Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333563373a3a2f34382d3438203d3e203136393039.roa
File:                     326131343a373538313a333563373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          exjF0q0aJJV12jth59pchkZ6rTciHjjsF3VzxPVljDU=
Subject key identifier:   4E:E0:EA:FC:BD:19:7D:84:48:C6:A9:EB:8D:EB:FC:0C:94:19:94:7D
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       04ED3C6F805A07047E1FADAD14EEC3EED81AA95D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333563373a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 26 Jun 2025 08:52:51 +0000
ROA not before:           Thu 26 Jun 2025 08:47:51 +0000
ROA not after:            Thu 25 Jun 2026 08:52:51 +0000
asID:                     16909
IP address blocks:        2a14:7581:35c7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 07:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ed:3c:6f:80:5a:07:04:7e:1f:ad:ad:14:ee:c3:ee:d8:1a:a9:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 26 08:47:51 2025 GMT
            Not After : Jun 25 08:52:51 2026 GMT
        Subject: CN=4EE0EAFCBD197D8448C6A9EB8DEBFC0C9419947D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e3:0e:b5:a7:05:e8:cd:fe:54:3c:48:6b:4b:
                    2b:9a:d7:9f:b8:72:08:68:ea:9c:38:86:03:a0:39:
                    87:e4:a4:8e:ab:b0:c3:a8:b7:df:b3:c6:e5:2b:43:
                    9f:a1:f1:6e:45:2b:8e:c9:b2:97:0f:88:24:c5:8b:
                    f8:a7:02:61:ba:23:5a:20:d4:47:a5:1e:6b:a8:b6:
                    52:9e:c6:29:f0:4e:07:62:15:96:ad:0d:ec:e6:bf:
                    a1:39:06:a7:c2:74:40:f5:e9:76:4c:7d:25:e8:59:
                    11:17:55:76:21:44:30:d8:64:c9:8d:c5:c6:51:b1:
                    ef:36:7d:24:ad:c3:ac:47:a9:16:e1:8b:b2:47:25:
                    f3:83:72:e5:7c:58:5c:5c:35:ef:2c:da:20:01:62:
                    79:9e:7f:c0:89:7b:ca:79:5f:d5:15:cb:ea:70:86:
                    52:9c:05:03:9c:81:82:dd:64:79:a2:0d:6c:c8:b4:
                    d5:61:05:3c:18:57:9b:d5:58:ab:ed:8d:e5:92:15:
                    2b:2f:ed:bd:46:12:cf:23:9f:79:5f:b4:59:12:b2:
                    7f:c1:77:8b:c1:56:63:aa:25:3b:7b:3d:2d:26:2a:
                    6a:26:9e:8c:35:f0:f2:3f:ae:14:09:84:5b:75:06:
                    9e:5e:5d:f3:44:81:5c:e8:57:cb:e9:3b:c7:e2:14:
                    e2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E0:EA:FC:BD:19:7D:84:48:C6:A9:EB:8D:EB:FC:0C:94:19:94:7D
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538313a333563373a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:35c7::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:97:4c:64:92:d0:31:b2:64:a6:5b:89:cd:05:e0:a0:95:ed:
         68:d1:98:49:2f:10:b5:e4:6e:5d:6a:74:15:98:9c:9a:2e:2b:
         90:6c:e7:19:61:b2:61:8f:88:99:47:6f:a1:ce:71:c6:49:0b:
         6a:3a:ea:e8:f0:fb:6b:27:16:65:05:28:d6:3f:4f:e7:4e:43:
         64:f2:19:11:ea:0a:9e:f8:c2:f0:88:2a:11:20:77:26:03:18:
         e5:b8:e2:c8:3c:48:09:74:b4:bb:5c:4f:4c:27:63:c3:f6:f7:
         83:2b:32:c0:d3:e5:7b:0c:ac:16:a1:f2:f1:c0:9c:a8:f1:14:
         3c:90:11:ac:bc:99:a4:f5:aa:ed:2e:d0:f9:32:2c:53:9a:a2:
         a9:e4:87:a5:93:35:66:c6:f5:a0:68:b8:6c:5b:57:9c:71:2e:
         fb:1e:ab:20:4f:2c:2f:c8:46:8f:db:c8:60:f8:69:c4:de:ce:
         cc:52:a9:23:72:4b:e6:98:33:5a:eb:de:43:12:ac:97:f2:88:
         4c:3b:9d:4c:e3:a2:71:36:bf:08:86:8c:2b:5e:82:93:6a:20:
         bd:a5:a6:c6:6a:89:a0:7d:25:0a:90:28:68:b6:5a:5e:cc:16:
         0e:19:79:a4:ee:dc:ec:70:a9:70:3c:a8:ea:83:10:77:54:c0:
         9a:58:4d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:49:41 2025 by rpki-client