Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3931633a3a2f34382d3438203d3e20323134393939.roa
File:                     326130623a346530373a3931633a3a2f34382d3438203d3e20323134393939.roa (raw, json)
Hash identifier:          Zqsz8R1DFLhQ4MYx3BCA5rPU/WhHh+dsHMbs5MMXTgc=
Subject key identifier:   81:FA:2D:43:DA:DA:0A:1A:2F:96:67:53:F6:F8:B0:CE:A8:9D:F9:32
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       56628A13ADACC1EECBBCF5B81C3066EBE8CC148B
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3931633a3a2f34382d3438203d3e20323134393939.roa
Signing time:             Fri 13 Mar 2026 21:36:57 +0000
ROA not before:           Fri 13 Mar 2026 21:31:57 +0000
ROA not after:            Fri 12 Mar 2027 21:36:57 +0000
asID:                     214999
IP address blocks:        2a0b:4e07:91c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:62:8a:13:ad:ac:c1:ee:cb:bc:f5:b8:1c:30:66:eb:e8:cc:14:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Mar 13 21:31:57 2026 GMT
            Not After : Mar 12 21:36:57 2027 GMT
        Subject: CN=81FA2D43DADA0A1A2F966753F6F8B0CEA89DF932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:0f:44:30:9f:7b:10:8d:25:55:4e:bb:71:
                    9f:fc:e0:1e:81:0c:aa:d3:0c:5e:32:75:3b:79:c7:
                    2c:9e:b4:6e:15:c8:96:a0:b6:01:e1:8d:04:86:64:
                    9c:90:ee:2c:4d:de:01:6c:39:f2:e4:82:63:27:44:
                    3f:9c:03:80:66:12:4e:e4:e4:97:0b:ce:23:3a:22:
                    67:ba:af:0c:b2:b0:e5:36:9a:29:8e:01:8a:df:37:
                    39:d5:83:7f:14:52:5e:87:7e:66:a1:f1:31:1e:fc:
                    3e:a6:c1:83:e0:c9:23:13:79:59:0c:27:40:be:79:
                    67:09:75:1f:35:90:e8:a8:3b:ff:1e:c9:49:a3:cd:
                    7d:77:75:6c:57:93:29:0e:df:13:e0:44:47:a3:2a:
                    7b:99:06:aa:c4:d7:c7:79:bb:54:de:2a:12:4c:5f:
                    63:7c:00:0d:7e:f4:2b:46:57:e0:36:68:ba:9d:50:
                    0f:06:bb:60:1c:33:96:41:64:f6:c2:9c:db:0b:93:
                    96:5b:3c:ad:43:3c:21:73:e4:b8:d9:59:03:a6:7b:
                    a5:9f:83:ca:2d:c0:b5:e5:7c:ef:a8:ff:54:bb:20:
                    6a:c1:bc:25:1f:ba:61:7e:38:6d:2f:8b:a7:ac:1c:
                    a9:a1:86:24:3f:18:e5:be:69:2d:f6:78:49:bd:ad:
                    01:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FA:2D:43:DA:DA:0A:1A:2F:96:67:53:F6:F8:B0:CE:A8:9D:F9:32
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3931633a3a2f34382d3438203d3e20323134393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:91c::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:ba:c0:96:7a:20:59:0b:f5:06:74:93:aa:1b:6f:23:a5:57:
         28:be:c5:f6:c4:4e:2c:ca:0c:58:33:6b:43:57:9f:ab:6d:77:
         39:7c:4f:f8:ba:32:73:b8:d7:06:e8:f6:3b:76:d6:9c:80:e1:
         27:c1:3e:1a:f1:53:8b:dd:ff:c9:ad:dd:ab:1d:5a:ea:33:42:
         92:3b:be:43:fc:cc:94:1e:b5:cd:15:8b:8b:17:ec:fd:9c:44:
         d2:ce:6f:7c:f6:5d:10:eb:56:62:90:a1:14:19:7d:a4:74:62:
         16:ad:e2:74:35:af:64:90:43:71:57:3a:d6:7b:ef:ea:9e:8a:
         f1:1e:ca:ea:78:08:f2:76:6d:6d:51:13:86:48:af:9c:74:88:
         a5:e8:4f:dd:bd:d4:84:88:c6:64:07:13:be:0a:c4:2a:a6:b1:
         c3:26:a3:ef:42:15:0b:b7:55:bb:b3:85:d0:10:4b:80:75:2e:
         3e:b2:43:78:d7:6f:61:06:38:c2:5c:bb:af:f5:2b:00:13:ee:
         36:50:65:89:5c:bc:35:79:a6:bf:4c:40:78:9d:0a:de:f2:2b:
         79:97:f4:49:2e:09:e7:f0:be:47:47:f1:69:64:89:20:1e:d6:
         2d:f4:88:2e:58:34:ca:8e:2c:7b:ee:49:cc:3c:17:a3:67:d6:
         d4:0c:8b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:49:21 2026 by rpki-client