Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33643a3a2f34382d3438203d3e20323136333131.roa
File:                     326130623a346530373a33643a3a2f34382d3438203d3e20323136333131.roa (raw, json)
Hash identifier:          nc2iO+CsaXL+gvyBzXtRwVQszpOFufIIMGhYpfVNP8w=
Subject key identifier:   FA:D6:2E:02:97:98:AD:66:5E:9E:06:C1:9F:2B:86:BA:32:95:34:53
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       6C0ADFB3A9EB4465007D733DE9598E2191C9913B
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33643a3a2f34382d3438203d3e20323136333131.roa
Signing time:             Sun 18 May 2025 19:22:10 +0000
ROA not before:           Sun 18 May 2025 19:17:10 +0000
ROA not after:            Sun 17 May 2026 19:22:10 +0000
asID:                     216311
IP address blocks:        2a0b:4e07:3d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0a:df:b3:a9:eb:44:65:00:7d:73:3d:e9:59:8e:21:91:c9:91:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: May 18 19:17:10 2025 GMT
            Not After : May 17 19:22:10 2026 GMT
        Subject: CN=FAD62E029798AD665E9E06C19F2B86BA32953453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:39:7e:14:f8:c2:6d:3c:a0:94:a5:50:2b:
                    92:04:3a:4b:36:e9:65:72:f0:ee:6e:a3:7c:b8:a1:
                    80:c0:78:45:7b:7b:f3:45:82:d7:84:de:c2:3f:0c:
                    f9:a3:79:bc:3f:a0:1f:f1:76:fd:e1:2a:04:6d:00:
                    38:8f:b6:1d:08:a0:eb:88:61:29:db:54:01:e3:d3:
                    13:ef:1d:db:27:56:84:30:2f:41:c5:c4:69:91:e0:
                    2e:ac:e3:41:e0:05:a4:7a:07:eb:a0:ec:d8:12:3b:
                    31:e8:90:a3:f6:21:1f:89:79:95:87:6f:60:96:81:
                    68:31:2c:77:36:76:fa:31:e5:04:68:32:11:7c:f4:
                    ab:76:a9:5e:2c:97:c9:ac:75:43:ea:0a:a2:42:ff:
                    65:a1:01:db:2a:12:a2:df:77:28:89:2d:ee:56:b8:
                    86:1f:d1:f8:38:8b:84:05:de:9d:df:d9:b2:2f:fc:
                    34:43:fd:6b:c8:3a:ed:db:a1:7c:2f:b2:61:cd:40:
                    18:14:92:5f:09:e8:69:7a:cf:84:e2:90:a2:3b:78:
                    20:84:ef:5f:91:38:13:65:aa:b8:4f:56:eb:19:63:
                    93:33:57:81:e0:d9:dc:73:6c:da:f9:c7:09:b2:dc:
                    50:89:85:73:83:7d:98:0e:c6:c5:76:37:04:61:74:
                    9c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D6:2E:02:97:98:AD:66:5E:9E:06:C1:9F:2B:86:BA:32:95:34:53
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33643a3a2f34382d3438203d3e20323136333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:3d::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:d1:df:f8:71:65:5c:66:3b:2e:89:a3:21:29:a3:5c:13:00:
         2c:94:fb:d0:f7:19:9c:4a:08:88:e5:78:f6:f7:56:f5:ac:5c:
         0e:9f:07:c9:6c:c7:fb:d2:30:1e:34:43:40:7d:88:d6:23:29:
         49:38:95:be:89:49:fa:06:b9:23:d5:4e:93:21:f5:f5:3a:c6:
         8b:4f:f8:8e:45:18:ed:c2:8d:f6:98:63:34:6d:36:f7:43:db:
         0d:29:0e:99:aa:6b:be:b9:12:88:96:7c:f7:1b:8e:51:5c:cc:
         f1:53:89:a4:44:21:95:b5:d9:9e:bd:5a:36:b5:b2:e6:f7:f6:
         e8:9c:87:4b:85:a1:09:a2:ec:a3:50:49:de:c7:48:f8:17:fb:
         d3:be:84:b5:a8:e4:4b:b8:b3:e9:cc:4c:20:1d:66:32:e8:90:
         14:87:9b:78:82:b1:c8:60:6c:91:3b:f3:e5:f5:8a:ef:17:fb:
         62:e9:71:91:9f:69:a7:9e:61:5d:53:d1:c8:0f:2c:e8:59:62:
         03:84:fc:1c:3b:64:cb:aa:12:e2:f4:d2:17:31:49:f1:69:ba:
         dc:8c:79:65:1a:21:77:a3:f1:cd:24:e5:f3:f4:7b:0d:09:3c:
         c0:68:ef:4c:17:bb:b8:88:0b:9f:3a:36:f2:ac:0c:f5:cc:89:
         99:9c:50:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:21:33 2025 by rpki-client