Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/326130373a353463313a643335313a3a2f34382d3438203d3e20323030333531.roa
File:                     326130373a353463313a643335313a3a2f34382d3438203d3e20323030333531.roa (raw, json)
Hash identifier:          De0UfskrTBGr7bJz+I90zDxboa8eYYIRLsCS+qK+FQI=
Subject key identifier:   5A:F0:22:FE:87:2A:DD:61:59:4F:4E:37:50:93:F0:BB:CE:ED:B9:0D
Certificate issuer:       /CN=EDEA491E366952BB35E14C57B2C7DC604C2908C1
Certificate serial:       27EC86E692D80D514B557A9B6E267BE313F43728
Authority key identifier: ED:EA:49:1E:36:69:52:BB:35:E1:4C:57:B2:C7:DC:60:4C:29:08:C1
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/326130373a353463313a643335313a3a2f34382d3438203d3e20323030333531.roa
Signing time:             Wed 09 Sep 2026 03:45:57 +0000
ROA not before:           Wed 09 Sep 2026 03:40:57 +0000
ROA not after:            Wed 08 Sep 2027 03:45:57 +0000
asID:                     200351
IP address blocks:        2a07:54c1:d351::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 02:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ec:86:e6:92:d8:0d:51:4b:55:7a:9b:6e:26:7b:e3:13:f4:37:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDEA491E366952BB35E14C57B2C7DC604C2908C1
        Validity
            Not Before: Sep  9 03:40:57 2026 GMT
            Not After : Sep  8 03:45:57 2027 GMT
        Subject: CN=5AF022FE872ADD61594F4E375093F0BBCEEDB90D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d6:4a:02:b3:59:ce:1b:9a:8e:f8:ab:c0:65:
                    8e:6f:bd:37:3d:63:9f:8b:56:84:5a:f5:7d:78:2d:
                    0d:24:94:21:01:92:c6:0d:9c:1d:08:c4:58:a5:de:
                    66:a5:c3:b6:ad:5c:b9:92:d9:e1:e9:74:15:aa:ad:
                    ab:4e:d0:41:ef:ac:a6:21:f7:2d:ba:3c:f4:36:a3:
                    b1:66:6b:fe:37:c3:5b:e0:0e:cb:85:8d:cd:07:8e:
                    25:a0:31:c9:4e:ad:81:05:2f:2c:ca:f7:48:09:dc:
                    e0:af:09:3f:30:18:62:f5:39:67:1f:ff:36:17:5a:
                    e2:66:c1:0a:b0:46:e2:ba:85:14:f4:14:4b:6f:0c:
                    ab:0d:80:fe:11:f6:de:8c:2c:1c:9a:8a:59:7c:fd:
                    c5:96:f9:84:b8:34:76:f3:2f:e5:d8:66:a6:70:7c:
                    b9:c7:40:d2:7b:34:5e:68:8e:cd:2f:91:d6:58:e1:
                    62:81:d0:9d:d3:38:2d:1a:86:53:e4:44:16:b6:73:
                    62:6d:ec:bd:6c:e3:7b:ef:4f:84:6d:54:de:f6:17:
                    4b:3c:40:81:66:e8:1c:2d:9f:75:ab:d5:06:f2:64:
                    0f:55:86:54:80:eb:a3:df:8d:a7:e7:8e:24:7d:e1:
                    93:fe:7e:c0:36:e6:c9:19:da:db:aa:c2:12:56:de:
                    bc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F0:22:FE:87:2A:DD:61:59:4F:4E:37:50:93:F0:BB:CE:ED:B9:0D
            X509v3 Authority Key Identifier:
                keyid:ED:EA:49:1E:36:69:52:BB:35:E1:4C:57:B2:C7:DC:60:4C:29:08:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/EDEA491E366952BB35E14C57B2C7DC604C2908C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/4/326130373a353463313a643335313a3a2f34382d3438203d3e20323030333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:d351::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:29:03:73:df:63:00:f5:ee:d7:b2:db:c2:10:25:5b:8e:05:
         ad:f4:7b:a4:26:d3:b6:64:e0:8e:cf:65:20:2d:e5:d8:02:db:
         a6:a5:e7:bb:39:1e:ef:3d:59:c3:b0:5b:1c:eb:4d:99:a4:be:
         64:00:73:b2:f5:22:fb:12:14:a8:80:30:9e:b8:7f:d3:cb:8b:
         a8:90:30:f0:7b:86:4a:7f:c8:1e:04:95:0b:d8:6d:e2:5b:90:
         6f:6f:6c:ea:74:22:92:9f:75:2c:63:b9:a2:fe:4c:5a:af:66:
         89:7a:02:4a:45:2b:28:fe:5e:6f:f2:75:2a:a6:92:7e:42:e6:
         8f:9e:4d:c0:1e:03:9c:7d:d3:b7:2f:28:5d:b5:27:f2:7d:2b:
         13:55:f6:32:0f:bb:5a:56:63:85:36:55:8f:87:7a:e8:ba:67:
         92:35:a6:a1:f5:88:99:d6:3c:75:8b:58:1d:41:fb:23:1f:61:
         6a:f0:c2:3b:69:d3:05:96:b6:fe:d2:ca:e1:76:91:6c:96:e3:
         ab:e1:93:65:0b:a2:13:b3:b0:52:98:d0:5c:a9:f8:d6:28:66:
         bd:26:fd:26:50:7d:60:3a:71:19:f0:ec:c8:73:af:2d:94:d7:
         69:2b:e8:81:78:b0:d8:16:1a:35:db:d8:b4:9b:67:19:63:37:
         2a:43:e0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:34:08 2026 by rpki-client