Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663761663a3a2f34382d3438203d3e203136393039.roa
File:                     326130663a363238373a663761663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          QQhHmsQAl1usgLQVbkbdMdP/H8RyobdObo0Geox3aJw=
Subject key identifier:   D8:F4:AB:C0:20:EE:03:C7:9B:2B:8F:EE:8B:CC:87:3B:6A:90:C9:61
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       5DDDBD90D709CB84ED1FF523664A69E6911421E4
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663761663a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 26 Jun 2025 12:10:58 +0000
ROA not before:           Thu 26 Jun 2025 12:05:58 +0000
ROA not after:            Thu 25 Jun 2026 12:10:58 +0000
asID:                     16909
IP address blocks:        2a0f:6287:f7af::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:35:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:dd:bd:90:d7:09:cb:84:ed:1f:f5:23:66:4a:69:e6:91:14:21:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jun 26 12:05:58 2025 GMT
            Not After : Jun 25 12:10:58 2026 GMT
        Subject: CN=D8F4ABC020EE03C79B2B8FEE8BCC873B6A90C961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d3:e8:d1:89:2f:be:e2:4a:d4:e0:bf:7c:e4:
                    7e:ce:ca:7f:39:a5:25:f8:a3:10:76:e1:86:c5:77:
                    d2:fd:88:39:fe:d4:ae:ee:7b:db:2c:b9:a8:83:05:
                    6d:23:1a:09:32:9a:bd:b7:05:ca:c7:26:1a:aa:e5:
                    d1:e7:ab:8a:4c:65:ce:0d:e3:bb:30:c8:be:6c:4d:
                    fa:27:41:46:5f:22:44:59:7a:80:8b:92:09:7e:ee:
                    96:35:cb:b7:f3:83:42:97:4d:72:87:ae:45:aa:97:
                    a6:b4:35:22:cf:bb:f9:38:c5:62:0c:61:3b:b6:a8:
                    ca:98:a5:42:85:b4:73:53:d8:5d:7e:9b:81:95:9b:
                    5e:b5:52:4c:74:8e:78:d6:15:17:0b:e1:f9:49:6e:
                    da:88:94:c8:ea:62:ea:8f:ed:33:c9:f6:65:08:fa:
                    1e:72:fd:6c:04:6d:cb:07:a0:11:c8:4d:d3:80:f8:
                    89:2c:ab:c8:54:0c:23:7d:f4:a7:71:a2:e1:de:a8:
                    3d:28:e7:c7:14:56:81:fb:d5:4a:ae:11:62:7f:9b:
                    02:c0:1b:51:2e:22:2c:be:38:e3:69:63:e1:ad:b9:
                    f4:42:78:3f:a6:f6:60:42:1f:3d:f8:c7:62:1a:ca:
                    3a:dc:d3:b9:d1:a9:46:2f:de:bd:de:24:c6:80:47:
                    3b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F4:AB:C0:20:EE:03:C7:9B:2B:8F:EE:8B:CC:87:3B:6A:90:C9:61
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663761663a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f7af::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:a9:a2:91:8e:96:6e:f6:43:19:01:9e:b6:d5:aa:43:7e:62:
         ef:f8:9c:57:64:ae:82:63:2e:49:e4:7a:f3:e1:c7:72:0d:5c:
         be:5f:b0:02:81:ff:82:f1:4d:c1:ed:89:3a:3e:48:50:89:6d:
         2d:3a:08:ba:5b:73:0a:a3:72:54:81:51:92:83:16:20:cf:a9:
         00:7b:7c:48:1d:89:75:38:3d:e8:cc:7e:ad:5a:db:8f:f2:d1:
         68:d7:03:b8:fe:7b:bb:4d:79:ec:1b:53:dc:81:d7:6d:e5:de:
         0b:c1:31:33:6c:c0:ed:31:1c:d0:a3:32:63:f4:60:13:1c:1c:
         72:b9:87:6b:30:3f:b2:e7:0d:45:56:ad:a1:04:5e:6f:7e:3e:
         f5:b1:5a:a3:72:e1:24:5b:63:9f:bd:42:d6:24:1e:f3:1d:ac:
         3f:06:d8:59:9f:af:89:f6:30:2f:85:cb:79:52:03:47:2a:f5:
         e2:8d:74:9d:b0:fc:f5:2d:af:b3:1d:00:ee:46:e8:a9:9f:b2:
         a0:30:74:85:99:2b:e7:51:60:00:23:14:8f:18:dc:ea:53:6a:
         10:ef:b0:cb:c0:3c:59:ee:49:c4:3a:35:1e:54:5d:3b:16:0e:
         36:47:c1:31:33:e6:14:5c:c9:24:0e:5e:da:23:4b:7c:69:75:
         cb:5c:a4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:29:59 2025 by rpki-client