Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3a2f34382d3438203d3e20323131343131.roa
File:                     326130623a346530373a3a2f34382d3438203d3e20323131343131.roa (raw, json)
Hash identifier:          bzNYqcAgnXPnXWA4c/1U9nJiICg9p/uVIHGRifqfsjg=
Subject key identifier:   3B:F8:9F:63:DA:EC:FF:A6:B8:EF:56:1B:83:F8:B4:77:F6:BA:A9:23
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       2980112FCF4278E1AFDB89E7113EBC68A8F50969
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3a2f34382d3438203d3e20323131343131.roa
Signing time:             Wed 11 Jun 2025 19:51:40 +0000
ROA not before:           Wed 11 Jun 2025 19:46:40 +0000
ROA not after:            Wed 10 Jun 2026 19:51:40 +0000
asID:                     211411
IP address blocks:        2a0b:4e07::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 00:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:80:11:2f:cf:42:78:e1:af:db:89:e7:11:3e:bc:68:a8:f5:09:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Jun 11 19:46:40 2025 GMT
            Not After : Jun 10 19:51:40 2026 GMT
        Subject: CN=3BF89F63DAECFFA6B8EF561B83F8B477F6BAA923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a6:c2:4c:41:3f:b6:91:80:42:ed:3b:6e:76:
                    d1:59:15:0a:fe:9b:59:ac:d5:6e:02:83:5b:ab:dd:
                    26:8d:ea:63:4f:a7:83:3f:99:42:18:6f:63:aa:42:
                    b6:ad:3f:35:79:3b:19:76:23:8a:25:90:d9:05:c3:
                    f0:6e:d0:8c:80:52:c9:31:6b:23:c5:b0:1e:19:57:
                    6f:2d:e7:c0:79:d7:f0:28:6e:01:bb:de:58:49:4c:
                    a2:3a:7d:df:5a:77:8c:4c:8c:58:dd:9c:10:bc:3a:
                    2f:da:5f:29:1c:b5:b0:b9:8a:a4:3b:50:8b:d5:47:
                    0c:43:70:1a:13:21:d9:35:2b:c0:b4:47:af:62:5c:
                    26:e2:44:c9:04:2f:d7:5e:72:f1:ed:9c:07:a4:23:
                    14:04:af:79:96:8f:a1:a2:37:8d:34:3f:44:ee:44:
                    61:57:d2:7a:5b:2d:a7:4d:1b:e4:58:48:a3:c7:f2:
                    bb:41:f7:3d:a2:4c:81:76:ee:3e:9d:8b:86:e5:b5:
                    52:50:86:a3:98:6c:84:ca:be:7a:4b:f7:93:4f:ce:
                    a9:2e:30:1f:b2:ef:69:2a:c6:9b:9a:5d:c0:4b:50:
                    b5:c6:46:c0:5f:d7:ec:c9:13:25:77:e2:71:29:82:
                    eb:8f:a3:30:47:d7:af:2d:f6:4a:fe:93:b1:ae:c8:
                    55:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F8:9F:63:DA:EC:FF:A6:B8:EF:56:1B:83:F8:B4:77:F6:BA:A9:23
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a3a2f34382d3438203d3e20323131343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:2d:4e:21:8d:a9:0c:9b:2f:a7:ad:11:13:78:05:4f:be:b0:
         89:8e:42:e1:f2:49:37:06:2f:ff:9f:07:db:a4:38:10:92:1e:
         ce:1a:47:e9:78:37:72:73:a0:ad:ce:af:9e:98:42:13:0c:28:
         78:cf:ea:21:de:19:11:f3:72:eb:79:23:8e:85:15:cb:da:7c:
         5b:2e:b1:91:1a:a1:ad:f5:48:d9:65:8e:30:f8:ec:57:a7:35:
         96:88:84:4b:37:3f:56:95:b7:8c:40:9d:78:fa:41:cd:b2:d9:
         ba:eb:3b:78:6c:4c:eb:3e:ad:eb:8a:95:a6:eb:14:86:40:2f:
         1a:8b:02:91:be:82:ef:e1:00:4e:57:b8:69:9c:04:2f:a9:62:
         30:3c:6d:8a:4b:81:d9:12:7e:4c:e3:ec:3c:17:60:50:bb:f8:
         b8:8b:61:7c:14:10:7e:47:78:9c:4f:09:8a:c7:01:2e:f2:28:
         9b:03:07:36:fb:96:2d:4f:63:1e:91:e3:d9:dd:44:77:eb:35:
         34:67:20:e3:ba:2c:13:36:83:a3:42:be:b9:7f:80:de:85:36:
         0e:84:75:48:81:56:a7:6a:98:50:c3:61:c3:7f:17:e8:7b:b3:
         cb:53:87:41:43:1a:2c:70:55:dd:a4:0b:5b:7d:b4:78:d1:38:
         68:e3:d7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:41:58 2025 by rpki-client