Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63313a3a2f34382d3438203d3e203131393637.roa
File:                     326130623a346530373a63313a3a2f34382d3438203d3e203131393637.roa (raw, json)
Hash identifier:          w8rWBj4VGJT4HnJSQ9MuB5o51HjLBVYUdCCIxi+pAdQ=
Subject key identifier:   06:D6:B8:1B:13:1C:55:6D:C2:66:17:11:FA:3E:DD:5A:84:F7:81:69
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       1F522BAB994C41B77508F99401452477DEB228C7
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63313a3a2f34382d3438203d3e203131393637.roa
Signing time:             Sun 25 May 2025 22:14:02 +0000
ROA not before:           Sun 25 May 2025 22:09:02 +0000
ROA not after:            Sun 24 May 2026 22:14:02 +0000
asID:                     11967
IP address blocks:        2a0b:4e07:c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 07:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:52:2b:ab:99:4c:41:b7:75:08:f9:94:01:45:24:77:de:b2:28:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: May 25 22:09:02 2025 GMT
            Not After : May 24 22:14:02 2026 GMT
        Subject: CN=06D6B81B131C556DC2661711FA3EDD5A84F78169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ca:c9:1a:28:6d:4d:94:f8:9d:de:bb:e6:46:
                    2d:e8:cb:3d:e4:1a:0b:cb:40:c5:fb:61:97:61:e3:
                    fc:13:d3:61:b0:71:88:38:9f:8f:0f:1d:27:a5:42:
                    d2:dd:52:66:20:a5:66:ab:bf:e5:9e:25:b1:49:2c:
                    cb:c3:96:60:0e:e9:39:03:d5:c5:d8:7b:29:0d:25:
                    0c:11:53:e5:36:7a:e7:53:55:4f:66:1b:39:8f:33:
                    88:bc:00:94:5e:f6:5f:68:96:9b:f2:7e:02:55:fe:
                    6b:fc:3a:86:75:56:c7:b1:bf:87:7d:85:a5:4f:d2:
                    80:2d:49:b2:1b:74:d9:c2:d6:79:9c:f0:60:b9:a1:
                    b1:e5:5f:c0:9d:8c:c5:5e:15:43:99:49:87:87:0c:
                    b5:0f:73:ac:bc:ca:c4:1b:ef:7d:ae:ce:d2:76:d1:
                    e9:3c:60:80:4b:62:6e:ed:a3:c2:a3:0d:90:a6:70:
                    6d:0f:d3:78:69:62:0f:b6:18:26:35:c4:5c:65:fd:
                    35:ee:9f:f9:db:64:b5:b9:86:0a:59:06:57:b9:ec:
                    f5:1a:11:62:91:3f:39:6e:b9:93:26:62:84:84:d3:
                    ac:b7:a3:19:26:93:cf:cb:4e:8b:2e:95:9d:c2:e1:
                    e2:b9:96:55:13:8d:43:7b:a7:0a:2f:cd:c1:cd:66:
                    7c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D6:B8:1B:13:1C:55:6D:C2:66:17:11:FA:3E:DD:5A:84:F7:81:69
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63313a3a2f34382d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:c1::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:63:83:78:c7:55:18:a4:7c:13:c1:d5:98:81:33:bd:f8:40:
         18:97:8d:3f:5d:cf:39:7e:64:86:a7:a1:09:71:6d:87:e8:9e:
         6e:08:93:28:58:02:47:90:87:52:d6:fe:a9:7d:63:90:dc:49:
         d6:f7:45:fc:ee:7b:12:f7:c1:51:3d:5d:a6:37:43:d8:c0:39:
         33:15:fa:17:29:5a:2b:2a:89:9e:8d:1e:e2:e1:fe:d4:4e:e4:
         26:46:b7:17:82:75:1d:39:a6:ad:21:b4:06:66:e8:e4:6a:d7:
         7f:84:07:f8:b9:36:fd:f3:07:d6:4f:6f:54:ea:1d:36:35:87:
         39:54:e6:7d:c9:5e:28:cf:44:69:41:be:15:aa:4f:58:e1:04:
         47:0f:94:06:93:ad:24:7f:f3:5a:b5:89:52:1c:fd:da:aa:6e:
         21:c8:92:7c:d9:01:2b:5f:3e:d3:b5:2b:44:d7:0d:47:e8:f8:
         c9:c9:9c:7e:7e:a4:7b:65:26:81:01:c3:e0:10:81:cb:57:31:
         4f:0a:7f:ce:94:0d:a6:d8:14:36:88:9d:fa:09:a3:7f:3e:ef:
         be:81:df:33:d8:e1:ad:e4:c5:7a:c3:3d:38:3c:5f:5c:ee:59:
         b8:bf:ff:c4:8e:c9:c6:83:bb:d7:a3:c7:51:3d:89:ea:e0:2d:
         a6:a3:09:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:46:33 2025 by rpki-client