Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3630383a3a2f34362d3436203d3e20323134353433.roa
File:                     326130623a346530373a3630383a3a2f34362d3436203d3e20323134353433.roa (raw, json)
Hash identifier:          /ujPoWgPVMiM1wN0vy1FycUQO3i9JPZYhZ0RSax/6jI=
Subject key identifier:   2C:68:ED:DB:D7:B7:58:04:D5:DA:7A:79:2D:CC:85:9E:F3:52:70:15
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       5E5657B51D4EBA50A24FF55A8D161B01C53A3CBD
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3630383a3a2f34362d3436203d3e20323134353433.roa
Signing time:             Fri 13 Mar 2026 14:36:57 +0000
ROA not before:           Fri 13 Mar 2026 14:31:57 +0000
ROA not after:            Fri 12 Mar 2027 14:36:57 +0000
asID:                     214543
IP address blocks:        2a0b:4e07:608::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:56:57:b5:1d:4e:ba:50:a2:4f:f5:5a:8d:16:1b:01:c5:3a:3c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Mar 13 14:31:57 2026 GMT
            Not After : Mar 12 14:36:57 2027 GMT
        Subject: CN=2C68EDDBD7B75804D5DA7A792DCC859EF3527015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:21:71:3f:c0:d7:5c:02:67:50:35:fa:a1:81:
                    a7:94:a3:5a:2d:94:e1:93:50:e7:31:f3:84:93:73:
                    9d:a1:ea:f2:9a:22:1c:79:28:d1:e3:30:0b:6a:f0:
                    54:09:47:e1:1c:38:a0:d7:96:64:62:51:11:d4:7d:
                    ef:69:af:92:91:07:60:39:1c:26:9d:fc:22:57:b1:
                    2f:c0:de:d2:95:00:9e:c2:1c:f5:3f:c2:83:11:d2:
                    f3:8a:00:f9:6f:0b:50:89:ba:9e:a1:b4:13:fb:6a:
                    80:36:7e:50:59:b1:9d:19:24:69:7d:bd:c8:9e:60:
                    f1:4e:b2:47:f7:ec:68:22:85:07:cc:9c:82:f5:bb:
                    9f:43:c6:3d:08:38:61:a9:c9:91:1c:e8:db:e9:ce:
                    80:77:e8:ed:f3:34:c4:8b:17:b8:ba:ed:c7:70:04:
                    01:aa:0c:01:f8:3e:48:4b:5b:02:02:38:22:e2:09:
                    a6:db:a3:d8:d9:75:1f:27:59:29:92:c6:47:d9:0a:
                    48:27:a2:9d:f6:87:41:0c:4d:85:00:df:bc:8f:de:
                    87:f8:46:68:ac:81:14:fb:c6:e9:e3:27:45:99:f5:
                    d1:05:4a:44:ee:77:63:45:36:a6:c2:18:56:db:2f:
                    2b:68:12:d6:22:e3:42:2e:a1:6b:b8:11:b8:cc:76:
                    d8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:68:ED:DB:D7:B7:58:04:D5:DA:7A:79:2D:CC:85:9E:F3:52:70:15
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3630383a3a2f34362d3436203d3e20323134353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:608::/46

    Signature Algorithm: sha256WithRSAEncryption
         16:7d:46:00:72:1d:67:05:40:1b:b8:6c:2c:72:24:0f:03:53:
         27:8e:e9:81:d2:09:9e:d6:bf:5e:87:8a:3f:89:04:bd:5a:69:
         c4:1f:f8:8c:ee:61:36:66:f2:40:9a:33:90:72:7b:92:19:93:
         80:ee:00:cc:4d:3b:e1:d3:b4:03:c4:7c:56:e7:c5:b9:21:28:
         b1:a3:91:8e:a4:4e:a7:f8:43:e5:1c:05:bc:8a:53:56:2f:d6:
         f8:a6:3b:0b:b1:37:e1:1f:71:2b:f1:01:12:cd:5a:69:ae:e7:
         60:89:4b:74:65:47:ea:0d:6d:d4:45:c1:75:75:2a:ef:c2:7d:
         a8:75:41:e7:53:b5:2a:6f:64:b3:c1:ea:d0:68:fc:74:55:20:
         54:27:f9:d4:93:19:c1:d3:d0:fd:f5:f0:62:ac:c7:54:95:d2:
         37:33:da:75:d9:aa:15:ee:6c:3b:df:e1:96:89:4d:5a:64:b3:
         fd:f5:32:ab:2e:18:11:01:3d:fc:0c:13:b8:fb:78:e1:f6:e3:
         9c:9c:7e:fe:50:62:8f:29:c4:37:3b:70:e6:0c:c6:19:e9:a7:
         74:a8:fe:1f:1f:6a:b2:76:3c:e4:ed:33:83:28:89:5f:d1:04:
         3b:c0:b8:50:5d:91:3c:9e:2c:90:b0:86:1a:9d:50:01:46:95:
         1d:52:74:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:22 2026 by rpki-client