Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530303a3a2f34302d3438203d3e20343031353037.roa
File:                     326131343a373538313a333530303a3a2f34302d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          6Df05/vahSbRv4znE3OLfIl0VdNL2j9/fGDSnrxXLG8=
Subject key identifier:   CA:95:45:A5:16:68:44:E7:9E:67:F0:FD:09:C2:CF:08:12:00:76:2E
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       573C256B84E4C2B9CF5F7601BB460C653B8D536B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530303a3a2f34302d3438203d3e20343031353037.roa
Signing time:             Thu 26 Jun 2025 08:52:51 +0000
ROA not before:           Thu 26 Jun 2025 08:47:51 +0000
ROA not after:            Thu 25 Jun 2026 08:52:51 +0000
asID:                     401507
IP address blocks:        2a14:7581:3500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3c:25:6b:84:e4:c2:b9:cf:5f:76:01:bb:46:0c:65:3b:8d:53:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 26 08:47:51 2025 GMT
            Not After : Jun 25 08:52:51 2026 GMT
        Subject: CN=CA9545A5166844E79E67F0FD09C2CF081200762E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:64:8e:8e:9b:da:5b:a0:86:be:c4:2d:55:4d:
                    10:a6:9c:16:29:7a:bc:fd:0a:18:bd:cd:b2:8c:a0:
                    1e:09:83:c0:d7:24:f7:91:02:ac:20:60:60:11:4f:
                    33:b6:1d:a9:6e:c6:75:26:2b:68:fe:7d:3c:49:75:
                    b9:0a:cd:da:89:04:07:3e:d1:90:a2:96:ca:7d:49:
                    99:cf:8d:f3:86:2d:6e:e6:7b:f7:3e:b8:ca:65:bc:
                    7e:ca:49:59:2f:02:ba:f8:55:5e:70:66:4e:64:dc:
                    3b:d3:78:e4:d8:12:db:9c:d3:e2:64:7d:75:d8:fe:
                    27:64:be:9a:d9:dc:f8:70:ff:d8:70:2c:ce:a5:3d:
                    4b:51:97:03:99:44:db:3e:ea:3f:9b:31:6b:3b:f5:
                    63:64:47:46:9f:a9:35:08:79:e0:f8:a3:04:0c:02:
                    9f:14:58:75:f8:18:e2:18:d5:2f:f3:4a:00:3a:43:
                    e9:88:56:6d:5a:27:da:b9:49:7c:12:a4:03:7f:56:
                    12:ed:63:de:78:7f:d4:ed:59:6f:16:7f:ac:76:76:
                    2b:49:39:60:bc:f8:84:54:36:f6:ec:8e:de:47:f5:
                    94:86:be:05:84:48:64:a7:13:1a:92:94:81:65:26:
                    b7:4d:a9:9e:37:94:b7:2c:d1:05:42:73:07:43:b8:
                    54:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:95:45:A5:16:68:44:E7:9E:67:F0:FD:09:C2:CF:08:12:00:76:2E
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333530303a3a2f34302d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:3500::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:bf:97:b4:8c:e3:99:08:3e:ab:43:a7:6f:1e:01:86:bf:51:
         e9:53:08:a6:68:1a:15:28:28:f5:7f:7a:ae:f7:3e:a2:32:10:
         52:94:ac:6e:f4:f5:fd:c0:50:43:ff:4d:8f:74:bd:68:7e:08:
         0f:a8:51:7a:96:45:2b:de:24:7e:4a:14:83:8f:44:25:25:70:
         05:42:90:16:db:b1:0d:57:22:33:54:1a:11:62:90:40:0b:1a:
         f4:58:78:4f:e8:c1:c8:f9:72:46:4f:32:ef:b3:c6:7c:92:96:
         16:50:f3:80:ee:1c:36:2e:26:da:ba:8d:81:3f:cc:21:24:99:
         ba:a1:37:ef:8b:56:da:81:65:56:02:51:d2:53:da:6a:cb:b1:
         89:a8:4a:aa:c7:3c:c8:e9:83:da:17:c6:80:57:f4:37:fd:86:
         7d:d7:d2:98:9e:d7:ae:c1:a5:d5:da:0c:69:1c:35:e1:c5:a9:
         9c:e6:a2:9b:bc:e1:91:e0:52:c2:fa:06:ca:2c:1b:c1:86:d3:
         3f:bb:78:e4:15:6f:5e:83:e5:d3:4f:a6:73:71:a5:eb:cc:25:
         66:93:3a:ae:b9:8a:18:69:47:d4:e1:a4:54:c9:bc:c2:57:da:
         9d:ca:9d:cd:ea:9b:75:db:9a:50:70:fc:12:08:22:39:84:94:
         7e:d9:c0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:49:04 2025 by rpki-client