Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a333a3a2f34382d3438203d3e203131393637.roa
File:                     326130623a346530373a333a3a2f34382d3438203d3e203131393637.roa (raw, json)
Hash identifier:          zP/pTKj8rFrXVPy8rh+ATxW8VmDF5nNix5/J/UrcL3k=
Subject key identifier:   C7:61:B6:D7:2A:88:9C:C6:16:ED:7D:F8:C6:0F:1E:5F:AC:7A:5E:F9
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       5933AEF5B25741F72F10B61C084E981BCAA74C43
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a333a3a2f34382d3438203d3e203131393637.roa
Signing time:             Thu 05 Feb 2026 08:52:04 +0000
ROA not before:           Thu 05 Feb 2026 08:47:04 +0000
ROA not after:            Thu 04 Feb 2027 08:52:04 +0000
asID:                     11967
IP address blocks:        2a0b:4e07:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 05:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:33:ae:f5:b2:57:41:f7:2f:10:b6:1c:08:4e:98:1b:ca:a7:4c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Feb  5 08:47:04 2026 GMT
            Not After : Feb  4 08:52:04 2027 GMT
        Subject: CN=C761B6D72A889CC616ED7DF8C60F1E5FAC7A5EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:46:a0:5e:d6:e5:b5:fa:99:60:c2:64:ae:ee:
                    7f:a9:bd:57:93:39:20:e6:16:bf:2a:3a:51:d4:62:
                    9f:78:10:b6:89:49:57:af:38:4c:bd:69:20:dc:71:
                    92:fc:1a:35:d0:a2:5a:0c:70:fc:57:c5:77:8f:42:
                    56:1d:ca:95:94:3d:b8:e6:ec:33:fc:64:bd:27:97:
                    36:91:3a:aa:89:7b:8a:9e:f5:7c:59:9f:c8:17:d6:
                    66:da:4b:19:0d:e6:dc:29:73:b6:7f:15:69:03:b5:
                    57:be:ea:90:fa:cd:35:72:8f:cd:00:4b:91:1a:f9:
                    50:ef:1d:87:08:b7:bb:d7:6d:7a:e7:ad:b2:e2:b2:
                    64:17:e5:b5:d9:d3:86:69:1d:9c:af:a7:ca:6b:75:
                    15:c8:7e:6e:33:b6:22:79:91:17:4d:d4:8b:ea:ae:
                    66:bd:27:fe:f7:83:e3:07:da:d0:58:c9:ff:43:5e:
                    60:03:c6:de:a7:03:9c:9f:35:50:df:57:44:2c:d5:
                    01:d1:f7:91:c3:7b:db:ff:72:4b:d4:00:a9:cc:17:
                    b0:92:e8:40:f9:40:44:18:1a:ad:34:47:db:18:9d:
                    fd:0d:a1:05:bd:43:99:0e:2e:e8:8b:85:cf:e5:93:
                    c1:54:0d:12:66:55:5c:91:e3:3e:88:a6:d0:74:c0:
                    ad:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:61:B6:D7:2A:88:9C:C6:16:ED:7D:F8:C6:0F:1E:5F:AC:7A:5E:F9
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a333a3a2f34382d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:ae:87:ab:58:d6:d8:33:3d:e5:66:a1:ae:23:a3:f5:cd:3c:
         30:36:32:eb:9b:d5:64:a6:96:36:6e:e7:ca:0c:2d:da:f9:4d:
         ce:dc:d7:b8:5e:fb:77:09:ec:af:6f:0e:9a:60:cf:5f:ab:7e:
         f5:34:14:e4:78:eb:ff:d0:fd:d8:40:f1:f3:ab:27:45:8f:3d:
         56:21:87:c3:85:eb:35:e1:89:c0:48:0c:d9:71:2f:3c:cc:af:
         d3:4d:20:e2:ca:e5:1c:a2:04:fe:0a:c5:71:3d:58:1e:23:1a:
         e5:cc:5c:57:b5:29:d2:b1:be:74:97:e1:36:1c:79:2e:16:c1:
         c2:60:ee:2e:8d:ad:95:cb:35:ad:6f:15:64:e9:d5:76:cd:76:
         18:d6:6f:5b:3f:33:58:34:bd:88:57:2f:fa:e8:f2:ed:65:b4:
         4d:98:24:c2:1a:6d:1b:da:0b:f4:66:44:36:99:28:af:b2:a4:
         74:0e:37:0d:29:ee:c8:a9:a5:05:66:38:5b:5b:7b:3e:36:f8:
         18:9d:31:81:e8:f1:63:0c:68:fd:5b:28:fc:8e:a7:e2:97:34:
         76:47:10:7a:c2:84:fb:ed:ad:69:c0:07:96:5f:29:d7:2d:b2:
         60:7c:0b:25:1d:27:ca:a4:65:50:4f:f2:a0:3b:b2:44:f9:a6:
         a5:a4:ee:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:45 2026 by rpki-client