Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS57883.roa
File:                     AS57883.roa (raw, json)
Hash identifier:          Ed2sfDXwL87vHMOxSW+hEA7MbeE+xMG0ZffJrmQoAsQ=
Subject key identifier:   D9:D9:A5:95:D7:68:ED:DA:5E:F9:75:FA:64:28:5A:12:23:97:B3:67
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       1FB41A36A94477F6ED760C98CCCAA7C807004347
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS57883.roa
Signing time:             Thu 04 Jun 2026 15:58:53 +0000
ROA not before:           Thu 04 Jun 2026 15:53:53 +0000
ROA not after:            Thu 03 Jun 2027 15:58:53 +0000
asID:                     57883
IP address blocks:        2a06:a005:110::/44 maxlen: 48
                          2a06:a005:120::/44 maxlen: 48
                          2a06:a005:130::/44 maxlen: 48
                          2a06:a005:140::/44 maxlen: 48
                          2a06:a005:150::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b4:1a:36:a9:44:77:f6:ed:76:0c:98:cc:ca:a7:c8:07:00:43:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jun  4 15:53:53 2026 GMT
            Not After : Jun  3 15:58:53 2027 GMT
        Subject: CN=D9D9A595D768EDDA5EF975FA64285A122397B367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:78:62:ed:16:e4:d0:74:40:e1:08:d8:9b:df:
                    71:75:54:fd:13:d0:5e:fc:6a:47:3a:0d:4e:fa:0d:
                    5d:57:dc:97:73:ea:80:23:53:33:7a:48:3f:9b:f0:
                    67:65:27:88:09:29:06:67:31:c8:dd:f5:84:04:ef:
                    3d:dc:9c:9e:a9:e0:6f:b3:4e:2d:ab:a0:c5:26:5e:
                    85:38:b8:d6:5c:b1:4c:10:3e:83:3a:02:7f:85:63:
                    e8:88:ee:48:81:7d:e3:32:d9:3e:96:42:fc:b2:a9:
                    a6:6a:fc:3e:0b:d2:12:47:0e:b2:40:07:eb:71:a5:
                    68:3a:2d:f1:5b:16:19:43:c8:da:f3:e5:0b:dc:f1:
                    ff:4d:bf:80:38:a7:39:5c:54:97:1e:b3:bc:bd:a3:
                    2a:37:09:87:e3:34:a2:da:ad:b9:5c:fd:0d:6f:6e:
                    94:0e:ee:d3:45:a1:08:ee:6f:7c:c1:e7:a7:6b:cc:
                    09:3e:67:2f:1c:a4:23:42:3c:4d:17:d1:46:f5:c0:
                    8c:e2:54:61:f0:75:c4:83:aa:a5:eb:0b:42:be:58:
                    99:83:a7:e4:f9:c3:e2:a3:bb:32:14:d9:44:2d:a0:
                    51:a0:b0:0e:70:95:e7:9a:05:57:5f:52:96:19:05:
                    df:87:9c:93:f9:93:2f:d2:2c:fe:e2:c8:de:8d:79:
                    a8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D9:A5:95:D7:68:ED:DA:5E:F9:75:FA:64:28:5A:12:23:97:B3:67
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS57883.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:110::-2a06:a005:15f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         3d:86:b6:b8:aa:b0:55:81:0a:ca:10:73:fc:22:10:41:31:ab:
         6f:fc:1e:77:fb:67:fe:05:e3:46:ba:be:f8:ec:c6:76:39:b6:
         c9:6c:24:cc:66:32:ec:24:aa:09:f1:47:50:b7:24:b9:26:7a:
         95:01:b2:a7:6b:a7:24:4b:12:58:24:cd:40:05:c2:dc:52:63:
         3c:3e:71:40:ff:e6:c0:45:95:cf:9a:c1:05:35:16:e1:5a:a8:
         79:5e:e8:31:bd:78:33:72:08:9f:ae:26:e3:fe:93:60:19:c9:
         98:4f:a5:87:66:cd:68:fd:66:8e:8e:9c:ce:1f:e3:2d:3d:08:
         5d:c7:73:91:9b:53:99:dc:84:bf:c1:bb:1c:be:a4:71:e6:45:
         fc:7c:76:69:09:7c:7e:38:28:c0:a7:f6:0b:67:7e:72:e9:89:
         4f:76:2a:d7:5c:c8:6e:21:fd:1d:77:b0:cb:bf:cc:af:bd:4f:
         53:43:7f:c5:41:76:73:25:38:b7:86:d0:ec:7c:2e:78:8a:47:
         04:47:1c:29:31:0c:a7:7f:f3:ad:98:b1:b6:15:a2:f2:ed:9c:
         01:c1:e2:6f:64:ba:d5:21:31:44:90:8b:df:29:bf:77:4d:17:
         bb:74:62:1d:f9:1e:91:42:7a:12:e8:71:2f:1e:31:61:b4:ab:
         e2:54:fa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:09 2026 by rpki-client