Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530303a3a2f34302d3438203d3e20333936393638.roa
File:                     326131343a373538313a333530303a3a2f34302d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          hWe0MopsuhhbsZ3S9o8OBwj8cjLWddVpusY7Oex+A3s=
Subject key identifier:   66:F1:1B:91:66:16:BD:62:90:6B:60:46:0E:AF:AB:4F:35:84:2F:7E
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       37CCB80E411AF53A48C4AECC0408FABD537A9964
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530303a3a2f34302d3438203d3e20333936393638.roa
Signing time:             Thu 26 Jun 2025 08:52:50 +0000
ROA not before:           Thu 26 Jun 2025 08:47:50 +0000
ROA not after:            Thu 25 Jun 2026 08:52:50 +0000
asID:                     396968
IP address blocks:        2a14:7581:3500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 11:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:cc:b8:0e:41:1a:f5:3a:48:c4:ae:cc:04:08:fa:bd:53:7a:99:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 26 08:47:50 2025 GMT
            Not After : Jun 25 08:52:50 2026 GMT
        Subject: CN=66F11B916616BD62906B60460EAFAB4F35842F7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2a:d4:5b:f3:e3:b8:fa:9b:e7:dd:9a:99:bb:
                    7d:40:a0:40:1f:5d:83:84:bf:54:d4:fd:e1:b8:9c:
                    a8:1a:84:d2:fc:5f:4a:66:77:67:49:a8:55:1e:18:
                    4a:2c:79:db:13:ed:c1:f0:75:74:6e:dd:54:e6:90:
                    5d:42:3d:72:9d:73:70:30:61:5a:19:a1:85:11:1d:
                    5a:d6:e6:77:72:d8:17:b9:cc:4a:30:ae:3a:d7:2e:
                    96:ab:8d:de:4f:92:59:bc:42:a4:eb:3d:55:b8:ba:
                    bd:90:ca:95:94:2e:09:f5:38:d0:61:f0:cd:ea:6f:
                    f8:50:e7:62:34:f8:f0:87:35:fc:7d:f2:02:1d:e7:
                    c1:2e:68:78:a7:9a:56:30:ab:37:95:18:e3:5a:f3:
                    50:b3:eb:94:e1:b8:df:9d:e9:99:ba:79:6b:c7:a0:
                    c3:15:f6:86:ab:ee:a4:c8:c2:bf:ed:47:12:91:1c:
                    3e:cf:13:d3:86:86:bf:47:fe:c7:f2:80:42:e2:1c:
                    87:97:84:a6:a4:6d:7b:4f:25:93:0a:95:12:9e:e8:
                    d9:d3:25:a7:02:69:f0:6c:7c:cb:98:fe:cb:de:b1:
                    b1:52:b9:fb:4a:70:3d:95:27:2d:fc:a5:3e:c6:b6:
                    ea:f5:c4:88:30:6f:b5:b5:65:39:5d:8f:c6:c8:b6:
                    e7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F1:1B:91:66:16:BD:62:90:6B:60:46:0E:AF:AB:4F:35:84:2F:7E
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530303a3a2f34302d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:3500::/40

    Signature Algorithm: sha256WithRSAEncryption
         94:b2:c4:ae:97:11:d3:0c:83:3f:6e:13:2f:d5:f9:2e:41:7a:
         9c:f4:8b:63:06:2f:ab:e4:8a:40:e5:59:fc:c1:c0:4f:88:64:
         a3:73:4f:19:ab:66:ad:53:b4:ff:37:25:0a:47:dd:fb:e0:5d:
         0c:f8:7c:6e:f7:50:b9:1b:5d:ab:9f:af:23:30:35:99:a0:77:
         47:6a:66:ad:3b:7d:fc:19:17:85:6a:5a:17:3a:11:25:a9:a0:
         18:34:46:a3:22:ed:9c:0d:c6:19:c3:b2:03:21:b3:a9:e2:6f:
         ab:bd:c8:8a:3c:ce:86:37:b7:05:e3:5c:ad:86:7d:a1:5d:1b:
         66:f0:f9:6b:e7:4d:84:fa:f0:9a:e7:dc:7d:4c:9f:78:6d:3c:
         7b:9e:a4:33:0d:3d:a4:12:4f:46:d6:1b:af:41:d7:08:f9:fb:
         55:2d:28:40:5c:f9:45:4c:80:60:b5:17:5b:26:0b:01:13:a0:
         35:6e:97:e7:71:8f:5f:22:15:d6:20:d3:d0:e9:c3:c0:86:a9:
         04:13:7b:ad:b5:84:7e:06:57:4d:23:c5:1b:54:e0:46:48:c6:
         1b:76:45:e2:b7:3b:92:02:7d:bc:28:09:66:0d:e8:68:13:51:
         da:90:25:24:8b:a5:48:be:5c:25:89:cc:53:80:69:70:da:a2:
         e7:de:fc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:02:05 2025 by rpki-client