Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32363a3a2f34372d3438203d3e20323031343435.roa
File:                     326130623a346530373a32363a3a2f34372d3438203d3e20323031343435.roa (raw, json)
Hash identifier:          vpDYrjniDDMeLW6rz+L+t5+7Ib49sPnQkFV0/VAGTMo=
Subject key identifier:   40:0A:1C:11:4F:64:AD:47:A1:55:1F:5B:51:33:1A:01:CA:0B:7C:F2
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       62C123BB29ABDE3E179DCE63DB9028328AD72443
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32363a3a2f34372d3438203d3e20323031343435.roa
Signing time:             Fri 06 Feb 2026 13:08:45 +0000
ROA not before:           Fri 06 Feb 2026 13:03:45 +0000
ROA not after:            Fri 05 Feb 2027 13:08:45 +0000
asID:                     201445
IP address blocks:        2a0b:4e07:26::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c1:23:bb:29:ab:de:3e:17:9d:ce:63:db:90:28:32:8a:d7:24:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Feb  6 13:03:45 2026 GMT
            Not After : Feb  5 13:08:45 2027 GMT
        Subject: CN=400A1C114F64AD47A1551F5B51331A01CA0B7CF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4d:55:9f:2e:b8:e2:2b:4b:a2:0c:f9:f5:82:
                    cb:46:3d:95:a5:18:25:37:1a:0b:33:2b:df:de:2a:
                    96:0c:99:1b:1c:db:04:21:97:f9:63:21:8f:db:7a:
                    22:85:67:e6:d7:4a:96:25:f6:38:af:d4:37:12:36:
                    b2:c1:14:8e:b2:f8:5c:d1:1b:58:07:70:b8:0f:9a:
                    d3:8f:db:c1:c9:01:09:08:f6:ab:81:34:d5:87:02:
                    50:67:03:e4:f9:5f:23:ed:fd:f3:f9:9d:6d:1b:e3:
                    8b:51:a7:bf:90:f5:93:00:50:39:42:2f:2f:b7:72:
                    8a:87:57:6d:4d:8d:a8:e6:09:51:57:00:a8:a4:8c:
                    87:6b:a4:62:61:76:e8:23:20:94:02:f2:b1:cc:60:
                    5c:bb:c8:8a:13:08:65:df:8c:91:90:d3:cd:1e:ea:
                    59:26:8e:3c:ff:14:62:eb:bc:91:b7:d8:60:a6:dc:
                    c8:3d:da:0f:d0:0e:d4:38:4f:57:c9:e7:af:70:98:
                    22:4f:5e:53:e9:42:a4:f8:92:11:08:4e:21:71:24:
                    35:2e:20:42:1d:1f:47:aa:9d:2a:f6:27:e6:8f:19:
                    5f:46:27:f2:4a:26:aa:9b:ed:03:6d:b1:39:e8:20:
                    a5:0e:7f:1e:91:af:f8:0a:b2:95:a4:37:bd:81:54:
                    eb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0A:1C:11:4F:64:AD:47:A1:55:1F:5B:51:33:1A:01:CA:0B:7C:F2
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32363a3a2f34372d3438203d3e20323031343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:26::/47

    Signature Algorithm: sha256WithRSAEncryption
         92:96:b9:99:49:83:89:61:3b:49:c1:43:28:3c:05:34:24:b9:
         8b:91:53:0a:d3:80:a9:c3:a8:93:78:3f:ae:57:97:da:33:12:
         fc:d4:8c:02:44:b0:8f:f5:26:27:9f:c2:5c:db:91:c0:97:d0:
         a1:16:db:69:63:43:ed:19:fd:28:6b:52:b1:bb:b1:f6:cf:29:
         94:bb:8d:04:56:fa:56:88:b5:e0:7c:53:d3:e0:a2:ba:1b:66:
         42:28:6b:fe:93:ed:39:dd:d9:cd:cb:0a:36:87:b8:96:63:90:
         f8:f8:6d:86:b2:05:ee:ad:cc:f8:b2:75:07:ae:66:75:b2:f9:
         69:e3:51:37:08:0c:89:e0:16:e6:eb:07:7c:29:ba:2e:86:d7:
         2c:01:e1:70:d3:7e:ee:25:25:e4:72:61:a7:6f:76:34:7b:b3:
         21:cd:a9:41:4f:45:94:a8:87:b2:0b:7c:aa:f2:d9:a7:2b:93:
         2e:b9:5e:c2:1e:92:4f:55:1d:61:a9:51:61:6b:9c:37:7e:6b:
         fd:59:ca:87:b3:86:ca:9f:fa:48:7b:f4:14:a3:ca:2c:b4:19:
         07:2d:9a:19:e2:1d:7b:e6:a8:a9:36:e2:0d:46:39:65:b5:c7:
         48:51:1a:56:3e:e2:5d:c3:08:db:c6:7c:1b:14:3f:e6:2f:1d:
         81:7c:db:47
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgIUYsEjuymr3j4Xnc5j25AoMorXJEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1
Qzk3NzhCRjAeFw0yNjAyMDYxMzAzNDVaFw0yNzAyMDUxMzA4NDVaMDMxMTAvBgNV
BAMTKDQwMEExQzExNEY2NEFENDdBMTU1MUY1QjUxMzMxQTAxQ0EwQjdDRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsTVWfLrjiK0uiDPn1gstGPZWl
GCU3GgszK9/eKpYMmRsc2wQhl/ljIY/beiKFZ+bXSpYl9jiv1DcSNrLBFI6y+FzR
G1gHcLgPmtOP28HJAQkI9quBNNWHAlBnA+T5XyPt/fP5nW0b44tRp7+Q9ZMAUDlC
Ly+3coqHV21NjajmCVFXAKikjIdrpGJhdugjIJQC8rHMYFy7yIoTCGXfjJGQ080e
6lkmjjz/FGLrvJG32GCm3Mg92g/QDtQ4T1fJ569wmCJPXlPpQqT4khEITiFxJDUu
IEIdH0eqnSr2J+aPGV9GJ/JKJqqb7QNtsTnoIKUOfx6Rr/gKspWkN72BVOsJAgMB
AAGjggJmMIICYjAdBgNVHQ4EFgQUQAocEU9krUehVR9bUTMaAcoLfPIwHwYDVR0j
BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG
QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4
MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu
Y2VyMIGoBggrBgEFBQcBCwSBmzCBmDCBlQYIKwYBBQUHMAuGgYhyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl
ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTMyMzYzYTNhMmYzNDM3
MmQzNDM4MjAzZDNlMjAzMjMwMzEzNDM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEqC04HACYwDQYJ
KoZIhvcNAQELBQADggEBAJKWuZlJg4lhO0nBQyg8BTQkuYuRUwrTgKnDqJN4P65X
l9ozEvzUjAJEsI/1JiefwlzbkcCX0KEW22ljQ+0Z/ShrUrG7sfbPKZS7jQRW+laI
teB8U9PgorobZkIoa/6T7Tnd2c3LCjaHuJZjkPj4bYayBe6tzPiydQeuZnWy+Wnj
UTcIDIngFubrB3wpui6G1ywB4XDTfu4lJeRyYadvdjR7syHNqUFPRZSoh7ILfKry
2acrky65XsIekk9VHWGpUWFrnDd+a/1Zyoezhsqf+kh79BSjyiy0GQctmhniHXvm
qKk24g1GOWW1x0hRGlY+4l3DCNvGfBsUP+YvHYF820c=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:56:45 2026 by rpki-client