Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203539363738.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203539363738.roa (raw, json)
Hash identifier:          oZtp7Wi4vD26iLFx8WKH0Rkd1Q0kdKKgkshMBz+2/p0=
Subject key identifier:   10:6B:6B:F4:5F:7C:FB:FF:E1:B0:67:5C:A3:0C:8C:18:E0:9B:15:B2
Certificate issuer:       /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial:       2E812AA8B7077369B4F87237EA5981C7101D4581
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203539363738.roa
Signing time:             Fri 04 Jul 2025 09:21:15 +0000
ROA not before:           Fri 04 Jul 2025 09:16:15 +0000
ROA not after:            Fri 03 Jul 2026 09:21:15 +0000
asID:                     59678
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 00:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:81:2a:a8:b7:07:73:69:b4:f8:72:37:ea:59:81:c7:10:1d:45:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
        Validity
            Not Before: Jul  4 09:16:15 2025 GMT
            Not After : Jul  3 09:21:15 2026 GMT
        Subject: CN=106B6BF45F7CFBFFE1B0675CA30C8C18E09B15B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1c:cf:19:23:fd:41:03:66:79:33:2b:eb:58:
                    a8:aa:23:37:ea:8e:9a:2c:cf:3e:7c:1e:dd:eb:b1:
                    3c:32:72:1f:ba:96:85:13:98:b9:eb:dc:5f:d4:a7:
                    37:ae:05:71:05:01:80:cb:5d:89:a6:49:7d:2d:5b:
                    c5:a6:f4:b9:ce:52:90:8a:04:23:d4:74:0e:fd:b0:
                    a9:27:60:1b:ff:a5:b8:69:a9:49:62:92:d6:41:71:
                    20:ab:0e:29:b1:2c:73:52:6b:99:77:2a:d0:c6:62:
                    6e:34:34:b1:a2:d6:70:e6:ef:ea:77:f2:84:03:4e:
                    5d:f8:1b:ff:5b:0a:37:52:2d:a2:72:ef:21:85:f3:
                    0c:28:b0:e0:f3:49:13:15:a3:cc:88:74:55:24:91:
                    21:7e:ea:33:a3:d3:62:9a:3f:ef:53:ed:b8:84:4f:
                    23:eb:19:4b:13:b7:45:e8:b9:2e:b8:24:d6:97:45:
                    83:05:94:d0:ed:c6:28:5e:a4:12:e1:5f:05:11:05:
                    a9:12:4b:ba:d8:d3:8d:05:e9:26:1c:62:64:c7:a7:
                    26:1d:0e:54:10:ea:91:e6:57:79:27:e4:3f:1e:3f:
                    a0:e0:1a:cf:19:9d:50:68:8d:ad:9f:13:6d:ca:56:
                    6b:d8:9a:71:66:dd:89:c6:3e:92:59:7d:27:64:ce:
                    87:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6B:6B:F4:5F:7C:FB:FF:E1:B0:67:5C:A3:0C:8C:18:E0:9B:15:B2
            X509v3 Authority Key Identifier:
                keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/326130373a353463303a666665653a3a2f34382d3438203d3e203539363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:69:58:95:a5:90:4d:30:68:15:13:a6:98:34:80:ee:1c:f5:
         72:5c:d6:24:52:33:0a:78:a8:e8:14:e4:b0:be:12:6c:10:86:
         d9:1b:a3:aa:67:80:88:c9:b1:6e:a5:df:38:6c:db:74:06:06:
         88:bf:71:34:89:b9:47:6b:75:39:91:7b:e3:c8:ce:17:30:6d:
         a1:e2:d5:d8:94:02:ce:cd:11:d7:87:b8:72:36:45:bc:d6:b7:
         3d:5e:ab:62:47:8f:77:1c:a7:17:f6:13:29:dd:de:6a:84:7b:
         fe:45:dd:0a:e2:33:62:d4:1c:9b:2c:08:e0:f1:f8:d2:d1:b2:
         1c:23:df:ab:87:16:56:a8:f6:aa:ca:7c:e4:e6:4e:4a:74:fe:
         e5:51:ad:68:a9:7a:88:1a:38:72:9f:0e:3d:1f:29:4b:9b:0b:
         63:07:63:23:93:51:5e:d4:f8:4c:c5:08:26:ad:02:ac:fb:1a:
         e2:4f:b8:ef:d9:81:59:74:5b:27:d1:f4:6f:28:aa:96:18:4c:
         05:53:2a:8a:86:15:74:a2:6e:bb:72:8d:4b:84:0e:c8:a1:a5:
         54:a1:2d:6e:56:25:8c:92:d8:44:ad:53:a2:8f:d0:e1:7f:91:
         4b:3f:86:c5:1f:5d:5d:c2:98:77:65:96:4e:53:63:3a:7b:f6:
         8b:b8:da:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:18:33 2025 by rpki-client