Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32663a3a2f34382d3438203d3e20323035393431.roa
File:                     326130623a346530373a32663a3a2f34382d3438203d3e20323035393431.roa (raw, json)
Hash identifier:          HFXiqIEImjAFsNEHz6g9FCaz2U8Kaw6sn8GGEtABDhg=
Subject key identifier:   F7:CC:1B:56:EC:B2:EA:F0:E4:3D:D2:44:99:33:A5:86:20:E5:AC:C0
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       0AD9ADA59CCC5D71C863A44824199E842406D827
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32663a3a2f34382d3438203d3e20323035393431.roa
Signing time:             Fri 01 Aug 2025 07:31:34 +0000
ROA not before:           Fri 01 Aug 2025 07:26:34 +0000
ROA not after:            Fri 31 Jul 2026 07:31:34 +0000
asID:                     205941
IP address blocks:        2a0b:4e07:2f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 20:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d9:ad:a5:9c:cc:5d:71:c8:63:a4:48:24:19:9e:84:24:06:d8:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Aug  1 07:26:34 2025 GMT
            Not After : Jul 31 07:31:34 2026 GMT
        Subject: CN=F7CC1B56ECB2EAF0E43DD2449933A58620E5ACC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9d:84:cb:bd:1f:0d:27:77:f4:1b:30:96:61:
                    31:d1:41:1b:74:3e:86:38:49:53:57:f3:25:72:9a:
                    d6:c2:ed:b4:11:49:cc:42:6b:44:f5:8e:af:ef:06:
                    2f:d6:a1:9c:fd:97:3e:7f:e4:ab:14:04:47:e3:92:
                    db:cd:33:03:f8:71:06:cf:f4:4c:49:d8:f9:d2:57:
                    f9:91:49:cb:4f:63:de:5b:e4:39:a1:63:7d:e8:cc:
                    e3:5e:74:01:14:cc:07:70:83:eb:db:40:d5:0f:58:
                    cc:6e:a9:7a:17:41:eb:85:44:be:55:3b:4d:03:55:
                    45:62:cb:80:0e:ca:03:59:7b:0c:83:2b:16:84:c7:
                    c5:4e:e2:dc:c1:d5:02:1b:c0:45:fa:ee:3d:71:74:
                    b9:f4:7e:58:ed:03:38:a9:73:e5:ab:e7:a9:d0:e8:
                    10:99:8d:61:5f:4a:97:81:55:37:d1:76:35:43:f1:
                    86:cf:c7:40:a9:22:0b:38:82:f9:91:cb:f6:bd:1d:
                    61:24:ab:d8:da:39:a2:76:ed:59:ea:14:2f:4e:ae:
                    45:76:76:21:0a:f2:c4:1e:70:1d:93:53:06:8b:7c:
                    0d:8b:ba:6f:8e:b5:12:14:c8:57:d7:2f:44:7a:b2:
                    22:43:66:ed:05:6a:d8:eb:72:44:35:55:cf:88:38:
                    f6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CC:1B:56:EC:B2:EA:F0:E4:3D:D2:44:99:33:A5:86:20:E5:AC:C0
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32663a3a2f34382d3438203d3e20323035393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:2f::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:08:4f:86:a4:4e:79:58:fd:cc:5c:9d:36:8b:bd:23:70:15:
         e3:6d:ce:d8:47:70:44:32:91:cd:d7:e1:49:77:62:f9:81:62:
         e8:97:88:bb:fa:ab:f4:1f:db:57:b1:9a:73:b3:5b:5a:0b:27:
         7b:91:a0:46:5f:31:16:fd:91:75:69:c7:bb:1f:29:ec:a8:38:
         e0:91:6f:60:d7:e6:2b:f8:8e:39:47:d7:45:fb:e2:aa:4f:6e:
         cf:33:de:bd:82:e0:05:6f:42:7f:41:9e:84:83:40:4d:36:9d:
         d0:9c:8c:b2:ae:3d:03:23:00:92:dd:29:77:9c:15:34:bf:45:
         fa:d5:5a:43:b5:c5:b6:52:14:9f:dd:38:d1:69:1a:05:8e:a0:
         53:11:e5:ce:ed:84:1d:c6:81:0e:fe:c8:90:9e:53:c4:0b:7e:
         ec:ae:5b:b7:59:14:ac:88:d4:30:e9:c7:01:7c:55:d9:fe:b6:
         a0:05:79:8b:8b:2a:46:38:9e:6c:ed:0c:d9:3a:68:84:d1:b2:
         0a:48:08:f5:ae:79:3f:63:5f:cb:61:88:f6:92:d0:ea:7f:af:
         40:05:8a:fe:68:17:c7:f5:fe:b4:59:f9:0b:f7:d0:98:a1:f3:
         be:57:3d:95:80:50:0c:8c:f3:ae:e6:6d:a0:a9:50:f9:0a:38:
         95:28:4c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:07:39 2025 by rpki-client