Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333538643a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538313a333538643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          hgnX7HeDxBSCgwy+vwPQXIv6xTdi2QxsPHoyfkkcUvs=
Subject key identifier:   9B:49:9A:16:93:34:03:59:1B:2B:D4:7A:8E:CE:4A:46:A5:DA:50:C9
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       209740912F9B45CD07243012F195C0724B4611BA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333538643a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 26 Jun 2025 08:52:54 +0000
ROA not before:           Thu 26 Jun 2025 08:47:54 +0000
ROA not after:            Thu 25 Jun 2026 08:52:54 +0000
asID:                     16909
IP address blocks:        2a14:7581:358d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:97:40:91:2f:9b:45:cd:07:24:30:12:f1:95:c0:72:4b:46:11:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 26 08:47:54 2025 GMT
            Not After : Jun 25 08:52:54 2026 GMT
        Subject: CN=9B499A16933403591B2BD47A8ECE4A46A5DA50C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b4:c0:7a:7f:0f:63:4b:8d:93:06:d3:da:b5:
                    7b:13:f6:f8:0a:ed:9a:15:c0:27:07:43:85:2a:7a:
                    df:c1:cb:21:2f:5f:45:d4:12:7e:95:a9:8f:46:92:
                    c4:23:cd:0a:d2:c8:ad:1b:16:66:9d:aa:60:11:d4:
                    1a:3a:57:a4:64:86:72:81:57:30:b4:25:70:e6:b1:
                    17:83:3c:6a:30:2b:64:7c:39:7c:21:1e:b6:ea:dc:
                    da:30:6e:e4:0e:d7:c8:d7:e2:9a:1b:81:f6:0f:36:
                    77:b4:65:b8:75:c4:dd:02:34:c3:16:0a:19:7a:e7:
                    6c:1e:87:11:e1:da:06:17:36:b4:26:31:e0:69:08:
                    cc:d8:82:9a:c0:3d:c3:30:b2:17:e9:fd:ff:28:fe:
                    85:1c:05:9a:23:6e:eb:4e:7b:47:36:52:b7:81:a5:
                    73:c4:1f:33:e2:9b:c5:c9:3b:d6:ed:3d:ef:85:4b:
                    07:c0:e8:53:d1:e5:dd:1d:72:5d:d9:dc:f3:2f:b5:
                    ac:cd:7f:65:3d:54:c6:a3:ae:f2:eb:98:5f:41:67:
                    fe:bb:47:56:a0:9d:07:18:6a:60:93:0b:39:0c:dc:
                    b0:87:bf:30:41:e4:db:5d:6f:3b:10:2e:a1:88:28:
                    d4:c3:83:79:b3:f1:60:06:db:57:a3:8d:73:d8:9e:
                    4d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:49:9A:16:93:34:03:59:1B:2B:D4:7A:8E:CE:4A:46:A5:DA:50:C9
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333538643a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:358d::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:79:90:64:34:4d:90:d1:64:9f:84:8c:94:d3:51:0b:8f:71:
         c2:92:49:cd:60:1c:b2:4e:07:7e:c7:4d:c3:6b:a3:c4:d1:6b:
         d7:ae:52:77:59:26:7a:2c:3c:bc:4f:ad:74:33:4b:89:61:72:
         ce:98:8a:96:bc:6a:17:36:82:29:0a:3c:90:4f:f5:4b:4a:c5:
         d2:80:9c:87:d3:f0:4c:b4:42:1a:5f:e0:4f:a9:c8:b2:4d:12:
         e6:38:cf:d2:0f:4e:dc:b6:c1:74:1a:4a:9f:55:8e:46:ad:03:
         d5:d8:cd:2e:b9:4f:f6:3f:01:e1:ef:5d:dd:6b:1e:dc:f7:9b:
         8a:6d:d3:7d:84:a5:d9:0a:57:6c:ec:f1:be:12:0b:25:f5:08:
         04:fc:89:9c:68:13:7a:16:c2:fa:03:61:9a:21:f1:b5:4e:3e:
         85:e8:b5:c5:7a:a4:b3:3f:f1:88:59:11:4d:01:4f:83:3e:61:
         1c:09:f3:dc:75:95:e7:9a:c7:6f:2a:84:cc:52:b0:ce:30:37:
         3c:ee:a6:e9:48:08:b7:79:f0:bd:0c:00:d7:22:29:54:91:79:
         28:ce:45:6a:71:80:39:c9:24:19:00:54:fe:75:91:60:cd:b3:
         29:7a:e3:da:60:69:88:38:1f:fc:a3:cf:05:68:57:6c:86:f6:
         90:20:47:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:52:51 2025 by rpki-client