Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663063313a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663063313a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          dR62tVm2+O26U/EQYSluXnHM9Xfk8KibgIYZQf1Agwo=
Subject key identifier:   3C:CA:35:A7:1A:B3:79:B1:E6:D5:7C:47:B4:5B:E6:1F:69:1A:4F:EF
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       30DC945DEBAFE800A63C878B5801A8813DF00CFD
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663063313a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Thu 26 Jun 2025 12:36:17 +0000
ROA not before:           Thu 26 Jun 2025 12:31:17 +0000
ROA not after:            Thu 25 Jun 2026 12:36:17 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f0c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:dc:94:5d:eb:af:e8:00:a6:3c:87:8b:58:01:a8:81:3d:f0:0c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jun 26 12:31:17 2025 GMT
            Not After : Jun 25 12:36:17 2026 GMT
        Subject: CN=3CCA35A71AB379B1E6D57C47B45BE61F691A4FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:59:97:22:ea:a0:38:97:47:ac:fe:50:6a:
                    31:70:9f:31:a7:76:11:0c:b7:b0:b6:f1:fa:76:4f:
                    cc:bb:10:9c:03:6f:14:04:30:66:40:ae:cd:59:25:
                    d2:5c:bc:8c:03:61:9b:ce:64:83:ab:b6:b2:33:56:
                    54:c7:89:11:2e:8b:85:70:a2:9d:67:7f:1b:10:c2:
                    50:66:20:5a:0f:84:ce:03:e3:5c:22:ca:df:ae:47:
                    06:44:c2:78:e0:13:b3:34:ab:67:3a:d3:2e:8a:0d:
                    54:17:d5:73:9c:70:70:ff:85:9c:34:ad:2d:68:9f:
                    1c:57:e7:82:1c:a3:46:94:e9:dd:1e:a0:bb:bb:a6:
                    45:b2:17:cb:c4:aa:35:17:67:dc:f9:bb:af:3f:58:
                    6b:0b:f4:77:23:32:ee:11:8e:e5:98:b7:bb:ce:65:
                    41:fd:07:67:36:09:04:73:2d:4f:76:a5:23:70:09:
                    a0:21:5a:a0:2c:b6:dd:b6:4c:89:9a:e8:78:6a:23:
                    5f:92:ea:b0:f5:9b:b8:ad:68:a4:12:8e:9a:b5:6f:
                    95:3d:4f:04:99:d4:60:70:b2:b6:08:d5:f9:83:a8:
                    23:7f:5f:dd:38:f8:1d:d7:4b:4c:b5:61:23:2e:77:
                    0d:99:69:b2:b3:8d:1f:8f:63:29:a2:67:66:73:99:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CA:35:A7:1A:B3:79:B1:E6:D5:7C:47:B4:5B:E6:1F:69:1A:4F:EF
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663063313a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f0c1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:3c:1d:2d:b6:2b:95:98:de:99:1e:e1:44:74:9a:50:5a:2c:
         cb:37:68:5f:98:cb:ac:6e:d8:74:40:03:83:0f:41:bc:75:31:
         44:bc:b7:70:89:a9:04:b8:2b:6d:88:ce:86:31:ee:27:23:8f:
         8c:ea:bd:58:06:c7:1a:76:d8:1b:7b:86:9b:7e:bd:a8:d4:47:
         39:7f:25:45:89:66:ea:2f:1d:8c:cb:55:98:93:1e:e4:56:9d:
         f6:fb:2d:a8:e2:eb:32:01:ed:a0:ca:aa:a5:14:ca:a0:6b:0d:
         d9:eb:3a:14:bc:3c:50:d8:06:b9:af:26:3e:fb:e9:e4:06:19:
         79:90:39:16:35:0a:6c:f7:d5:d4:b5:02:33:68:a8:55:48:bf:
         a6:ae:f7:8b:0e:fc:29:e5:6b:f3:5e:4f:7f:18:38:6c:0e:5e:
         8f:5b:a0:77:50:c6:c8:c3:de:17:82:eb:1e:3c:fe:23:74:20:
         fe:ac:0a:5d:67:92:f6:12:77:17:16:ba:80:cd:0d:cc:ef:2b:
         14:c7:76:2b:78:49:5e:3a:a9:c2:82:0d:e8:88:5c:16:42:fc:
         b8:c1:6c:03:35:73:2e:96:48:35:59:30:11:f8:ea:30:79:82:
         56:cb:a1:53:bc:ab:46:76:ea:53:b2:3a:e1:2f:12:49:73:e7:
         8e:7c:4a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:04:41 2025 by rpki-client