Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/326130373a353463313a633031303a3a2f34342d3438203d3e20323031313332.roa
File:                     326130373a353463313a633031303a3a2f34342d3438203d3e20323031313332.roa (raw, json)
Hash identifier:          nCaZK5znVYJTFYBYBBiKoIVkT1bc2I4KpDdvg2uat2U=
Subject key identifier:   36:1E:E1:77:D5:42:C9:FE:10:C8:64:AC:86:57:8A:F7:2B:5D:25:7D
Certificate issuer:       /CN=ED454B99C2B0E472A9542F909449EBE8F31FFAD9
Certificate serial:       091E8B906B28D71101110CCE27DF0BD441616CAF
Authority key identifier: ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/326130373a353463313a633031303a3a2f34342d3438203d3e20323031313332.roa
Signing time:             Fri 13 Feb 2026 20:18:55 +0000
ROA not before:           Fri 13 Feb 2026 20:13:55 +0000
ROA not after:            Fri 12 Feb 2027 20:18:55 +0000
asID:                     201132
IP address blocks:        2a07:54c1:c010::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl
                          rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1e:8b:90:6b:28:d7:11:01:11:0c:ce:27:df:0b:d4:41:61:6c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED454B99C2B0E472A9542F909449EBE8F31FFAD9
        Validity
            Not Before: Feb 13 20:13:55 2026 GMT
            Not After : Feb 12 20:18:55 2027 GMT
        Subject: CN=361EE177D542C9FE10C864AC86578AF72B5D257D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9c:e2:76:ef:4c:84:4a:27:fb:ce:8c:7b:88:
                    00:11:8c:72:36:b2:c5:02:a9:c5:f7:fd:44:d2:06:
                    48:7a:c6:72:6f:20:2a:c5:1d:f5:ea:41:e1:c9:36:
                    21:ec:1b:90:3b:64:52:ba:dd:8d:fe:b2:a8:4a:66:
                    04:60:21:e5:ac:a9:84:b2:c9:17:b3:01:e5:d8:84:
                    92:ea:cb:d3:aa:ec:98:38:1c:6f:c1:70:be:c7:34:
                    a3:13:3c:00:92:6f:3f:e6:43:d2:ea:01:d5:e9:c0:
                    b2:e4:a1:d4:8a:0f:03:33:9e:b3:23:9e:95:96:33:
                    aa:12:b0:57:df:78:63:fd:7f:6c:85:04:c7:fb:21:
                    61:01:b4:16:94:1c:75:0f:d3:e0:61:4e:fc:54:78:
                    75:99:27:c1:1b:d0:fb:af:aa:f8:7f:ec:73:a0:8b:
                    2b:ee:80:ec:dd:5f:b3:55:10:3a:9a:68:49:9b:cf:
                    a0:dd:eb:8a:c0:eb:88:ed:5a:20:57:e3:a7:84:2d:
                    04:a3:0f:58:15:e5:c7:46:90:d0:11:df:a1:00:52:
                    29:d8:73:6a:ea:d5:73:be:61:a8:52:48:d8:b1:e0:
                    27:5b:58:23:26:80:f3:d4:42:81:a5:49:a0:48:bc:
                    01:c5:0b:68:a5:62:ac:bb:b2:8b:d1:5f:47:e8:90:
                    15:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1E:E1:77:D5:42:C9:FE:10:C8:64:AC:86:57:8A:F7:2B:5D:25:7D
            X509v3 Authority Key Identifier:
                keyid:ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/326130373a353463313a633031303a3a2f34342d3438203d3e20323031313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:c010::/44

