Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a61623a3a2f34382d3438203d3e20333937363538.roa
File:                     326130623a346530373a61623a3a2f34382d3438203d3e20333937363538.roa (raw, json)
Hash identifier:          zsn4DGW9+abMuhZcBY2SSCndwTfj/I5l4+mmqG3dOxE=
Subject key identifier:   09:30:36:EB:00:58:B5:0C:81:DF:1E:59:31:9F:1E:CA:4E:BE:32:72
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       05B6DD0C99D74381A1A00ECA39A0B789CF9A7F2C
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a61623a3a2f34382d3438203d3e20333937363538.roa
Signing time:             Fri 13 Mar 2026 14:36:56 +0000
ROA not before:           Fri 13 Mar 2026 14:31:56 +0000
ROA not after:            Fri 12 Mar 2027 14:36:56 +0000
asID:                     397658
IP address blocks:        2a0b:4e07:ab::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b6:dd:0c:99:d7:43:81:a1:a0:0e:ca:39:a0:b7:89:cf:9a:7f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Mar 13 14:31:56 2026 GMT
            Not After : Mar 12 14:36:56 2027 GMT
        Subject: CN=093036EB0058B50C81DF1E59319F1ECA4EBE3272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2c:66:01:c4:1b:de:06:1e:a2:9a:0e:a7:50:
                    ed:6a:b5:34:ab:51:c0:6f:95:ff:d2:63:c6:d6:50:
                    4f:e9:fb:56:48:b3:ec:fd:a1:13:6e:ce:db:07:f9:
                    7a:51:c7:85:41:e2:24:c8:23:56:8c:0b:4c:ee:28:
                    db:41:17:fc:5a:fa:fe:1c:5c:1e:fb:a5:34:ec:59:
                    a8:f1:67:c0:87:ab:1e:7f:0c:0e:9f:6b:84:d1:ec:
                    bf:22:3d:5f:b3:99:f7:cd:a6:cc:3c:a9:16:f8:c0:
                    84:5c:56:7a:4a:a9:67:3b:5e:9c:3c:e7:64:95:aa:
                    d6:86:ba:5f:c3:b3:0c:7d:0e:dc:7a:fb:97:de:dd:
                    e4:5d:c5:28:f0:9c:99:90:e1:cd:92:da:52:7d:68:
                    86:43:3a:7b:82:f7:c0:b3:e3:d8:fd:b3:89:bd:fc:
                    2e:27:a3:85:30:57:4c:06:81:08:e8:4e:d1:c7:16:
                    ba:8d:87:72:17:b4:d6:a6:bc:cc:c1:0f:06:80:c2:
                    c7:87:15:2c:fc:1e:54:64:5d:16:6f:4d:b9:06:38:
                    27:d8:dc:95:c1:b0:33:df:28:70:7b:49:89:71:62:
                    16:99:20:bb:c0:dd:4a:74:dc:ab:d8:d6:93:67:0a:
                    ef:85:dc:c1:4c:24:b6:d1:19:fb:96:d2:9a:00:c9:
                    7f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:30:36:EB:00:58:B5:0C:81:DF:1E:59:31:9F:1E:CA:4E:BE:32:72
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a61623a3a2f34382d3438203d3e20333937363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:ab::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:74:6c:83:35:66:74:82:10:cb:de:bf:b8:d9:81:1c:5c:ca:
         8c:c4:df:e7:65:7c:b1:15:d6:40:b6:bd:42:06:f9:f2:3f:7c:
         8e:ad:ca:a8:b1:25:db:1c:f2:80:bd:72:e3:6b:82:0e:96:5c:
         f9:ee:ae:47:87:ce:f6:69:49:c6:7e:53:1d:98:de:a3:3b:67:
         b5:5a:32:89:20:63:5b:66:ff:43:77:89:41:03:bf:57:52:0c:
         7c:d1:f4:2f:58:b5:a2:06:fa:13:67:d7:8d:e7:2e:c0:47:5a:
         82:df:91:ba:8a:79:d6:62:ab:b0:07:0a:fe:46:74:60:87:66:
         fc:fc:a4:30:6e:82:f7:69:ea:42:08:43:5d:34:18:60:12:c1:
         fb:ba:c3:03:89:73:71:ce:bf:83:f7:b5:31:da:56:33:6f:79:
         b0:74:4c:92:46:44:25:50:3b:cb:6f:d4:dc:91:9c:99:12:84:
         e3:42:54:a6:c0:97:66:61:d8:1c:b7:0b:de:67:3a:57:9f:77:
         2c:b1:9e:a5:a1:35:2f:0c:48:66:27:a7:f3:eb:9f:26:2a:fb:
         a7:d6:93:1d:b5:86:ef:81:b4:b5:86:5a:21:23:10:d9:ce:52:
         3a:1e:34:4b:a9:51:e1:f0:5b:05:10:03:ff:83:0a:77:3e:d7:
         e5:34:e5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:31 2026 by rpki-client