Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219480.roa
File:                     AS219480.roa (raw, json)
Hash identifier:          H+us89k7CX3n94AeBJbTiHRYkSf+8KlMOewDV5BROoU=
Subject key identifier:   D5:29:F8:38:03:49:4C:FC:BA:E4:02:F0:1B:BC:F3:2C:80:3E:47:7C
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       315527C393D00E61026CC8471456953BC36C2172
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219480.roa
Signing time:             Tue 08 Sep 2026 14:21:28 +0000
ROA not before:           Tue 08 Sep 2026 14:16:28 +0000
ROA not after:            Tue 07 Sep 2027 14:21:28 +0000
asID:                     219480
IP address blocks:        2a0b:4e07:81::/48 maxlen: 48
                          2a0b:4e07:230::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:55:27:c3:93:d0:0e:61:02:6c:c8:47:14:56:95:3b:c3:6c:21:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Sep  8 14:16:28 2026 GMT
            Not After : Sep  7 14:21:28 2027 GMT
        Subject: CN=D529F83803494CFCBAE402F01BBCF32C803E477C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ad:39:4a:30:19:eb:7d:04:a9:81:e9:cd:50:
                    fc:de:4e:08:74:98:c6:19:05:34:1b:71:3e:2d:12:
                    b2:21:03:59:63:3d:cf:68:a5:7c:7b:72:b1:be:be:
                    64:bc:f7:f7:90:bc:fe:a4:6f:96:b2:a4:ee:86:17:
                    4d:4a:79:ec:58:9e:be:82:aa:1a:40:24:5b:f0:f9:
                    01:56:a1:97:ab:c3:29:27:81:a3:e9:90:20:bf:d9:
                    a3:92:cd:c6:fb:53:58:c3:38:c6:66:c5:36:e7:e3:
                    fb:4b:b1:dd:37:2b:b4:70:f2:4d:68:8f:c6:c9:50:
                    cf:49:95:9e:d2:c8:da:e3:d0:3c:b5:56:22:d8:f2:
                    28:fc:93:73:5f:b9:fb:7c:0d:2f:54:c9:e4:85:dc:
                    c3:14:82:3b:84:d1:ce:16:02:35:ae:27:00:38:95:
                    ed:86:e3:97:99:c6:49:94:27:ed:80:f1:5f:26:64:
                    f4:c0:a2:18:e3:a5:a4:04:e8:b0:70:34:50:b2:c4:
                    19:48:81:ca:4d:fb:66:a6:15:dc:d8:c6:41:c4:7a:
                    b7:c3:40:8d:72:2b:be:37:d5:e8:6a:9e:cd:b3:73:
                    e0:99:12:1a:2c:24:2b:12:f9:16:79:94:da:b2:af:
                    7b:37:e2:8a:bf:42:a8:af:42:d7:db:99:e1:23:52:
                    68:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:29:F8:38:03:49:4C:FC:BA:E4:02:F0:1B:BC:F3:2C:80:3E:47:7C
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219480.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:81::/48
                  2a0b:4e07:230::/44

    Signature Algorithm: sha256WithRSAEncryption
         95:df:52:a5:21:60:79:47:34:91:c7:ca:50:51:ae:ea:c6:92:
         19:e9:ec:f3:2b:a2:6c:a2:b2:d4:a4:f2:48:8a:47:b2:4f:a8:
         d4:1f:91:2a:e6:60:a1:43:32:56:13:06:be:d3:06:92:9f:b1:
         1b:40:18:e5:3c:47:7d:12:b3:b1:56:2a:a4:36:b1:17:45:75:
         0e:6c:9e:8a:9e:33:46:c1:e0:37:ac:38:e7:c5:ae:93:cd:65:
         50:ef:33:77:02:58:54:df:78:93:ba:b8:2a:62:ff:25:68:82:
         fb:e9:db:95:eb:48:99:0c:4f:29:32:cf:46:d6:4c:d7:bf:40:
         dc:6a:b5:82:7b:3c:d5:3e:50:a3:7f:29:79:e1:a2:30:ef:58:
         b9:6e:3f:d9:3e:a2:e7:d9:89:9d:6c:56:6d:31:f7:76:66:b5:
         e3:8a:bc:dc:a8:55:b7:98:59:f0:3d:12:2a:b0:eb:bd:6d:33:
         29:21:fa:26:f4:b5:ee:04:e8:19:f6:19:94:f8:ee:d7:b3:57:
         de:ee:d1:ce:30:9f:70:62:3e:c5:90:26:e5:33:71:36:d9:b4:
         da:90:1c:fc:ef:37:0f:75:be:76:bd:bf:f4:de:48:40:9b:0c:
         3e:07:a6:3e:f7:d0:cc:9b:ac:0d:90:3b:95:f6:2f:2b:ab:c8:
         1f:ee:91:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:54:31 2026 by rpki-client