Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3531313a3a2f34382d3438203d3e20323134353433.roa
File:                     326130623a346530373a3531313a3a2f34382d3438203d3e20323134353433.roa (raw, json)
Hash identifier:          AaPIPr33vXgXCjIj6rSAR9CFXBNknqzyIaVi3ayPKUM=
Subject key identifier:   B5:95:A7:EC:EF:D3:A2:B9:23:E7:03:74:84:7F:08:95:97:D3:51:F2
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       15AB073A46FE405C5ED43D33453DC51A737DA31F
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3531313a3a2f34382d3438203d3e20323134353433.roa
Signing time:             Fri 13 Mar 2026 21:36:57 +0000
ROA not before:           Fri 13 Mar 2026 21:31:57 +0000
ROA not after:            Fri 12 Mar 2027 21:36:57 +0000
asID:                     214543
IP address blocks:        2a0b:4e07:511::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ab:07:3a:46:fe:40:5c:5e:d4:3d:33:45:3d:c5:1a:73:7d:a3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Mar 13 21:31:57 2026 GMT
            Not After : Mar 12 21:36:57 2027 GMT
        Subject: CN=B595A7ECEFD3A2B923E70374847F089597D351F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0c:75:e1:ed:d5:f3:85:db:2b:d4:9e:c6:33:
                    da:ce:6e:77:42:25:86:a1:6a:1c:01:22:8d:b8:06:
                    a7:bf:55:2a:ec:8d:1d:4f:65:24:8f:9c:1a:9a:e9:
                    a5:ff:2b:36:1c:f8:51:56:f6:ed:ba:d2:4d:63:a2:
                    5b:d4:3b:6b:60:0f:c7:6a:9d:58:c6:fc:74:fd:19:
                    a2:68:39:f4:85:55:62:f8:4a:b6:3a:a1:95:e4:0b:
                    28:de:d3:3c:9b:6c:09:4a:90:4e:13:3f:3f:99:e5:
                    15:e0:2b:6d:a5:8b:99:32:21:20:d6:ec:68:f7:ab:
                    11:82:08:03:82:61:b4:74:53:49:6d:48:6f:d2:b4:
                    49:a5:99:72:90:d5:1e:bb:06:b3:93:0f:e9:e9:6b:
                    a7:5f:16:f8:ca:3c:25:08:0b:7c:5a:45:cb:bc:95:
                    7e:88:59:85:8b:16:a0:3c:fd:a4:5a:c0:90:30:40:
                    ff:0a:19:09:04:c9:d1:72:4d:b0:f9:bf:9e:99:96:
                    5c:4e:e8:c4:43:51:cf:5e:65:97:ec:b3:7c:df:f8:
                    45:5e:a6:0c:40:90:20:90:75:61:ae:fc:94:6e:aa:
                    e5:44:b2:b1:b5:54:d1:d4:53:d8:4a:a4:73:01:0f:
                    02:07:a1:a9:c9:3d:97:d1:54:59:42:95:29:dc:4b:
                    46:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:95:A7:EC:EF:D3:A2:B9:23:E7:03:74:84:7F:08:95:97:D3:51:F2
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3531313a3a2f34382d3438203d3e20323134353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:511::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:26:3f:59:16:51:24:31:62:99:92:a3:18:9a:e0:b8:90:7e:
         ad:b7:c0:53:cf:90:1b:79:39:2c:2e:ee:fc:c9:94:21:07:0d:
         ed:ad:25:15:7a:1d:c0:8a:f4:a6:52:a8:95:61:85:d3:fc:6d:
         c0:16:34:42:92:82:18:09:2d:ed:cb:46:d0:01:93:bd:3a:5b:
         27:de:14:f9:50:12:66:60:b0:57:3c:9f:0d:2e:c5:b3:58:b8:
         b3:1a:54:04:99:b0:28:7c:62:ea:20:92:0d:b3:4d:38:47:af:
         19:1f:4f:72:61:9c:31:35:1d:11:d5:46:8b:30:71:a9:e2:e9:
         3f:1e:04:32:d9:ae:85:ab:dd:f2:f4:df:d2:86:02:a2:5b:9b:
         32:c8:9a:68:cf:11:28:a8:bc:68:9c:09:89:62:7e:4c:c2:9f:
         02:92:47:6c:5a:1c:d1:fe:92:7d:21:0a:e5:de:bf:c5:04:00:
         a3:48:60:73:56:0c:1f:8b:8a:19:78:75:0c:01:82:da:4c:11:
         6d:0e:29:db:5f:78:5f:41:be:a9:ad:31:59:58:d3:c6:96:1b:
         69:2b:53:1d:4e:d5:f6:9f:ee:e2:c9:e5:1b:3f:21:82:52:6a:
         5c:98:29:08:75:b9:8a:ac:65:43:58:08:f9:08:72:43:f5:2c:
         1a:0e:1e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:53 2026 by rpki-client