    Signature Algorithm: sha256WithRSAEncryption
         92:de:4c:8e:1f:4d:3e:11:d2:3c:36:e8:75:31:f9:2c:97:f5:
         09:fc:c5:73:47:96:3c:37:36:64:70:e4:f9:d5:a3:bb:e1:3a:
         56:71:ba:49:98:da:1a:d6:4f:ef:4b:47:d5:51:db:ca:74:9e:
         da:00:7e:ec:0f:5c:31:4d:45:3e:d9:2b:ab:3c:df:82:ae:99:
         39:38:0c:9e:47:6e:06:48:1e:9f:cf:ea:37:d6:b6:a2:71:a9:
         1e:07:13:6f:23:30:eb:60:55:1a:fc:01:45:f1:7e:c3:5d:7d:
         84:4f:3b:24:52:4b:41:72:30:b1:8c:09:a6:3d:0f:c6:ba:bb:
         d7:6d:9d:41:ee:b0:47:a0:90:29:67:5b:f9:0e:e7:50:6b:d6:
         59:89:49:37:11:35:59:62:ea:58:44:06:f9:41:ee:a2:a0:4e:
         d5:dd:f5:5c:9e:06:73:b6:3f:26:60:ec:37:73:16:df:3c:9c:
         52:13:39:ef:51:c4:d7:b9:44:ec:c2:0b:aa:82:0e:07:96:0d:
         70:6b:53:ca:74:d0:90:fb:db:22:c1:99:77:94:1e:8b:d2:7e:
         b9:37:98:a9:87:e2:e1:ab:4c:c6:01:ed:9b:9a:92:9f:d3:40:
         a2:d5:f0:97:e5:77:a2:58:b7:f2:9f:1e:ac:d9:45:74:f5:08:
         05:fe:40:66
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUCR6LkGso1xEBEQzOJ98L1EFhbK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ0NTRCOTlDMkIwRTQ3MkE5NTQyRjkwOTQ0OUVCRThG
MzFGRkFEOTAeFw0yNjAyMTMyMDEzNTVaFw0yNzAyMTIyMDE4NTVaMDMxMTAvBgNV
BAMTKDM2MUVFMTc3RDU0MkM5RkUxMEM4NjRBQzg2NTc4QUY3MkI1RDI1N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5nOJ270yESif7zox7iAARjHI2
ssUCqcX3/UTSBkh6xnJvICrFHfXqQeHJNiHsG5A7ZFK63Y3+sqhKZgRgIeWsqYSy
yRezAeXYhJLqy9Oq7Jg4HG/BcL7HNKMTPACSbz/mQ9LqAdXpwLLkodSKDwMznrMj
npWWM6oSsFffeGP9f2yFBMf7IWEBtBaUHHUP0+BhTvxUeHWZJ8Eb0Puvqvh/7HOg
iyvugOzdX7NVEDqaaEmbz6Dd64rA64jtWiBX46eELQSjD1gV5cdGkNAR36EAUinY
c2rq1XO+YahSSNix4CdbWCMmgPPUQoGlSaBIvAHFC2ilYqy7sovRX0fokBVDAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUNh7hd9VCyf4QyGSshleK9ytdJX0wHwYDVR0j
BBgwFoAU7UVLmcKw5HKpVC+QlEnr6PMf+tkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvY2VhNWIzNDg0YzJiNDUwZmIyNzczYjFiOTgxZjUwODcvMS9FRDQ1NEI5OUMy
QjBFNDcyQTk1NDJGOTA5NDQ5RUJFOEYzMUZGQUQ5LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj
YWUzZi80L0VENDU0Qjk5QzJCMEU0NzJBOTU0MkY5MDk0NDlFQkU4RjMxRkZBRDku
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvY2VhNWIzNDg0YzJiNDUwZmIyNzcz
YjFiOTgxZjUwODcvMS8zMjYxMzAzNzNhMzUzNDYzMzEzYTYzMzAzMTMwM2EzYTJm
MzQzNDJkMzQzODIwM2QzZTIwMzIzMDMxMzEzMzMyLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgdUwcAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCS3kyOH00+EdI8Nuh1Mfksl/UJ/MVzR5Y8NzZk
cOT51aO74TpWcbpJmNoa1k/vS0fVUdvKdJ7aAH7sD1wxTUU+2SurPN+Crpk5OAye
R24GSB6fz+o31raicakeBxNvIzDrYFUa/AFF8X7DXX2ETzskUktBcjCxjAmmPQ/G
urvXbZ1B7rBHoJApZ1v5DudQa9ZZiUk3ETVZYupYRAb5Qe6ioE7V3fVcngZztj8m
YOw3cxbfPJxSEznvUcTXuUTswguqgg4Hlg1wa1PKdNCQ+9siwZl3lB6L0n65N5ip
h+Lhq0zGAe2bmpKf00Ci1fCX5XeiWLfynx6s2UV09QgF/kBm
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:44:46 2026 by rpki-client