Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6231653a3a2f34382d3438203d3e203434333331.roa
File:                     326130623a346530373a6231653a3a2f34382d3438203d3e203434333331.roa (raw, json)
Hash identifier:          6GN9uJqzU0PaZswdxHYW1fRRM58rJn9xp9gNnPvgC4k=
Subject key identifier:   25:6C:C2:0D:BB:73:41:45:54:D2:F1:0D:A7:2C:FA:DD:11:69:02:3D
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       34AED6BE10AB3FAF790BB4DEB173E5D9A32CB0FC
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6231653a3a2f34382d3438203d3e203434333331.roa
Signing time:             Fri 13 Mar 2026 21:36:57 +0000
ROA not before:           Fri 13 Mar 2026 21:31:57 +0000
ROA not after:            Fri 12 Mar 2027 21:36:57 +0000
asID:                     44331
IP address blocks:        2a0b:4e07:b1e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ae:d6:be:10:ab:3f:af:79:0b:b4:de:b1:73:e5:d9:a3:2c:b0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Mar 13 21:31:57 2026 GMT
            Not After : Mar 12 21:36:57 2027 GMT
        Subject: CN=256CC20DBB73414554D2F10DA72CFADD1169023D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:84:f0:07:0f:fa:26:c6:a1:04:04:95:a9:1d:
                    3c:96:a6:34:93:c1:bc:8e:d6:96:8a:06:ba:8e:48:
                    1d:65:bf:76:6e:dd:3d:83:63:2b:07:7d:c4:ce:6c:
                    cc:17:53:c5:8f:e6:43:08:22:24:06:e7:d3:e6:cc:
                    63:0a:2c:8c:d5:cf:8a:55:c7:b6:22:1f:0c:c2:e8:
                    81:60:22:b2:3f:00:43:c4:a6:68:ee:86:a8:c0:03:
                    52:4f:82:18:3d:37:c5:fe:34:33:b1:74:7a:f5:42:
                    5e:f5:6f:16:e9:f1:d7:0e:c5:89:8c:45:7b:f3:c5:
                    47:c6:68:00:12:7c:ff:93:c6:26:a5:12:1a:1f:04:
                    6b:a9:6d:58:a1:39:01:61:ff:1c:2d:5a:7a:10:30:
                    ba:ae:67:15:7c:67:a7:43:f6:4b:f0:98:a4:08:f3:
                    36:5f:32:42:1a:96:5c:ca:74:32:85:74:31:75:56:
                    61:bc:67:47:f8:dc:ec:cd:0f:1c:6f:62:0f:73:50:
                    05:bc:e6:40:07:5a:6b:d6:7e:2a:d1:b5:5b:1b:0e:
                    a8:2a:c9:b3:f9:d0:e4:ac:f8:d4:0f:b1:99:fb:3b:
                    a4:4a:33:a3:66:31:ce:86:a3:89:3c:44:8b:ca:05:
                    c7:54:6f:99:af:96:21:98:b6:47:76:df:f8:9d:bc:
                    19:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6C:C2:0D:BB:73:41:45:54:D2:F1:0D:A7:2C:FA:DD:11:69:02:3D
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6231653a3a2f34382d3438203d3e203434333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:b1e::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:c3:37:d2:39:8b:75:d8:33:e4:7d:7b:5c:20:90:53:9f:9c:
         0c:10:62:cb:12:3e:f5:d8:6b:fa:20:67:00:f1:07:9f:23:99:
         1f:51:3f:52:57:69:ca:bf:bb:35:9e:d9:44:41:e2:07:b7:dc:
         b7:19:d1:eb:6e:59:d8:49:74:62:98:e5:82:5a:91:47:5c:b0:
         fd:61:f1:72:72:97:4c:07:fc:43:ed:a0:64:7a:bf:e5:41:a5:
         3e:29:14:90:34:44:97:80:f2:ea:80:f2:69:32:b0:68:ee:8d:
         3d:3a:36:81:e0:2e:9f:ea:c4:d1:ba:1d:42:01:f6:20:4d:b2:
         d4:18:97:c1:42:b8:70:aa:ad:be:81:61:69:8a:4a:51:98:79:
         8b:39:1d:15:28:cc:25:71:1b:52:2b:a7:49:de:55:22:53:fd:
         fd:f0:bf:02:3d:78:e8:18:3a:5a:76:b6:b4:04:66:5b:cc:9b:
         4b:b8:11:31:1c:8a:87:8d:6d:82:79:9f:2b:c2:04:8a:74:ee:
         af:5b:4c:a4:36:8c:a0:35:74:f6:38:41:d5:d4:19:61:46:bf:
         f4:2e:b5:4d:40:1d:ba:64:4a:bb:93:ad:0a:98:06:c6:0f:0e:
         1b:96:43:f6:91:c6:36:fb:1a:62:a7:cf:af:3c:5b:65:12:14:
         6f:5e:61:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:36 2026 by rpki-client