Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33303a3a2f34362d3438203d3e20323032303736.roa
File:                     326130623a346530373a33303a3a2f34362d3438203d3e20323032303736.roa (raw, json)
Hash identifier:          pwVoR4RbT8TVHfO/q7RjLXQ7YFP0M8i+kb7/+lOlic4=
Subject key identifier:   2D:0E:6B:EA:D5:2A:48:08:49:17:7E:73:CD:F9:07:AF:0A:5B:78:DF
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       B506253596528F340D912D19AC337D7BEB0413
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33303a3a2f34362d3438203d3e20323032303736.roa
Signing time:             Tue 17 Feb 2026 20:21:56 +0000
ROA not before:           Tue 17 Feb 2026 20:16:56 +0000
ROA not after:            Tue 16 Feb 2027 20:21:56 +0000
asID:                     202076
IP address blocks:        2a0b:4e07:30::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 05:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b5:06:25:35:96:52:8f:34:0d:91:2d:19:ac:33:7d:7b:eb:04:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Feb 17 20:16:56 2026 GMT
            Not After : Feb 16 20:21:56 2027 GMT
        Subject: CN=2D0E6BEAD52A480849177E73CDF907AF0A5B78DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7b:76:d9:a1:cf:f5:8a:31:64:d8:5e:8e:ee:
                    2c:5e:17:64:8e:6f:23:f7:c5:5b:a3:4a:5c:ba:ea:
                    c0:12:36:e1:93:83:32:3d:ec:be:6e:48:22:25:08:
                    38:6c:f2:73:57:60:77:c3:67:9c:ad:8c:9b:36:a6:
                    24:fe:e6:61:b7:a8:80:25:ae:2a:52:6d:39:da:65:
                    7e:f6:25:4a:14:1c:81:f5:e6:3c:65:43:a5:f6:c3:
                    05:62:75:0f:01:5b:88:49:51:c1:c4:e9:a3:93:ee:
                    a1:6e:b4:5b:08:35:2c:6a:c6:3d:d5:f5:2e:d2:b1:
                    a0:dc:7c:b9:79:c6:ff:e3:95:5d:95:59:c9:ea:b4:
                    0f:d0:f9:95:03:9a:92:65:e4:b5:ff:cb:df:90:c8:
                    69:22:e3:96:28:c4:fb:c0:d9:50:8d:f6:d1:36:09:
                    3f:cd:03:9a:2b:3f:ae:e6:92:04:e9:cb:50:43:a9:
                    1a:72:69:b6:1d:ca:b8:b5:da:91:52:45:97:e4:64:
                    1b:d7:a3:f2:3b:9c:e6:23:80:39:61:1e:d7:43:32:
                    13:a0:a8:2d:30:b3:56:05:46:70:dd:ed:59:59:ea:
                    01:54:60:76:99:dc:c7:e0:6c:fe:63:84:e6:a0:89:
                    11:12:a5:ec:f7:c9:bb:69:a1:3c:e5:b3:81:5c:34:
                    e2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0E:6B:EA:D5:2A:48:08:49:17:7E:73:CD:F9:07:AF:0A:5B:78:DF
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33303a3a2f34362d3438203d3e20323032303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:30::/46

    Signature Algorithm: sha256WithRSAEncryption
         12:93:a7:37:15:ee:0c:d3:ae:79:89:2b:9e:b6:56:c4:36:59:
         b3:66:db:b0:b3:31:85:6b:8b:44:91:d6:83:17:42:57:ea:7c:
         6d:4b:58:1d:59:39:9d:74:e4:20:8a:3e:1f:ff:09:77:cd:e6:
         96:37:df:bf:da:72:00:3b:c4:1b:70:2c:fa:bb:37:94:48:e2:
         b3:ab:df:9a:e4:5d:9e:b2:a6:f7:6a:64:a1:75:90:3a:67:2e:
         4e:ec:ff:40:3c:e6:c4:10:4f:17:e3:8d:37:ab:79:b3:2f:f7:
         cb:14:de:07:61:b8:ea:3f:9e:df:4e:57:33:4b:b4:c2:5b:4a:
         02:b3:28:0f:e5:f7:54:cd:53:24:d4:75:14:4e:15:75:ef:c7:
         6a:b9:db:f3:ea:11:9f:00:50:6f:0e:5e:68:88:9c:a2:83:46:
         99:cd:d9:2b:f2:f0:86:02:1b:90:ec:81:76:39:30:72:91:22:
         22:60:0b:6c:c2:60:7b:7b:11:1c:4b:a4:c1:c2:90:da:64:a6:
         21:fc:9f:7b:a4:7a:a6:91:f5:2a:25:f7:a9:e0:ff:41:12:59:
         44:3b:78:a7:b6:1d:8a:66:0d:5a:4e:b1:79:0c:98:b4:24:d1:
         c6:52:55:ec:81:c7:34:ba:59:ab:65:19:99:e3:30:cd:a4:dc:
         20:41:90:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:19 2026 by rpki-client