Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64613a3a2f34382d3438203d3e203133383532.roa
File:                     326130623a346530373a64613a3a2f34382d3438203d3e203133383532.roa (raw, json)
Hash identifier:          +clvl4gpCwwzSnh8/UXiEhGui1ko2yUCsczkjnTxAj0=
Subject key identifier:   96:90:00:28:78:D9:4D:2E:6F:66:32:90:16:A0:42:0A:36:5F:1B:2D
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       2B8ADA5B1C05ECE1757CFB783A69F4F61CC8F0B2
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64613a3a2f34382d3438203d3e203133383532.roa
Signing time:             Fri 13 Mar 2026 20:36:57 +0000
ROA not before:           Fri 13 Mar 2026 20:31:57 +0000
ROA not after:            Fri 12 Mar 2027 20:36:57 +0000
asID:                     13852
IP address blocks:        2a0b:4e07:da::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8a:da:5b:1c:05:ec:e1:75:7c:fb:78:3a:69:f4:f6:1c:c8:f0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Mar 13 20:31:57 2026 GMT
            Not After : Mar 12 20:36:57 2027 GMT
        Subject: CN=9690002878D94D2E6F66329016A0420A365F1B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:37:1c:c3:cb:42:47:cb:3e:45:58:19:73:35:
                    03:e3:08:6e:32:27:82:4e:6b:12:8f:e0:70:e2:a5:
                    31:b6:7c:31:06:b2:ce:c4:f0:f4:09:69:c4:21:a7:
                    c2:53:40:23:2c:88:f2:97:c4:18:f9:8a:c7:af:7c:
                    2b:d7:b2:50:71:26:e9:30:24:35:fc:d2:3e:4b:51:
                    6d:38:dc:78:e4:03:dd:80:3b:ff:e6:db:07:0c:76:
                    68:19:67:ba:48:fd:6f:9b:0d:97:8a:2d:e9:58:28:
                    e6:ea:63:eb:7f:28:c7:81:e3:21:01:77:3c:bf:bd:
                    dc:ed:fd:69:76:24:b7:b1:bd:a0:ac:cd:98:c7:27:
                    3c:e6:10:2a:2b:3f:e9:27:9d:e1:79:9f:a9:48:c0:
                    53:6e:6c:33:b2:e7:03:16:43:28:c6:c1:6f:a5:62:
                    e5:68:65:61:a2:4e:bc:90:7a:40:6d:9d:5f:bb:2a:
                    6b:df:be:19:fb:7c:2b:f0:38:fa:b6:ee:7d:b1:16:
                    14:0a:5e:c6:06:74:c2:51:27:f9:45:a6:45:5c:68:
                    5e:1d:f3:84:0e:d1:76:35:a9:e4:56:2f:17:3d:92:
                    5e:f2:ce:73:28:1f:b3:83:ef:0e:d2:16:71:7a:10:
                    28:9b:0e:66:36:37:98:93:52:f2:4f:54:b4:aa:6d:
                    2c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:90:00:28:78:D9:4D:2E:6F:66:32:90:16:A0:42:0A:36:5F:1B:2D
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64613a3a2f34382d3438203d3e203133383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:da::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:bd:29:73:27:9c:09:8c:b2:af:2f:e5:e5:ad:cc:b7:8a:11:
         25:65:6d:8f:ed:f4:f9:90:47:e4:ec:8b:3e:95:ff:85:08:b1:
         c0:26:fe:8e:e7:ec:6c:c1:24:d2:19:b9:21:0b:1d:7f:b8:68:
         0f:8f:11:21:c7:d9:cd:dd:20:eb:3c:10:05:cd:f8:71:36:be:
         61:13:b2:56:2b:89:d4:6c:e2:23:6a:ba:4a:b4:e4:a7:19:9e:
         39:b9:14:77:3a:01:ad:07:5d:37:1d:dc:f7:68:a2:37:58:99:
         9e:0e:8e:78:af:ae:7d:e8:bf:c9:6e:d9:16:b6:b4:e8:6f:33:
         1e:bd:66:04:1f:52:27:8d:09:f4:ab:3e:d8:79:16:84:e3:69:
         8b:23:fe:ac:0a:18:74:3a:81:ca:e1:54:e5:56:15:cc:1d:95:
         a3:89:7b:d9:31:3d:5e:ea:b6:7c:9f:b6:bd:07:06:88:a9:18:
         25:2a:69:e7:6c:ca:dd:69:b6:7e:6f:14:8d:7a:e2:34:6c:30:
         64:fe:bc:ef:b6:10:0e:b1:be:15:af:ac:f1:ff:d6:e7:ad:1f:
         72:4a:81:ae:7a:51:8b:0a:d6:3c:cf:cd:48:f9:b4:25:36:e4:
         37:5f:3f:5b:42:a7:ab:0f:9d:45:ff:a2:8e:b2:19:87:99:ae:
         a9:18:90:03
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIUK4raWxwF7OF1fPt4Omn09hzI8LIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1
Qzk3NzhCRjAeFw0yNjAzMTMyMDMxNTdaFw0yNzAzMTIyMDM2NTdaMDMxMTAvBgNV
BAMTKDk2OTAwMDI4NzhEOTREMkU2RjY2MzI5MDE2QTA0MjBBMzY1RjFCMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTNxzDy0JHyz5FWBlzNQPjCG4y
J4JOaxKP4HDipTG2fDEGss7E8PQJacQhp8JTQCMsiPKXxBj5isevfCvXslBxJukw
JDX80j5LUW043HjkA92AO//m2wcMdmgZZ7pI/W+bDZeKLelYKObqY+t/KMeB4yEB
dzy/vdzt/Wl2JLexvaCszZjHJzzmECorP+knneF5n6lIwFNubDOy5wMWQyjGwW+l
YuVoZWGiTryQekBtnV+7Kmvfvhn7fCvwOPq27n2xFhQKXsYGdMJRJ/lFpkVcaF4d
84QO0XY1qeRWLxc9kl7yznMoH7OD7w7SFnF6ECibDmY2N5iTUvJPVLSqbSxzAgMB
AAGjggJkMIICYDAdBgNVHQ4EFgQUlpAAKHjZTS5vZjKQFqBCCjZfGy0wHwYDVR0j
BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG
QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4
MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu
Y2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl
ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTY0NjEzYTNhMmYzNDM4
MmQzNDM4MjAzZDNlMjAzMTMzMzgzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgtOBwDaMA0GCSqG
SIb3DQEBCwUAA4IBAQB3vSlzJ5wJjLKvL+Xlrcy3ihElZW2P7fT5kEfk7Is+lf+F
CLHAJv6O5+xswSTSGbkhCx1/uGgPjxEhx9nN3SDrPBAFzfhxNr5hE7JWK4nUbOIj
arpKtOSnGZ45uRR3OgGtB103Hdz3aKI3WJmeDo54r6596L/JbtkWtrTobzMevWYE
H1InjQn0qz7YeRaE42mLI/6sChh0OoHK4VTlVhXMHZWjiXvZMT1e6rZ8n7a9BwaI
qRglKmnnbMrdabZ+bxSNeuI0bDBk/rzvthAOsb4Vr6zx/9bnrR9ySoGuelGLCtY8
z81I+bQlNuQ3Xz9bQqerD51F/6KOshmHma6pGJAD
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:36:54 2026 by rpki-client