Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS6517.roa
File:                     AS6517.roa (raw, json)
Hash identifier:          s/8sfT3SPPy9TGHnpJgdQs7TucjkCUVSViBhTafaMsI=
Subject key identifier:   82:EF:E9:E6:B7:8A:4D:56:41:D8:9A:3F:69:C9:7E:D7:BF:BF:45:09
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       64C72F73B50BDBDB9736D4D0FA4CA70CCB297B32
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS6517.roa
Signing time:             Tue 28 Apr 2026 13:22:48 +0000
ROA not before:           Tue 28 Apr 2026 13:17:48 +0000
ROA not after:            Tue 27 Apr 2027 13:22:48 +0000
asID:                     6517
IP address blocks:        2a0b:4e07:1000::/38 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 08:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c7:2f:73:b5:0b:db:db:97:36:d4:d0:fa:4c:a7:0c:cb:29:7b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Apr 28 13:17:48 2026 GMT
            Not After : Apr 27 13:22:48 2027 GMT
        Subject: CN=82EFE9E6B78A4D5641D89A3F69C97ED7BFBF4509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:98:64:8e:b7:d5:38:7e:52:21:48:41:d0:63:
                    0b:23:82:f8:b1:ee:fe:74:54:77:73:52:9b:82:8e:
                    0e:27:26:93:b6:fb:a1:d8:2b:d5:c9:9e:1b:ee:fe:
                    ee:d9:d8:78:fc:ae:76:b1:d5:17:4d:d6:1d:27:04:
                    10:7e:ee:d0:69:b1:ab:ef:3d:70:4f:56:a9:f9:d4:
                    cb:7b:ce:e4:88:93:8b:eb:05:79:55:a7:ef:7d:b0:
                    36:bb:95:75:77:d8:82:31:c0:22:b5:e8:24:9e:f9:
                    5a:0d:9b:ec:6c:83:03:37:3e:d7:05:30:b1:76:d2:
                    97:a9:40:86:12:92:c6:5d:16:d7:8f:f5:2b:c2:fe:
                    39:df:ca:86:52:c5:f0:ba:07:64:f9:4c:c4:bf:1f:
                    19:55:50:e4:ab:ba:98:95:82:aa:86:3b:9c:71:f1:
                    dc:51:87:07:98:77:c6:62:d0:38:9e:8e:c0:e5:cb:
                    23:4c:e8:33:e7:a1:6e:3a:9b:48:13:f5:99:36:fd:
                    50:67:19:97:e4:42:fa:fd:0a:a4:dc:df:e9:c0:16:
                    f4:4a:e7:58:c8:91:6e:ea:1c:3e:41:46:ee:ff:5a:
                    ec:8f:3a:68:ed:fa:c9:97:24:e3:16:e5:fb:31:24:
                    7f:c6:59:2e:b6:92:50:33:27:94:d2:01:5b:d8:cd:
                    dd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EF:E9:E6:B7:8A:4D:56:41:D8:9A:3F:69:C9:7E:D7:BF:BF:45:09
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS6517.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:1000::/38

    Signature Algorithm: sha256WithRSAEncryption
         16:9a:83:dc:9e:cc:b9:ac:f9:a2:2a:94:39:eb:35:12:34:17:
         db:f0:31:72:2c:81:22:7f:b2:a3:48:24:57:98:e7:05:ce:ff:
         f1:f3:2e:b0:e4:40:d3:5e:e3:1f:7f:7f:67:ca:76:ec:9e:d9:
         1c:22:1a:7f:fb:e2:2d:40:9c:a0:6b:99:ab:fa:cf:12:92:e4:
         53:97:e9:3a:e2:c6:bd:3c:c0:e5:ae:8f:d3:e5:d4:f3:1e:c2:
         c9:2c:24:9e:e0:e9:89:03:81:90:1d:63:01:10:b6:16:32:68:
         41:7f:7c:d1:05:e6:6b:6d:22:91:8a:f3:62:d3:2e:fd:0a:f7:
         04:20:c2:3a:05:6a:61:ba:ae:17:cb:ca:b6:05:74:50:ae:9d:
         95:23:d4:87:e7:e2:d3:92:40:72:c0:c1:8b:b5:49:d7:9b:35:
         9b:69:9b:2a:6a:05:73:f4:2d:e7:27:4f:7b:26:a6:13:53:64:
         09:e9:82:82:fb:c0:9e:45:da:f2:66:62:28:62:70:8e:89:b7:
         1e:9b:af:de:1c:93:cd:c3:cd:8c:3b:1f:29:14:7f:66:3a:3d:
         3d:05:74:92:be:64:6c:c0:1d:66:77:6f:1d:f1:33:34:04:cf:
         00:53:eb:e8:ab:ad:49:ce:66:0c:61:a5:77:a1:76:01:c3:97:
         0f:ae:bf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:35:00 2026 by rpki-client