Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33393a3a2f34382d3438203d3e20323134393239.roa
File:                     326130623a346530373a33393a3a2f34382d3438203d3e20323134393239.roa (raw, json)
Hash identifier:          Cx36yu3VfjPvQqjL/erB40x9KVCzY4L1CGbQGOKVRPw=
Subject key identifier:   5E:7A:2D:6A:71:CA:9E:22:E1:C9:76:52:BA:96:E1:8E:64:4A:22:35
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       6B68FC7EDC56E10D8C118A30EA9B9FD64DDEEF78
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33393a3a2f34382d3438203d3e20323134393239.roa
Signing time:             Mon 04 Aug 2025 21:17:59 +0000
ROA not before:           Mon 04 Aug 2025 21:12:59 +0000
ROA not after:            Mon 03 Aug 2026 21:17:59 +0000
asID:                     214929
IP address blocks:        2a0b:4e07:39::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:68:fc:7e:dc:56:e1:0d:8c:11:8a:30:ea:9b:9f:d6:4d:de:ef:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Aug  4 21:12:59 2025 GMT
            Not After : Aug  3 21:17:59 2026 GMT
        Subject: CN=5E7A2D6A71CA9E22E1C97652BA96E18E644A2235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:c0:98:11:52:90:61:3f:e1:29:ee:53:22:
                    92:86:e2:2e:05:14:bc:64:fb:0c:a6:52:24:29:57:
                    30:78:c2:4a:d0:83:a2:ab:f1:5e:49:b3:f2:47:a6:
                    15:ea:f9:ee:f5:53:21:8a:46:6f:f9:db:d0:3a:c9:
                    ae:ab:04:07:fe:76:11:34:ad:9b:09:50:0e:10:92:
                    03:74:dc:10:ce:d3:a4:2b:8a:11:bf:61:68:02:c5:
                    55:29:fd:5f:b4:4f:48:c9:f4:88:48:11:ba:e3:9e:
                    f3:f4:f0:6b:39:80:a2:f4:7b:71:4b:40:a8:40:fa:
                    6c:2a:8c:82:25:ef:d2:43:93:35:61:e8:58:a5:e3:
                    02:08:73:00:44:55:c8:f7:90:ca:46:48:15:97:a7:
                    11:53:83:18:b1:f5:a1:af:4b:b8:45:34:7d:93:df:
                    29:d2:aa:aa:21:e8:e5:dc:26:66:83:b8:cb:67:f1:
                    55:15:14:a2:38:c3:f6:4d:a6:25:86:a2:0a:51:ef:
                    db:60:bc:17:51:c5:99:14:a5:41:5c:dc:12:35:b2:
                    b1:dc:0e:fd:89:c6:d2:06:df:04:d4:28:8b:39:58:
                    14:15:5a:e9:05:11:12:90:63:13:d0:70:9f:6a:ef:
                    3b:24:ff:2b:1d:d4:8f:9a:9c:0b:ac:ba:2e:2b:e2:
                    44:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7A:2D:6A:71:CA:9E:22:E1:C9:76:52:BA:96:E1:8E:64:4A:22:35
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33393a3a2f34382d3438203d3e20323134393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:39::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:8d:ef:15:02:66:6a:2e:9f:e8:ee:ff:27:77:12:0e:62:1b:
         0f:16:5a:c0:21:5e:90:84:aa:e1:e0:8a:ca:c9:84:2e:d4:c7:
         c3:45:5c:8f:fe:b9:14:e8:86:46:ef:04:cf:fd:ce:87:4e:71:
         43:01:c7:bf:c3:3b:1b:a1:61:a9:39:26:ee:90:1f:3c:2b:bb:
         de:23:88:05:43:b6:69:24:44:33:b1:cf:7e:94:27:29:8a:5a:
         a9:46:48:70:2b:07:0f:f1:46:5d:b5:b6:41:25:d1:26:05:bc:
         2f:93:16:52:1b:fe:40:94:3f:c3:ec:92:9c:52:21:a5:49:59:
         6c:af:55:9b:d2:07:38:97:63:c0:f1:01:64:7f:a0:30:9e:7c:
         d4:40:57:4e:a8:d1:ff:e9:1c:f5:a8:39:c7:00:9e:ee:c7:4d:
         b7:b6:c7:9f:3d:59:e6:b8:e4:c2:41:66:7f:40:c7:d0:b7:33:
         e7:94:9b:80:a3:4b:37:1e:89:6d:5f:f9:74:12:b0:cf:79:41:
         13:54:c4:23:9f:c1:4d:8d:5d:01:a0:aa:4d:d2:b7:29:2f:5b:
         22:9a:23:e0:d8:b2:ac:54:13:95:6e:17:40:62:49:5f:16:4c:
         7e:de:47:b0:dd:86:74:ab:64:fb:33:7e:dd:d5:14:35:3a:e4:
         97:e8:ad:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:02:20 2025 by rpki-client