Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63313a3a2f34382d3438203d3e203131393637.roa
File:                     326130623a346530373a63313a3a2f34382d3438203d3e203131393637.roa (raw, json)
Hash identifier:          IbEInVZvv3Bh6yqes3LkYu8Jx2baZTc5jXar0OkU+Yg=
Subject key identifier:   1A:9F:56:15:84:25:0E:73:A9:B9:0C:FF:D8:0B:3F:A4:9F:44:E2:2B
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       774C8820865CB27FF8A6BA6633C2FFE0E7B10234
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63313a3a2f34382d3438203d3e203131393637.roa
Signing time:             Mon 30 Jun 2025 09:30:08 +0000
ROA not before:           Mon 30 Jun 2025 09:25:08 +0000
ROA not after:            Mon 29 Jun 2026 09:30:08 +0000
asID:                     11967
IP address blocks:        2a0b:4e07:c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 16:57:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4c:88:20:86:5c:b2:7f:f8:a6:ba:66:33:c2:ff:e0:e7:b1:02:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Jun 30 09:25:08 2025 GMT
            Not After : Jun 29 09:30:08 2026 GMT
        Subject: CN=1A9F561584250E73A9B90CFFD80B3FA49F44E22B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7e:25:bf:75:64:4a:1c:ae:37:34:aa:6e:c5:
                    b8:b1:c9:dc:31:48:8c:c8:51:e4:8f:b1:4b:97:4e:
                    d7:09:d5:84:66:ec:f2:6d:dd:37:f7:0f:96:44:4f:
                    32:d0:5a:ba:55:a3:f2:7b:ec:be:92:04:c0:ee:bb:
                    9b:12:36:7f:5a:47:23:37:22:b7:63:5a:e2:b7:88:
                    8d:2d:64:e2:79:3d:db:9d:b0:a2:b5:50:67:ad:f9:
                    25:29:4b:b5:1e:6f:b1:32:be:db:c7:e5:81:86:d6:
                    28:8d:c1:43:42:1d:6a:ef:dc:43:3e:57:23:ff:0e:
                    22:44:1e:53:92:d4:ff:18:97:a6:58:d5:9c:b2:ef:
                    71:b5:da:d9:53:b3:31:55:89:cf:b3:ea:30:4b:94:
                    22:b6:ba:ed:b3:74:45:06:5e:ec:08:e8:39:4d:aa:
                    35:4e:51:cc:ab:71:c0:4f:9a:f1:65:6f:28:52:74:
                    dc:c5:6b:52:00:ff:27:55:33:4f:5b:07:3b:e8:74:
                    21:00:90:1c:f1:1b:0d:4a:b9:39:4b:01:80:66:a0:
                    aa:3d:ba:bf:7b:7c:77:d7:55:05:c1:91:f2:c2:89:
                    03:a4:ef:ff:6f:e2:ac:d4:e7:14:18:26:80:01:c7:
                    67:f7:11:d7:a2:90:82:da:09:1f:38:b8:8a:d0:01:
                    fe:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9F:56:15:84:25:0E:73:A9:B9:0C:FF:D8:0B:3F:A4:9F:44:E2:2B
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a63313a3a2f34382d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:c1::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:f2:9f:b2:2d:ef:5f:7e:ec:93:4a:78:4a:db:28:35:16:00:
         0f:09:a4:2e:e0:69:b2:51:54:a6:dc:f0:73:80:cb:9d:bb:78:
         79:11:bc:46:15:6b:2a:69:ae:a3:b0:9b:cf:59:9c:f8:f8:85:
         0f:c6:28:4a:d6:7e:ce:8b:e3:69:d2:22:8b:57:b4:bf:b7:26:
         34:bb:a3:de:2b:28:b8:2c:5d:b0:57:28:94:17:e8:37:72:10:
         f1:da:17:84:9b:0a:94:3d:73:68:7e:a0:d1:a9:05:25:c1:68:
         9c:05:2f:09:bb:cb:6e:1d:26:a9:0a:0a:df:88:5c:04:ab:a5:
         68:5a:4c:4a:d6:ff:1a:e9:bb:6e:c0:58:a8:da:58:51:f2:b2:
         f2:36:9e:21:cf:1f:f9:11:c0:ec:ed:b4:90:e9:9a:da:6a:e4:
         89:da:a3:33:98:cb:76:2b:9c:b0:62:e2:99:e0:af:b9:86:e7:
         16:18:58:01:40:1d:dc:9c:7a:bb:88:e1:dd:54:f0:66:ce:d3:
         6d:8c:02:a8:15:f1:a3:c3:9a:24:d4:f7:67:e4:78:56:41:8e:
         b7:3d:58:e1:08:c4:92:9c:a4:04:fc:56:eb:53:6f:34:e3:94:
         e2:f4:9c:72:d0:b6:17:4d:14:8a:ab:bc:06:11:47:ed:b7:57:
         22:63:24:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:43:50 2025 by rpki-client