Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63633a3a2f34382d3438203d3e20323135393533.roa
File:                     326130623a346530373a63633a3a2f34382d3438203d3e20323135393533.roa (raw, json)
Hash identifier:          ZUe1zrnguGs/+eFQ5bDaJ1X4uBryAvrVKhIPewCWijA=
Subject key identifier:   03:55:AA:E8:3B:48:61:37:11:CC:42:87:EF:FC:FF:61:24:A1:06:3A
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       67A36A3D9380C0B8BBAA97BA2DF79996B44A65B3
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63633a3a2f34382d3438203d3e20323135393533.roa
Signing time:             Fri 13 Mar 2026 20:36:57 +0000
ROA not before:           Fri 13 Mar 2026 20:31:57 +0000
ROA not after:            Fri 12 Mar 2027 20:36:57 +0000
asID:                     215953
IP address blocks:        2a0b:4e07:cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a3:6a:3d:93:80:c0:b8:bb:aa:97:ba:2d:f7:99:96:b4:4a:65:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Mar 13 20:31:57 2026 GMT
            Not After : Mar 12 20:36:57 2027 GMT
        Subject: CN=0355AAE83B48613711CC4287EFFCFF6124A1063A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a3:6a:c8:c2:e6:29:46:5e:b4:a0:85:3f:96:
                    f0:cf:07:cd:12:86:e6:64:3e:93:f7:dd:11:31:a9:
                    cb:4c:14:c7:64:a4:2e:2b:3d:fb:b9:49:6b:ef:1f:
                    67:eb:5c:b1:e6:ae:be:62:a8:e4:17:0b:e0:3a:e5:
                    75:5b:8b:50:89:86:4f:83:c0:ff:eb:4c:02:9c:7f:
                    02:02:15:5d:a0:e7:b9:9f:10:c7:d3:eb:43:e4:ef:
                    66:d8:15:90:20:c5:86:3e:c5:ad:b2:a4:97:62:93:
                    32:19:59:f9:ca:9e:8e:1d:5f:ee:22:3b:bb:8f:73:
                    dc:ff:43:a0:b0:57:e0:e3:73:59:31:a2:f2:d1:2c:
                    ab:87:ba:3d:54:9a:54:64:af:17:d6:0a:17:99:42:
                    61:8f:89:34:e3:d8:19:f2:2e:89:8b:e0:ee:ad:fc:
                    a7:51:c8:50:41:17:43:2c:24:54:d0:51:5b:35:90:
                    a8:f3:64:9a:09:8b:e5:d7:36:e1:06:1d:4a:f4:cc:
                    82:82:c8:f5:e4:2c:fa:dd:d4:db:c5:db:86:fc:06:
                    3b:f6:94:a9:86:44:4b:55:4c:6c:10:fc:14:27:c0:
                    47:da:b5:20:91:82:76:d2:ae:b8:67:91:29:9c:b1:
                    a4:46:9c:63:b5:0d:1f:65:7a:1f:3a:6a:fa:50:18:
                    22:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:55:AA:E8:3B:48:61:37:11:CC:42:87:EF:FC:FF:61:24:A1:06:3A
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63633a3a2f34382d3438203d3e20323135393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:cc::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:2c:cd:0c:2e:e3:61:95:1b:ff:b3:c6:ad:a9:79:89:10:38:
         4e:fb:f9:57:d6:3f:51:fc:51:5b:56:53:7c:f1:89:8c:ee:b6:
         70:cd:33:4a:66:68:36:b1:80:42:ab:eb:4f:b1:ed:0a:dc:79:
         15:cb:fa:71:8b:7e:d5:26:81:49:21:c0:81:3d:67:d5:2f:a5:
         0a:63:2d:36:3f:03:6a:9f:37:c3:0f:93:ef:3e:03:19:f7:ed:
         cc:8b:dc:13:35:ed:11:97:1f:cb:83:3a:25:6e:a2:4c:7e:81:
         59:11:26:63:e5:3b:bd:27:48:9a:77:84:5b:ed:d5:c6:6f:da:
         60:db:9e:44:1b:49:f2:ed:cc:c9:7a:72:f3:0b:93:b1:71:f0:
         16:e4:66:a2:35:00:36:78:20:ce:65:93:9d:43:bf:c7:c5:59:
         d2:6a:c3:68:c7:8f:59:5f:95:b5:85:59:fc:59:55:dc:08:e8:
         7d:ad:49:e0:d9:d5:27:75:36:13:24:57:9c:61:fb:a8:df:73:
         92:3b:b0:7d:4d:8f:e7:a4:70:70:82:ee:90:1f:eb:8d:0b:04:
         0d:06:c6:2a:f2:c8:83:f1:b2:a6:94:ae:77:eb:fd:59:19:98:
         50:aa:8d:29:9f:19:80:0c:8c:5d:d0:8f:07:6c:15:31:40:28:
         39:f1:a6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:51 2026 by rpki-client