Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663030303a3a2f33362d3438203d3e20333936393638.roa
File:                     326130663a363238373a663030303a3a2f33362d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          o7cZ+CE15FXSq9sDHJ7ahc2WYkXBKsBIWvNNcbhvbP4=
Subject key identifier:   9B:0A:FF:50:33:0B:5D:AF:FD:45:7B:AE:9E:11:6A:B1:F1:72:A6:2F
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       743BD94AA693E4651DCC3CA0DA5A062B47141ED1
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663030303a3a2f33362d3438203d3e20333936393638.roa
Signing time:             Thu 26 Jun 2025 09:12:12 +0000
ROA not before:           Thu 26 Jun 2025 09:07:12 +0000
ROA not after:            Thu 25 Jun 2026 09:12:12 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 03:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:3b:d9:4a:a6:93:e4:65:1d:cc:3c:a0:da:5a:06:2b:47:14:1e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jun 26 09:07:12 2025 GMT
            Not After : Jun 25 09:12:12 2026 GMT
        Subject: CN=9B0AFF50330B5DAFFD457BAE9E116AB1F172A62F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ad:38:d3:fd:fa:6e:3a:f0:ec:45:d2:21:44:
                    37:ad:2a:aa:e6:1d:a0:08:83:b5:4c:65:26:60:b1:
                    e5:01:fe:a3:8a:7e:ab:1c:9a:3e:ae:b0:7f:e4:3e:
                    af:7b:1f:a8:12:ce:5c:81:b0:7d:69:16:06:01:74:
                    dc:0d:26:d9:66:b3:9b:ee:c5:be:13:b0:03:19:0b:
                    0d:28:32:4e:27:d3:93:88:d2:3a:4d:65:b3:03:36:
                    01:50:23:93:01:62:d0:fe:84:c9:d1:8b:67:cd:88:
                    ce:31:2d:25:ef:96:fb:b0:8a:4a:4c:bb:37:2d:b4:
                    fc:ed:17:16:b7:01:99:df:4d:39:b0:8a:2b:c7:a5:
                    d2:1c:13:cd:bb:83:d0:65:d5:40:28:5c:83:ea:9e:
                    b9:2b:9b:08:ea:56:7f:e2:c3:92:03:c5:e2:b4:1d:
                    f8:c4:79:a4:4a:47:44:06:50:94:16:8c:ca:ed:9b:
                    97:a4:58:4c:b4:00:43:cb:94:dc:57:f7:5c:32:93:
                    90:02:9d:20:7b:0e:3a:39:07:57:0a:fc:84:11:8a:
                    fc:b1:9b:72:86:75:38:f8:f5:e8:9e:67:97:ab:78:
                    b5:38:70:1d:93:eb:1e:c7:7f:4f:87:9e:a2:d7:2a:
                    30:2a:86:14:ce:b9:67:67:7d:d9:38:a3:da:52:ce:
                    8d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0A:FF:50:33:0B:5D:AF:FD:45:7B:AE:9E:11:6A:B1:F1:72:A6:2F
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663030303a3a2f33362d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         97:e0:c4:f0:61:c1:8f:ea:cc:02:9c:9c:ec:33:78:67:7d:fa:
         b9:6e:f4:e0:95:5f:b2:dc:52:54:4d:8d:49:77:75:7d:50:a4:
         c5:dc:b9:c6:35:5a:a3:b0:57:d8:78:49:8f:47:d2:c5:b0:46:
         49:76:ac:b6:e3:2a:d7:e6:08:51:de:1b:95:9e:80:03:7c:d4:
         8a:29:3c:3e:bc:2a:b6:f2:e7:2a:3d:80:a8:f7:28:5c:06:7e:
         32:1b:fe:29:94:4d:d7:a3:9a:ff:c9:75:96:8e:f0:10:60:27:
         f8:9e:5a:70:b8:b3:7d:c3:5b:66:c6:39:3c:ed:dd:57:84:bc:
         76:0b:64:d6:d3:65:00:4c:ad:a0:0e:1d:70:9e:4a:22:b0:e2:
         3c:21:a3:6b:a2:85:6e:eb:2b:06:7c:65:d8:13:27:c0:a2:31:
         db:a4:53:f4:8b:69:32:3e:c7:b8:38:e8:16:7b:25:05:e5:81:
         33:15:85:96:a3:ed:a7:2d:d2:9c:58:84:1c:41:2d:12:b9:87:
         1a:91:87:69:36:70:0d:e3:a1:07:ea:2b:0d:33:13:84:cf:c3:
         07:4c:7c:8c:50:ef:37:9a:03:eb:a1:c9:3c:7d:ad:e3:85:17:
         9b:b9:1c:39:c6:d0:32:ec:8e:38:bc:23:5a:54:c3:26:ee:15:
         98:f4:dd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:17:46 2025 by rpki-client