Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa (raw, json)
Hash identifier:          vnnKiyGc/X/xlNdPqJxeg52jZ3MPfXDJB+VwdL0zc5w=
Subject key identifier:   02:76:6D:7B:68:35:7C:03:FD:48:28:CB:89:5D:B5:BE:F1:49:3E:EE
Certificate issuer:       /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial:       73D6238A4008C455C0E2E4479CB11485B11EAB6C
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa
Signing time:             Fri 04 Jul 2025 09:21:15 +0000
ROA not before:           Fri 04 Jul 2025 09:16:15 +0000
ROA not after:            Fri 03 Jul 2026 09:21:15 +0000
asID:                     200454
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 11:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d6:23:8a:40:08:c4:55:c0:e2:e4:47:9c:b1:14:85:b1:1e:ab:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
        Validity
            Not Before: Jul  4 09:16:15 2025 GMT
            Not After : Jul  3 09:21:15 2026 GMT
        Subject: CN=02766D7B68357C03FD4828CB895DB5BEF1493EEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:30:d9:b3:70:d2:6e:98:d7:74:31:b5:bf:ea:
                    1f:99:aa:63:eb:fa:ab:8d:62:3f:53:9a:4c:81:63:
                    f6:9a:2c:70:0f:2f:62:bb:56:1e:98:62:ef:5d:12:
                    1e:9c:17:36:c3:b2:d9:3c:4d:fa:d9:38:cf:d6:88:
                    98:9c:cc:78:39:6a:b0:dd:3c:7b:20:be:7a:4e:85:
                    49:d2:df:af:c6:53:81:39:a9:f2:b3:99:31:b5:a2:
                    de:6b:68:58:47:ce:b0:2b:ad:93:1a:96:85:16:0f:
                    02:23:2e:0e:90:44:2f:39:45:87:b0:a7:ba:b9:3a:
                    f8:e7:15:55:ba:0d:9c:bc:9d:3c:fb:51:22:fc:60:
                    f1:a6:15:46:77:95:5d:11:f7:35:26:81:45:8d:13:
                    2e:01:26:6c:1b:fc:2a:a2:61:cb:e5:13:24:84:5d:
                    6d:e5:67:b6:9e:f1:2b:74:f4:34:3c:43:9d:f5:10:
                    30:13:2f:3f:b8:28:35:c3:ff:f7:44:b1:1d:cc:5f:
                    11:7d:8d:bc:71:fd:c5:d9:29:2c:6d:b4:54:d6:3c:
                    c3:46:f1:fb:16:20:7d:cc:5f:0f:3b:d8:a1:cf:6e:
                    39:4a:67:74:e5:84:ac:db:97:5a:ce:74:d9:63:7e:
                    fc:32:d5:cf:99:8e:b3:41:6c:8b:02:d7:0f:b0:ef:
                    8b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:76:6D:7B:68:35:7C:03:FD:48:28:CB:89:5D:B5:BE:F1:49:3E:EE
            X509v3 Authority Key Identifier:
                keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:0d:0b:c6:12:65:b6:37:37:92:30:1c:10:20:d5:03:0f:c9:
         0d:f8:b5:2b:b3:7b:f0:aa:f9:46:10:f5:0d:54:db:51:37:1a:
         54:42:1b:95:9e:28:42:ee:b5:44:22:bc:42:d9:b3:dd:ab:5d:
         2a:33:5d:ce:e6:ff:fa:eb:9a:0f:85:ea:20:d0:16:96:6b:a2:
         49:ac:fa:63:2a:9e:a9:e9:49:a7:9d:79:56:64:eb:23:3e:d9:
         ac:3c:fd:f1:9c:b9:08:60:0f:a5:0e:de:00:2a:93:90:e8:a1:
         08:ba:56:e7:c5:4d:81:9f:8c:83:1b:1d:a0:2c:77:bb:fc:6d:
         99:ac:c5:8c:09:37:fb:2c:1c:a7:da:7b:a9:37:ed:ba:64:29:
         90:fb:1a:2a:ce:27:0a:86:96:5d:ca:a7:30:4b:ed:6e:58:91:
         88:af:30:54:ba:21:f4:4d:99:bf:ee:00:2b:eb:fc:3e:4a:2a:
         24:5f:04:cf:f9:bf:b4:39:85:13:fd:47:d5:ac:60:cc:2f:04:
         e9:13:ea:17:08:ac:e3:ba:2b:ad:2c:ec:e8:59:d3:9b:78:69:
         fa:2f:47:a7:9b:65:3a:89:ae:01:51:d2:6c:47:a3:71:0e:3c:
         9b:e1:6f:8e:ff:d6:7d:a0:10:55:04:dd:e1:ec:82:04:c0:09:
         b3:82:7a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:12:29 2025 by rpki-client