Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030303a3a2f33362d3438203d3e20333936393638.roa
File:                     326131343a373538343a363030303a3a2f33362d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          IP5AWDzZHO3kcg3/POKeEYEu02eUVicHRpjqARVX0gc=
Subject key identifier:   26:1A:7F:1D:D0:20:17:F5:E7:0D:D9:8C:7C:C8:8E:49:F7:34:B3:B3
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       046C27A501FB740ABF3F48205DBCCC3FF03C9E04
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030303a3a2f33362d3438203d3e20333936393638.roa
Signing time:             Thu 26 Jun 2025 08:52:50 +0000
ROA not before:           Thu 26 Jun 2025 08:47:50 +0000
ROA not after:            Thu 25 Jun 2026 08:52:50 +0000
asID:                     396968
IP address blocks:        2a14:7584:6000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 06:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6c:27:a5:01:fb:74:0a:bf:3f:48:20:5d:bc:cc:3f:f0:3c:9e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Jun 26 08:47:50 2025 GMT
            Not After : Jun 25 08:52:50 2026 GMT
        Subject: CN=261A7F1DD02017F5E70DD98C7CC88E49F734B3B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:37:9b:cb:99:54:63:57:3d:30:3d:ef:1c:47:
                    d9:22:84:93:1f:ca:ef:f8:5a:e5:ee:c4:d3:3f:30:
                    60:00:a7:d3:a3:cf:78:ee:04:67:6f:fb:0e:d9:19:
                    7c:ba:5c:91:75:7f:40:4c:57:a0:66:64:39:99:ef:
                    45:dd:57:c0:48:90:d6:47:fc:1f:b2:5b:cb:e3:e7:
                    33:60:e9:4e:ef:39:14:56:d9:ed:3d:10:a6:26:c7:
                    48:cf:85:76:d1:53:3d:7b:34:97:0d:63:d6:fc:74:
                    2b:5c:dc:c3:f4:21:d2:06:a6:71:74:aa:8d:47:d4:
                    59:35:76:e7:fd:94:5c:3b:ee:04:7e:76:73:c4:6f:
                    71:42:48:78:36:14:e8:48:c3:1b:27:e1:19:44:9f:
                    0c:5f:3e:2e:7f:42:11:fb:b0:92:db:04:fb:fd:d3:
                    0d:30:f6:f3:5e:63:8a:d0:53:5b:63:75:54:e6:71:
                    e9:4a:62:2f:b7:f8:d9:d1:31:fe:29:8b:39:33:1d:
                    df:d7:35:b0:0f:d9:b8:81:e2:60:ac:0f:a6:39:02:
                    5a:59:de:21:94:ea:ab:ea:db:00:e0:18:65:83:52:
                    76:9c:0e:b5:07:0b:5a:5e:e9:e3:25:40:26:3e:7f:
                    6d:47:92:b4:bd:03:41:45:6d:e1:81:e0:06:26:bf:
                    42:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1A:7F:1D:D0:20:17:F5:E7:0D:D9:8C:7C:C8:8E:49:F7:34:B3:B3
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030303a3a2f33362d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         51:14:de:89:83:6c:79:f8:2c:64:ad:2a:2c:e5:e9:b0:8d:f9:
         73:ae:98:bf:37:98:a8:8a:ad:96:20:64:69:ad:24:98:4a:4e:
         d9:6a:56:02:07:22:95:62:b2:f4:b6:ca:bb:e7:15:e1:54:17:
         54:63:23:70:d0:57:34:25:a5:a9:68:44:c2:92:06:9a:2e:d7:
         20:9d:e3:cf:56:6d:6c:64:b6:b7:25:6b:45:f3:83:bf:c0:c3:
         e5:cb:51:a8:b6:73:69:8b:81:a8:00:af:77:5a:70:89:76:dc:
         78:ed:1b:c4:28:7d:75:ee:17:75:d0:35:c7:7e:20:0d:cf:36:
         72:33:a9:b8:6d:de:9c:3e:d2:8a:05:7d:c2:0c:45:15:1a:d9:
         34:18:cd:74:fb:9c:2f:8e:d5:7e:47:b7:2a:ae:fe:3d:d3:76:
         a2:1a:7e:ad:5e:9b:b1:6e:51:fc:19:15:c4:0f:08:51:74:35:
         bc:cd:6c:57:87:22:51:c5:0a:0c:dc:e5:f8:93:71:1c:b9:cc:
         71:b1:a9:9e:40:4a:f1:32:7a:a6:0a:96:5e:fe:ba:09:63:05:
         9c:1b:56:fb:70:94:97:ed:d0:7e:71:1d:a1:ac:c0:ab:12:75:
         4c:7c:69:cc:5e:10:f3:7b:ba:ff:77:bc:54:14:b6:4a:09:90:
         d0:34:f4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:55:48 2025 by rpki-client