Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a343030303a3a2f33362d3336203d3e20323037353637.roa
File:                     326130623a346530373a343030303a3a2f33362d3336203d3e20323037353637.roa (raw, json)
Hash identifier:          xBS10XC+iiCL6rZ5IABdsynSe8V/KtT0ajGHzRA6Eyg=
Subject key identifier:   07:CC:90:8B:80:4E:DA:FF:7B:1F:89:98:7D:13:CA:B1:F2:8A:D9:6B
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       71C8D35710CB20A9C81EBBC1A96B5EB1BF6D15A4
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a343030303a3a2f33362d3336203d3e20323037353637.roa
Signing time:             Sat 01 Nov 2025 23:08:41 +0000
ROA not before:           Sat 01 Nov 2025 23:03:41 +0000
ROA not after:            Sat 31 Oct 2026 23:08:41 +0000
asID:                     207567
IP address blocks:        2a0b:4e07:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 19:14:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c8:d3:57:10:cb:20:a9:c8:1e:bb:c1:a9:6b:5e:b1:bf:6d:15:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Nov  1 23:03:41 2025 GMT
            Not After : Oct 31 23:08:41 2026 GMT
        Subject: CN=07CC908B804EDAFF7B1F89987D13CAB1F28AD96B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:46:5a:11:8b:46:b9:fa:1e:e6:02:6b:61:f1:
                    cb:0d:70:61:c1:0a:9b:74:7a:d9:3a:e2:74:73:ec:
                    0a:d4:b2:db:49:79:3f:a0:e3:8b:f6:9d:f3:4f:77:
                    d4:8f:a3:e7:0f:11:1e:46:c4:78:e0:50:f2:ba:21:
                    87:20:5e:2f:03:02:fe:6c:07:48:27:d2:cf:46:df:
                    a9:8e:25:c5:7d:42:4f:2c:d4:67:8b:94:b2:c3:18:
                    7e:c1:7f:26:0c:f3:44:58:23:f1:14:a3:9f:2b:52:
                    56:f9:d6:4c:7c:e3:df:4f:5c:4c:03:2f:2d:38:4d:
                    33:a6:5c:45:1a:76:50:2c:80:78:97:0b:44:4a:c9:
                    80:5d:63:b6:1f:cc:b7:9a:2c:79:b6:87:53:ee:e4:
                    6c:a3:d8:aa:88:e5:2f:d0:c9:d3:8b:46:c7:d2:95:
                    ca:21:47:4c:f8:1b:7e:94:d2:1e:76:d2:de:3d:ac:
                    09:93:dc:3e:cf:f5:bd:df:78:f2:3e:18:48:47:8d:
                    d1:28:e7:6b:e1:17:31:f2:61:78:d0:e5:46:42:2b:
                    5e:fb:44:29:33:7a:b7:27:42:70:b9:92:a3:58:19:
                    fe:be:e7:32:2b:f4:ba:db:0b:e9:da:e5:4d:1c:a4:
                    e9:c9:61:8f:82:b9:4c:ac:31:26:d6:fb:ad:7e:61:
                    1e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CC:90:8B:80:4E:DA:FF:7B:1F:89:98:7D:13:CA:B1:F2:8A:D9:6B
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a343030303a3a2f33362d3336203d3e20323037353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         94:c4:28:dd:20:5b:b7:b0:cc:09:a6:82:ea:2c:d7:c5:b5:83:
         b3:30:c5:2b:74:06:24:2e:05:db:9b:74:67:64:e9:67:7f:60:
         3e:28:ff:31:e5:79:fc:d1:d7:35:db:f4:98:b7:44:55:dc:80:
         69:c5:82:16:12:76:57:5b:2a:81:bc:d3:80:86:39:4a:32:04:
         71:52:4a:3f:ce:bd:4e:9d:23:de:f8:c8:38:d8:0a:53:7d:4c:
         38:8d:7e:2f:97:d9:52:f0:cc:ae:66:8e:92:b8:84:45:01:ed:
         30:05:1d:f9:98:f8:ff:20:c9:da:18:05:5d:8d:9b:cd:4e:14:
         11:91:ca:99:10:fa:22:18:75:33:71:aa:a3:77:11:42:a4:ac:
         8e:34:a2:7c:49:2e:c8:13:c6:b4:3d:dd:ac:c1:a5:c2:09:08:
         4f:91:44:16:21:f5:e8:56:4e:18:fd:04:11:49:09:77:13:1a:
         17:07:b6:09:59:f8:c8:c7:9a:ee:d8:c3:ee:25:55:4b:7d:ea:
         72:89:09:71:60:1e:b2:93:0f:4a:30:48:ab:93:6a:cb:67:56:
         ce:5d:ec:f5:cd:b6:42:f8:74:41:1d:54:6b:03:80:bc:68:f7:
         9e:07:42:e0:6f:2a:09:61:df:f0:14:38:10:b0:47:f5:7d:be:
         76:cf:72:79
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUccjTVxDLIKnIHrvBqWtesb9tFaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1
Qzk3NzhCRjAeFw0yNTExMDEyMzAzNDFaFw0yNjEwMzEyMzA4NDFaMDMxMTAvBgNV
BAMTKDA3Q0M5MDhCODA0RURBRkY3QjFGODk5ODdEMTNDQUIxRjI4QUQ5NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkRloRi0a5+h7mAmth8csNcGHB
Cpt0etk64nRz7ArUsttJeT+g44v2nfNPd9SPo+cPER5GxHjgUPK6IYcgXi8DAv5s
B0gn0s9G36mOJcV9Qk8s1GeLlLLDGH7BfyYM80RYI/EUo58rUlb51kx8499PXEwD
Ly04TTOmXEUadlAsgHiXC0RKyYBdY7YfzLeaLHm2h1Pu5Gyj2KqI5S/QydOLRsfS
lcohR0z4G36U0h520t49rAmT3D7P9b3fePI+GEhHjdEo52vhFzHyYXjQ5UZCK177
RCkzercnQnC5kqNYGf6+5zIr9LrbC+na5U0cpOnJYY+CuUysMSbW+61+YR7HAgMB
AAGjggJpMIICZTAdBgNVHQ4EFgQUB8yQi4BO2v97H4mYfRPKsfKK2WswHwYDVR0j
BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG
QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4
MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl
ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTM0MzAzMDMwM2EzYTJm
MzMzNjJkMzMzNjIwM2QzZTIwMzIzMDM3MzUzNjM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgtOB0Aw
DQYJKoZIhvcNAQELBQADggEBAJTEKN0gW7ewzAmmguos18W1g7MwxSt0BiQuBdub
dGdk6Wd/YD4o/zHlefzR1zXb9Ji3RFXcgGnFghYSdldbKoG804CGOUoyBHFSSj/O
vU6dI974yDjYClN9TDiNfi+X2VLwzK5mjpK4hEUB7TAFHfmY+P8gydoYBV2Nm81O
FBGRypkQ+iIYdTNxqqN3EUKkrI40onxJLsgTxrQ93azBpcIJCE+RRBYh9ehWThj9
BBFJCXcTGhcHtglZ+MjHmu7Yw+4lVUt96nKJCXFgHrKTD0owSKuTastnVs5d7PXN
tkL4dEEdVGsDgLxo954HQuBvKglh3/AUOBCwR/V9vnbPcnk=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:40:42 2025 by rpki-client