Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS202934.roa
File:                     AS202934.roa (raw, json)
Hash identifier:          nwG/6AvSNfr1Tub9ykxJGAoLYGGbK0MmTXq5fJMokCc=
Subject key identifier:   4B:33:FA:78:C4:63:4B:01:5A:94:C0:65:0C:4F:28:71:4D:DE:A7:81
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       50BC40BDCEDF739CCB6B7E4EE6E559C6C0A8E7B8
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS202934.roa
Signing time:             Fri 23 Oct 2026 21:26:27 +0000
ROA not before:           Fri 23 Oct 2026 21:21:27 +0000
ROA not after:            Fri 22 Oct 2027 21:26:27 +0000
asID:                     202934
IP address blocks:        2a0b:4e07:3a::/48 maxlen: 48
                          2a0b:4e07:2a0::/44 maxlen: 48
                          2a0b:4e07:5000::/37 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Nov 2026 16:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:bc:40:bd:ce:df:73:9c:cb:6b:7e:4e:e6:e5:59:c6:c0:a8:e7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Oct 23 21:21:27 2026 GMT
            Not After : Oct 22 21:26:27 2027 GMT
        Subject: CN=4B33FA78C4634B015A94C0650C4F28714DDEA781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dd:1b:e1:2e:4b:96:6f:05:79:34:92:cb:0f:
                    e6:6c:43:b7:64:4f:d4:bd:8d:e3:1f:60:e7:bd:ef:
                    6b:f2:c6:64:1f:62:72:50:29:a6:5c:af:05:eb:26:
                    da:91:38:da:29:1d:09:4a:28:fa:69:ef:c3:fd:84:
                    65:a3:f3:91:8a:31:e2:7f:de:06:d4:50:02:b5:f9:
                    9f:df:0a:12:27:fa:5f:c5:b8:41:32:d4:fa:c7:49:
                    05:7f:aa:98:37:4d:e4:24:72:0d:a9:f6:bb:bd:46:
                    e2:01:c9:03:d3:c4:e2:05:9f:ee:44:8e:11:45:4e:
                    c6:e4:7a:09:93:cf:2c:f8:77:b6:43:a7:07:59:7d:
                    46:a0:49:e0:41:1c:4a:1b:eb:a3:26:e0:17:f8:6a:
                    d9:6e:52:70:3e:f5:ac:e4:8a:17:e1:a7:b2:70:96:
                    55:e3:e7:1e:49:91:53:48:83:83:a4:52:3c:18:33:
                    5e:d7:03:30:a6:f5:91:36:cb:94:34:d4:2e:6a:a5:
                    84:bc:be:1d:a1:d0:03:c0:76:26:6c:bd:d3:87:f7:
                    92:b5:72:f9:05:01:f3:20:06:f5:1c:c4:50:81:dc:
                    a6:ff:4b:18:80:aa:15:f5:86:d1:7f:bc:8f:af:22:
                    21:a7:66:79:04:db:f5:89:a2:2d:1e:1b:9c:25:d2:
                    da:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:33:FA:78:C4:63:4B:01:5A:94:C0:65:0C:4F:28:71:4D:DE:A7:81
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS202934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:3a::/48
                  2a0b:4e07:2a0::/44
                  2a0b:4e07:5000::/37

    Signature Algorithm: sha256WithRSAEncryption
         22:88:a4:ee:71:ff:30:28:58:bf:98:a5:d7:f8:39:0e:9a:ca:
         aa:e1:a1:c6:70:d9:cf:2d:63:a6:00:c9:38:60:f2:5a:93:ca:
         bb:ad:45:92:ff:62:70:e6:9d:8c:95:27:fe:9e:d9:ea:e6:b2:
         89:2a:6a:45:6d:40:78:19:b6:46:bb:15:d1:5a:c2:8d:8c:b8:
         7d:88:2e:d8:40:c2:6b:9a:a5:06:d0:fb:5d:be:b6:8b:51:05:
         f2:97:a4:11:04:59:52:5a:31:48:91:93:7b:61:62:46:71:78:
         51:3a:1c:83:aa:2d:dd:aa:34:5b:55:5d:e5:26:69:d9:12:69:
         72:06:8b:47:eb:48:6c:d7:cd:34:42:c4:ef:fb:78:6a:55:a5:
         12:84:d2:6e:31:8e:3d:ef:82:0c:cd:eb:01:12:0c:81:d0:bc:
         2c:75:6c:13:9b:17:33:20:f6:27:19:3b:42:68:e6:69:a5:e9:
         a0:82:91:89:2d:24:d1:ce:27:0f:91:a1:f7:bb:57:fe:f9:de:
         cf:d2:57:a6:a3:fb:01:1a:b6:b0:e8:cd:14:45:6d:4c:f0:d7:
         84:35:43:e2:58:02:5d:69:bc:ec:cd:bf:df:ef:9e:88:63:c0:
         4a:58:ff:f1:89:df:da:4d:51:c1:68:8c:83:f0:85:b8:73:f5:
         c9:ff:62:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 09:27:50 2026 by rpki-client