Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a34373a3a2f34382d3438203d3e203131393637.roa
File:                     326130623a346530373a34373a3a2f34382d3438203d3e203131393637.roa (raw, json)
Hash identifier:          aphrsGfCOcwjzGvZeAXsMHJeyK+x6U3gwDMsUJZikIQ=
Subject key identifier:   ED:A9:E9:0C:2B:D4:13:47:DF:0D:71:BE:AE:DC:17:47:77:1A:B9:34
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       23753E3E4C01E930FAF84D713AB63EB179D51D4D
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a34373a3a2f34382d3438203d3e203131393637.roa
Signing time:             Tue 17 Feb 2026 22:57:36 +0000
ROA not before:           Tue 17 Feb 2026 22:52:36 +0000
ROA not after:            Tue 16 Feb 2027 22:57:36 +0000
asID:                     11967
IP address blocks:        2a0b:4e07:47::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 05:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:75:3e:3e:4c:01:e9:30:fa:f8:4d:71:3a:b6:3e:b1:79:d5:1d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Feb 17 22:52:36 2026 GMT
            Not After : Feb 16 22:57:36 2027 GMT
        Subject: CN=EDA9E90C2BD41347DF0D71BEAEDC1747771AB934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:05:21:30:a8:a3:16:3b:1b:ee:3f:71:dc:6d:
                    81:4e:f6:70:54:04:72:7e:42:e1:32:e8:8d:50:a6:
                    44:f4:22:a7:d0:9a:f7:58:76:56:7d:b3:7d:69:8a:
                    bc:b1:01:96:1e:dc:c1:b8:47:9a:70:63:63:ff:85:
                    c8:a8:c6:76:7a:c0:a1:73:c1:f5:a3:57:cd:36:02:
                    cb:ee:bd:60:a0:eb:8c:b8:06:1a:8f:b5:cd:83:11:
                    7e:f2:e9:41:94:1b:a9:e3:3e:cf:c6:50:5f:87:47:
                    e9:32:4c:4d:ad:1c:21:d7:de:60:0c:45:1d:45:5f:
                    41:fb:3e:b5:cd:cd:b6:19:af:71:4c:ff:57:10:a1:
                    d2:15:bd:9c:5d:4b:5c:87:98:bc:76:d8:45:44:77:
                    a3:4c:5e:8d:cb:41:93:7a:d1:27:0f:c3:ae:5c:a9:
                    ac:b6:da:12:6a:cc:9c:09:28:05:85:7c:a7:b8:39:
                    42:70:d9:7d:d0:08:79:8a:34:1f:52:c9:cf:e1:72:
                    54:b4:a9:11:95:6e:30:34:45:a1:01:3c:6b:ca:f3:
                    f0:4d:32:bd:e3:d1:ec:e1:9b:3b:f6:85:a0:cf:71:
                    7d:78:e0:98:62:c0:92:38:8c:5a:a9:bb:a3:7f:87:
                    e4:fc:26:68:66:20:3c:77:8f:0b:96:6f:11:28:0d:
                    52:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A9:E9:0C:2B:D4:13:47:DF:0D:71:BE:AE:DC:17:47:77:1A:B9:34
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a34373a3a2f34382d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:47::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:cd:0c:82:9b:94:e7:73:ac:df:99:8f:2e:45:7f:d8:bb:8e:
         a6:a7:3d:61:3c:d9:9b:b0:b7:e0:7f:54:65:eb:42:00:14:49:
         0e:72:2a:04:3d:15:b6:07:4d:dd:69:b2:d4:77:9f:b9:a2:4f:
         c5:e2:be:31:d2:df:0f:9e:f1:b8:a3:45:9c:d4:a2:64:98:55:
         25:5d:bf:fd:47:82:b6:91:5c:1b:6e:4d:7c:af:30:7b:51:6a:
         09:35:a1:b1:d7:67:9e:c8:c2:c0:c1:89:0a:f9:96:39:44:0b:
         f1:d6:c5:25:85:9c:eb:74:4d:42:e3:e9:72:57:b3:72:6e:44:
         ed:1e:46:35:d8:b1:7b:ce:b7:10:4d:6c:2c:7e:ba:83:4c:70:
         06:b1:fb:c7:d7:4d:de:72:7f:aa:21:e4:b7:8c:6e:46:4b:c0:
         68:a9:39:52:81:31:1c:1d:61:d2:00:c3:5d:77:4e:5c:7f:44:
         97:fa:30:1d:5e:47:4b:d9:b2:0a:20:b7:d3:4d:7e:17:e4:0f:
         d0:49:6d:af:9e:b7:c7:e3:4f:24:ed:60:7b:b5:30:68:d5:03:
         9c:2a:cd:a9:ba:11:da:84:47:77:e1:50:20:35:bb:6d:e1:84:
         40:e0:d7:dc:50:7d:5a:c9:00:b4:c0:e2:db:0e:83:3e:fa:7a:
         a0:ec:6c:e0
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIUI3U+PkwB6TD6+E1xOrY+sXnVHU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1
Qzk3NzhCRjAeFw0yNjAyMTcyMjUyMzZaFw0yNzAyMTYyMjU3MzZaMDMxMTAvBgNV
BAMTKEVEQTlFOTBDMkJENDEzNDdERjBENzFCRUFFREMxNzQ3NzcxQUI5MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTBSEwqKMWOxvuP3HcbYFO9nBU
BHJ+QuEy6I1QpkT0IqfQmvdYdlZ9s31piryxAZYe3MG4R5pwY2P/hcioxnZ6wKFz
wfWjV802AsvuvWCg64y4BhqPtc2DEX7y6UGUG6njPs/GUF+HR+kyTE2tHCHX3mAM
RR1FX0H7PrXNzbYZr3FM/1cQodIVvZxdS1yHmLx22EVEd6NMXo3LQZN60ScPw65c
qay22hJqzJwJKAWFfKe4OUJw2X3QCHmKNB9Syc/hclS0qRGVbjA0RaEBPGvK8/BN
Mr3j0ezhmzv2haDPcX144JhiwJI4jFqpu6N/h+T8JmhmIDx3jwuWbxEoDVL3AgMB
AAGjggJkMIICYDAdBgNVHQ4EFgQU7anpDCvUE0ffDXG+rtwXR3cauTQwHwYDVR0j
BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG
QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4
MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu
Y2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl
ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTM0MzczYTNhMmYzNDM4
MmQzNDM4MjAzZDNlMjAzMTMxMzkzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgtOBwBHMA0GCSqG
SIb3DQEBCwUAA4IBAQAUzQyCm5Tnc6zfmY8uRX/Yu46mpz1hPNmbsLfgf1Rl60IA
FEkOcioEPRW2B03dabLUd5+5ok/F4r4x0t8PnvG4o0Wc1KJkmFUlXb/9R4K2kVwb
bk18rzB7UWoJNaGx12eeyMLAwYkK+ZY5RAvx1sUlhZzrdE1C4+lyV7NybkTtHkY1
2LF7zrcQTWwsfrqDTHAGsfvH103ecn+qIeS3jG5GS8BoqTlSgTEcHWHSAMNdd05c
f0SX+jAdXkdL2bIKILfTTX4X5A/QSW2vnrfH408k7WB7tTBo1QOcKs2puhHahEd3
4VAgNbtt4YRA4NfcUH1ayQC0wOLbDoM++nqg7Gzg
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:27 2026 by rpki-client