Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530303a3a2f34302d3438203d3e203136393039.roa
File:                     326131343a373538313a333530303a3a2f34302d3438203d3e203136393039.roa (raw, json)
Hash identifier:          bvCK0vzABX0GIgAHss3mxvyUiQC1fMmgnIs36fcNdHo=
Subject key identifier:   F5:41:56:33:D3:1A:E9:20:3A:64:66:15:64:AD:F5:83:3D:3E:B5:59
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       0F7C330F5E9FBBE63F7935252EA4E51EA81562EB
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530303a3a2f34302d3438203d3e203136393039.roa
Signing time:             Thu 26 Jun 2025 08:52:52 +0000
ROA not before:           Thu 26 Jun 2025 08:47:52 +0000
ROA not after:            Thu 25 Jun 2026 08:52:52 +0000
asID:                     16909
IP address blocks:        2a14:7581:3500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7c:33:0f:5e:9f:bb:e6:3f:79:35:25:2e:a4:e5:1e:a8:15:62:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 26 08:47:52 2025 GMT
            Not After : Jun 25 08:52:52 2026 GMT
        Subject: CN=F5415633D31AE9203A64661564ADF5833D3EB559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c2:79:e9:cf:38:de:8f:8b:28:8f:7f:41:e0:
                    ca:0b:2a:e2:88:82:97:29:f5:bd:29:32:75:9a:cd:
                    da:11:0b:d9:6c:51:03:e1:db:c3:78:f5:1f:a8:64:
                    be:01:ff:4a:ac:44:b1:30:46:23:06:33:7f:52:9a:
                    f0:b8:17:76:a3:47:a8:b1:ac:67:6e:e0:56:49:0a:
                    24:3f:cc:cb:a9:d2:9a:92:7f:b8:de:58:db:54:dd:
                    ef:58:f2:8d:c8:dc:d8:34:15:20:a2:4f:43:0b:00:
                    9c:8f:14:ac:9e:d9:91:3f:96:a5:8c:ca:2f:ea:44:
                    0e:20:de:04:91:f0:30:20:08:02:45:12:cb:3a:2a:
                    f2:c4:2d:f4:fd:3e:77:ea:b5:e6:22:e4:1b:71:28:
                    b7:f9:4b:12:33:61:b8:d5:4b:78:07:de:ae:25:d3:
                    6d:f9:87:c2:55:dc:7c:82:85:c0:7f:d3:d4:3c:d3:
                    fa:c2:9a:c1:c1:f4:df:f0:90:5f:46:b7:b7:be:31:
                    e1:48:16:d6:7a:b3:02:88:fb:5b:57:1f:c6:01:d2:
                    5c:b2:db:37:ba:74:8c:55:59:da:e2:39:f4:86:e1:
                    7d:4c:73:c4:b6:f7:b9:d9:62:bc:0e:19:82:c3:bb:
                    c7:3b:f9:a3:c6:a4:a4:1d:08:59:e5:7c:d6:3a:af:
                    5e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:41:56:33:D3:1A:E9:20:3A:64:66:15:64:AD:F5:83:3D:3E:B5:59
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530303a3a2f34302d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:3500::/40

    Signature Algorithm: sha256WithRSAEncryption
         8d:ba:8e:2f:ae:a3:40:83:f2:5d:da:91:92:50:83:21:d7:70:
         41:a3:fa:24:66:6c:47:9c:d8:c6:1c:0f:c9:e6:0f:88:55:14:
         55:45:7d:fa:57:3c:cf:d5:46:3c:d4:c0:c4:ab:39:89:8e:92:
         7b:3e:19:72:89:36:f1:3f:97:3b:57:2e:4f:18:72:fb:20:b6:
         c4:36:24:ea:bc:4f:00:c1:d3:17:04:6f:78:b0:11:06:26:b6:
         8f:4d:02:7a:a0:c0:90:fc:10:c4:32:fa:16:03:95:c3:d5:ae:
         8b:52:2f:c8:61:47:12:ba:ec:55:df:0c:b0:bc:d5:fb:4d:f8:
         25:d7:7d:3b:e7:72:d5:1d:fe:2c:65:2d:31:a9:eb:a8:42:74:
         ac:52:b7:15:17:ea:d4:8d:12:ca:3f:34:d3:c3:1a:b1:81:c8:
         8c:a8:15:e4:b3:f9:c3:d1:dd:30:27:82:ca:c5:4e:9f:76:a0:
         ff:74:9f:fa:7c:5f:16:e1:91:3f:de:8c:d8:f4:aa:b4:7e:38:
         92:7d:fb:2b:bd:46:16:c8:3e:8c:36:99:6e:6b:a6:f3:30:6c:
         d0:d3:d3:68:15:1e:0f:6f:da:f7:b1:c0:b9:77:17:55:48:4c:
         8c:fe:b1:dc:89:53:90:56:26:27:20:88:b7:f8:95:f7:ab:8f:
         9f:f5:81:2e
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUD3wzD16fu+Y/eTUlLqTlHqgVYuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA2MjYwODQ3NTJaFw0yNjA2MjUwODUyNTJaMDMxMTAvBgNV
BAMTKEY1NDE1NjMzRDMxQUU5MjAzQTY0NjYxNTY0QURGNTgzM0QzRUI1NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDawnnpzzjej4soj39B4MoLKuKI
gpcp9b0pMnWazdoRC9lsUQPh28N49R+oZL4B/0qsRLEwRiMGM39SmvC4F3ajR6ix
rGdu4FZJCiQ/zMup0pqSf7jeWNtU3e9Y8o3I3Ng0FSCiT0MLAJyPFKye2ZE/lqWM
yi/qRA4g3gSR8DAgCAJFEss6KvLELfT9PnfqteYi5BtxKLf5SxIzYbjVS3gH3q4l
0235h8JV3HyChcB/09Q80/rCmsHB9N/wkF9Gt7e+MeFIFtZ6swKI+1tXH8YB0lyy
2ze6dIxVWdriOfSG4X1Mc8S297nZYrwOGYLDu8c7+aPGpKQdCFnlfNY6r15vAgMB
AAGjggJnMIICYzAdBgNVHQ4EFgQU9UFWM9Ma6SA6ZGYVZK31gz0+tVkwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzEzYTMzMzUzMDMwM2EzYTJm
MzQzMDJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoUdYE1MA0G
CSqGSIb3DQEBCwUAA4IBAQCNuo4vrqNAg/Jd2pGSUIMh13BBo/okZmxHnNjGHA/J
5g+IVRRVRX36VzzP1UY81MDEqzmJjpJ7PhlyiTbxP5c7Vy5PGHL7ILbENiTqvE8A
wdMXBG94sBEGJraPTQJ6oMCQ/BDEMvoWA5XD1a6LUi/IYUcSuuxV3wywvNX7Tfgl
130753LVHf4sZS0xqeuoQnSsUrcVF+rUjRLKPzTTwxqxgciMqBXks/nD0d0wJ4LK
xU6fdqD/dJ/6fF8W4ZE/3ozY9Kq0fjiSffsrvUYWyD6MNplua6bzMGzQ09NoFR4P
b9r3scC5dxdVSEyM/rHciVOQViYnIIi3+JX3q4+f9YEu
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:42:47 2025 by rpki-client