Certificate issuer:       /CN=EDEA491E366952BB35E14C57B2C7DC604C2908C1
Certificate serial:       56F1B9A7A524BEB1BEB95DA97354F542D348ED1A
Authority key identifier: ED:EA:49:1E:36:69:52:BB:35:E1:4C:57:B2:C7:DC:60:4C:29:08:C1
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/326130373a353463313a643335313a3a2f34382d3438203d3e20323030333531.roa
Signing time:             Wed 08 Oct 2025 03:44:25 +0000
ROA not before:           Wed 08 Oct 2025 03:39:25 +0000
ROA not after:            Wed 07 Oct 2026 03:44:25 +0000
asID:                     200351
IP address blocks:        2a07:54c1:d351::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f1:b9:a7:a5:24:be:b1:be:b9:5d:a9:73:54:f5:42:d3:48:ed:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDEA491E366952BB35E14C57B2C7DC604C2908C1
        Validity
            Not Before: Oct  8 03:39:25 2025 GMT
            Not After : Oct  7 03:44:25 2026 GMT
        Subject: CN=05B6E02F4EBAA32B76214015EF6E0867839F063D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:33:16:34:64:1e:4d:ca:b1:9e:bc:9a:9d:
                    b6:e2:b9:97:54:ea:dd:c8:d0:19:3e:90:5f:0b:ed:
                    04:1e:66:1b:80:ef:20:cf:dd:48:5e:87:36:f4:0f:
                    62:12:e2:d9:31:57:46:01:21:99:d9:91:2e:19:52:
                    26:bb:fe:ee:b3:f6:24:6b:ce:26:35:13:d2:ff:ed:
                    9d:cc:8d:69:11:0c:c7:45:ba:42:7e:fa:e5:b0:a8:
                    08:8d:c5:6d:bc:0f:72:d7:55:7c:f9:82:4e:3c:ad:
                    ae:b4:f6:50:b9:8d:da:9d:ce:7f:09:22:37:ac:77:
                    79:54:57:57:7e:01:9e:96:77:c6:85:94:3e:0b:11:
                    ee:0b:3c:c4:7c:e5:0a:92:82:18:e6:27:51:8b:c6:
                    8a:ee:7a:bb:b2:e5:fa:7b:31:9b:60:8c:1a:16:1c:
                    1a:93:44:f7:f1:f0:11:41:c6:87:81:f6:9f:bb:46:
                    c1:01:c5:cc:92:76:d3:24:80:8c:04:6a:55:61:cd:
                    35:9a:96:79:ec:0f:75:9a:bd:d8:4a:70:b4:35:be:
                    65:f9:92:f8:38:61:69:5e:d5:af:5e:cf:fb:e6:dc:
                    79:62:ec:81:b6:94:d0:42:37:cc:f6:e4:8f:70:9c:
                    4f:bc:8b:2d:3a:7c:2e:c8:8a:ca:e6:25:32:cd:34:
                    ac:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B6:E0:2F:4E:BA:A3:2B:76:21:40:15:EF:6E:08:67:83:9F:06:3D
            X509v3 Authority Key Identifier:
                keyid:ED:EA:49:1E:36:69:52:BB:35:E1:4C:57:B2:C7:DC:60:4C:29:08:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/326130373a353463313a643335313a3a2f34382d3438203d3e20323030333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:d351::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:15:79:83:3a:04:40:39:ac:bc:f5:ba:ba:0e:f4:d3:b8:4f:
         94:fe:fa:a0:02:cc:1c:fd:26:52:1b:da:dd:3c:5c:6b:cd:50:
         ea:f0:de:7a:da:ee:36:eb:0c:6c:af:e5:b3:36:3e:38:79:c7:
         41:98:18:60:7e:01:b6:9c:56:7f:b2:93:27:61:c5:ff:df:23:
         a7:ec:6a:56:ca:2e:39:ed:aa:6b:4f:c2:b7:d5:ee:74:a8:94:
         39:bc:c7:cb:43:0b:c3:ff:ad:22:9d:74:1c:78:f4:7f:b6:6f:
         9a:52:49:ae:25:2d:c5:6b:8e:a9:0a:5d:fc:9f:8c:68:6a:13:
         81:b8:b0:9b:e8:58:11:da:9c:74:2b:f3:17:4c:79:12:69:2c:
         7e:66:34:ef:e9:ff:d6:c0:d2:1a:47:76:5a:5b:75:59:9c:e7:
         7a:37:39:19:b4:6a:33:c5:ca:77:4b:01:ac:26:c6:c8:5d:11:
         78:f4:5f:10:d9:06:17:ed:e6:2d:a3:19:d3:b1:61:bf:2c:ed:
         30:b0:b8:12:bf:e2:eb:dd:a7:74:b6:23:19:08:bd:40:23:7b:
         c6:99:4d:5c:00:b4:83:01:d7:69:69:cc:24:79:8e:8f:55:55:
         f7:2b:4b:95:f0:46:ca:c2:14:da:40:51:18:1d:5f:10:ba:d2:
         0d:51:22:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:49:29 2025 by rpki-client