Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a343a3a2f34362d3436203d3e203539343439.roa
File:                     326130623a346530373a343a3a2f34362d3436203d3e203539343439.roa (raw, json)
Hash identifier:          92vVcWxp1EZSyclxap4uaBiS4V0gGmFqr1N7HpeUg9w=
Subject key identifier:   A4:D1:01:01:DF:AF:BF:17:D7:3E:5D:50:3F:66:DD:B2:50:8B:B6:A5
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       58C3430D7EEE273C952FADCC4C5558AABAAC4D9A
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a343a3a2f34362d3436203d3e203539343439.roa
Signing time:             Fri 13 Mar 2026 14:36:56 +0000
ROA not before:           Fri 13 Mar 2026 14:31:56 +0000
ROA not after:            Fri 12 Mar 2027 14:36:56 +0000
asID:                     59449
IP address blocks:        2a0b:4e07:4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c3:43:0d:7e:ee:27:3c:95:2f:ad:cc:4c:55:58:aa:ba:ac:4d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Mar 13 14:31:56 2026 GMT
            Not After : Mar 12 14:36:56 2027 GMT
        Subject: CN=A4D10101DFAFBF17D73E5D503F66DDB2508BB6A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e7:3b:c2:4b:a4:b6:3b:d8:6e:eb:1f:d0:69:
                    38:04:5d:0a:4f:0b:b4:44:af:35:96:d3:ff:46:34:
                    28:c9:74:84:b4:ca:2c:35:ff:04:a8:da:27:04:be:
                    3b:55:3c:db:20:d4:be:7e:d8:94:39:ab:c9:55:4c:
                    15:c2:a4:f7:2f:6e:0f:8c:f0:a8:2e:cf:59:47:fa:
                    3d:7c:e5:e9:69:61:bf:fe:40:e4:7f:df:5d:12:8e:
                    1d:bd:d9:26:57:12:15:9f:95:7d:be:fb:5a:6f:e3:
                    08:5b:1d:24:e9:9d:02:63:0d:c6:a4:b7:31:4b:1b:
                    ad:0e:5d:a2:15:fe:00:10:b0:8d:e3:89:de:e2:f9:
                    2d:97:26:29:c4:7e:4c:36:37:7c:9b:45:b3:ea:de:
                    76:80:1a:dc:5b:ad:9a:8f:25:87:bd:14:fa:2a:6e:
                    fc:d5:f2:aa:34:d1:d0:26:b5:fe:af:32:87:d2:38:
                    c0:e4:c5:18:d8:ac:34:6e:76:7c:9a:ed:85:51:79:
                    4b:8f:a3:7b:fb:fe:29:e5:aa:86:e9:eb:d1:37:6d:
                    ae:8b:a0:58:38:69:ab:8e:cb:58:4b:31:94:3f:71:
                    33:a4:8a:7f:1b:ff:d3:89:df:20:89:9b:6e:b1:6c:
                    51:74:d6:5d:05:a3:36:45:17:90:ce:a6:d7:18:b7:
                    61:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D1:01:01:DF:AF:BF:17:D7:3E:5D:50:3F:66:DD:B2:50:8B:B6:A5
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a343a3a2f34362d3436203d3e203539343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:4::/46

    Signature Algorithm: sha256WithRSAEncryption
         6c:49:0c:a2:c5:5e:45:0b:c8:47:e0:04:8e:f9:40:c6:94:5c:
         6a:55:f1:7b:fe:52:aa:35:02:f6:dc:2e:f8:23:e2:67:b0:fc:
         aa:b2:12:af:ae:16:06:19:83:9a:04:78:57:30:56:c1:fb:4e:
         98:8c:f6:c6:e5:64:74:d9:aa:46:51:68:81:0c:5a:05:7c:f9:
         93:ff:53:18:71:35:86:9a:52:21:1f:2f:70:e9:85:29:47:4f:
         d5:f6:24:c9:37:5b:8c:51:74:4e:38:30:76:66:87:31:b1:1b:
         3f:91:f0:c2:b6:04:37:75:15:68:ad:7b:be:94:dc:fb:fb:3f:
         ab:bd:17:87:e3:46:c2:80:3a:2a:e8:7d:32:41:06:ec:d4:5a:
         63:c7:d9:6a:3f:06:62:45:21:46:fe:63:10:43:67:62:b5:d1:
         52:1b:ef:06:98:ec:30:b5:c7:e3:86:a5:31:92:56:a2:cb:d4:
         44:8d:21:46:33:53:84:fc:19:0b:af:db:90:18:52:dc:d3:6f:
         b3:ce:02:7e:77:77:c0:55:5a:16:34:97:2d:22:45:00:e7:7b:
         c0:a2:6f:a9:8a:dd:bf:a7:d9:1d:5d:04:bb:7d:c4:5e:6c:68:
         fa:df:5e:16:10:93:f9:be:19:c5:60:02:b1:72:98:de:e7:7c:
         fe:e5:86:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:54:17 2026 by rpki-client