Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63333a3a2f34382d3438203d3e20323036303037.roa
File:                     326130623a346530373a63333a3a2f34382d3438203d3e20323036303037.roa (raw, json)
Hash identifier:          7uYq8w1NYOkdQlch4bIEtjeIm5yVCngQ8/O6DhpJwaM=
Subject key identifier:   59:A0:C0:79:62:BC:E3:2D:73:9A:C9:21:94:DC:4E:38:1C:BA:E1:F0
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       4F7F500AE5CCF8D42FDFD4E56A4117DF9E028D80
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63333a3a2f34382d3438203d3e20323036303037.roa
Signing time:             Mon 30 Mar 2026 11:46:50 +0000
ROA not before:           Mon 30 Mar 2026 11:41:50 +0000
ROA not after:            Mon 29 Mar 2027 11:46:50 +0000
asID:                     206007
IP address blocks:        2a0b:4e07:c3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7f:50:0a:e5:cc:f8:d4:2f:df:d4:e5:6a:41:17:df:9e:02:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Mar 30 11:41:50 2026 GMT
            Not After : Mar 29 11:46:50 2027 GMT
        Subject: CN=59A0C07962BCE32D739AC92194DC4E381CBAE1F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:b7:44:13:66:b9:94:ac:f0:98:d4:3b:a6:
                    12:72:ab:bc:33:d2:f1:5b:57:b2:b9:45:22:75:06:
                    96:cc:81:e8:f2:16:f0:1b:88:78:56:82:93:a6:61:
                    a8:eb:dc:6b:79:1f:b7:9e:e1:89:19:cc:c1:fa:0f:
                    86:0f:b8:92:92:97:c7:b8:d7:fc:f3:9c:6f:2f:8c:
                    56:6b:d2:93:ca:a3:43:ab:28:fe:53:87:74:f6:f2:
                    9e:6c:b0:6f:6f:d4:20:7a:58:d0:e1:bb:dc:e6:5d:
                    a2:38:80:8b:07:92:f7:d6:38:13:b6:0b:49:c4:8f:
                    af:36:36:f3:fb:34:62:0a:74:c6:06:64:24:eb:11:
                    57:0b:5d:47:8b:6d:e3:32:de:55:22:73:fa:3a:29:
                    59:6e:51:cc:e0:80:bb:18:09:47:e0:54:3a:b4:76:
                    89:96:69:cd:1d:0e:2f:f9:1b:db:dc:1e:43:6c:b2:
                    9e:e1:5b:0e:98:8c:0c:cd:df:3b:8a:03:6a:f5:cf:
                    66:53:f6:e7:cd:95:82:22:eb:b3:f6:08:15:87:e1:
                    0c:25:f7:ff:21:fd:b2:00:8f:0c:74:d3:34:2f:0a:
                    1e:85:5b:e3:11:82:7e:5e:11:42:2c:91:b1:69:cd:
                    17:b7:37:a6:94:52:a1:28:ae:46:7e:c9:7b:23:75:
                    11:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A0:C0:79:62:BC:E3:2D:73:9A:C9:21:94:DC:4E:38:1C:BA:E1:F0
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63333a3a2f34382d3438203d3e20323036303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:c3::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:99:e8:e5:1d:b6:8d:bd:f2:4f:f9:aa:08:33:6a:16:98:ef:
         5d:c7:06:82:a2:a2:d2:d4:31:50:2f:5d:7c:21:29:1c:ec:bf:
         3a:5f:34:d1:98:35:ef:53:20:8a:21:35:84:2c:0a:c1:ee:f1:
         08:a1:a7:40:fd:3b:48:63:7d:59:75:28:47:2e:6a:84:95:dd:
         86:4c:03:2c:00:24:2c:7a:a8:7d:ba:f8:33:5a:5f:d7:e6:1b:
         d4:11:5c:cd:1b:a6:7b:14:eb:f9:01:a4:47:33:04:26:45:98:
         bc:ee:ac:f6:37:6e:fd:9d:8f:c9:6c:6a:b5:b2:76:60:4f:a5:
         97:61:11:f5:25:59:4d:55:c0:89:e6:49:43:16:ae:a9:3a:2f:
         70:4c:75:7d:84:6a:d9:a9:c8:07:e8:0d:41:d8:16:a8:2a:44:
         1e:75:fa:8c:2e:70:e8:cd:6a:4c:9f:27:84:ed:d6:9e:0b:08:
         5e:c8:32:bc:8d:a0:be:f5:5c:98:75:79:59:09:8c:00:33:ef:
         77:5a:2d:11:1d:24:3c:37:3f:08:4d:d7:eb:c7:48:b1:f2:8d:
         df:77:3e:4f:20:02:b4:9e:96:b7:1d:74:97:8b:94:82:93:66:
         bc:74:f1:d1:fd:4d:27:4a:d0:0e:bc:4b:e5:38:82:dd:0e:25:
         f8:a0:f3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:17:06 2026 by rpki-client