Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219367.roa
File:                     AS219367.roa (raw, json)
Hash identifier:          q9gNDuRtxco2XpZ/9vE7D5DLhJTl3Ky96dU/Id3HKZE=
Subject key identifier:   6F:CE:DA:2C:15:21:67:A9:2E:36:B9:AF:55:B1:82:03:63:B3:AE:B6
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       65BB54B3FE870E2869F7F665541440DE40149D66
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219367.roa
Signing time:             Fri 23 Oct 2026 21:08:25 +0000
ROA not before:           Fri 23 Oct 2026 21:03:25 +0000
ROA not after:            Fri 22 Oct 2027 21:08:25 +0000
asID:                     219367
IP address blocks:        2a0b:4e07:2f0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 22:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:bb:54:b3:fe:87:0e:28:69:f7:f6:65:54:14:40:de:40:14:9d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Oct 23 21:03:25 2026 GMT
            Not After : Oct 22 21:08:25 2027 GMT
        Subject: CN=6FCEDA2C152167A92E36B9AF55B1820363B3AEB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1e:a0:cc:93:12:41:be:9d:02:cc:f4:9c:c6:
                    ab:2f:ce:ee:69:99:ad:12:88:11:b0:e5:66:e2:c7:
                    0e:62:88:fe:ce:ea:ce:b6:a3:62:68:64:c3:28:9d:
                    0c:62:56:ee:18:37:72:33:42:40:8c:85:36:4f:97:
                    e2:3f:40:bf:fc:a7:df:38:cd:46:e0:06:0f:7e:89:
                    56:75:03:2c:2f:b4:16:b9:92:66:c2:6c:a6:72:96:
                    ce:2c:58:b7:6e:0a:00:7e:99:11:a4:ad:a9:b1:03:
                    12:3b:dd:f8:e1:3b:ce:d2:dc:b8:ba:2c:f9:72:33:
                    8f:27:88:76:c0:d4:39:22:2e:bd:20:2b:64:7f:76:
                    48:07:c7:28:cf:b5:7f:e0:f5:cb:5a:b0:88:77:91:
                    fa:4b:bd:37:98:4c:a4:70:f4:72:b0:78:8f:52:b1:
                    f5:5f:12:a4:99:02:16:b4:59:44:8f:8e:a5:78:4f:
                    c8:63:e5:c5:12:59:d8:22:e7:d1:2e:4e:8c:b1:6c:
                    3e:7d:dc:81:b7:c7:cd:5a:1c:7d:8b:86:0c:2e:a8:
                    50:c2:c3:e7:78:13:07:d8:7b:07:42:02:1b:55:32:
                    d7:d7:ef:d9:53:b6:11:38:28:b9:c0:03:73:27:98:
                    0a:8e:b4:11:31:97:06:26:bf:49:b9:50:ec:50:39:
                    a2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CE:DA:2C:15:21:67:A9:2E:36:B9:AF:55:B1:82:03:63:B3:AE:B6
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS219367.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:2f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         60:d6:06:28:6f:7e:4b:e2:da:6e:f5:29:d3:1d:20:fd:a4:3f:
         10:7e:a5:70:4c:f9:95:fd:c0:aa:1c:82:8d:da:a1:a9:ad:ab:
         07:68:a0:1e:49:f2:b2:3f:b6:8a:cf:e8:41:7b:bb:40:8d:95:
         63:d6:10:c5:49:f4:e8:7f:a4:a6:18:7e:c6:7c:ae:80:f8:75:
         bd:23:4e:4d:8f:a8:08:73:98:99:ca:e3:9c:e0:00:96:09:d5:
         af:dc:41:09:0f:e3:23:97:86:f2:e1:d4:a3:a4:f1:db:cc:bb:
         88:b4:1d:69:0a:60:ce:a9:32:79:3e:02:bd:50:73:e1:32:47:
         9b:b1:fe:af:91:df:ff:6e:54:92:3f:df:bc:0b:5c:aa:46:a8:
         00:b7:c8:06:c0:61:45:b5:d4:aa:e6:e2:bb:8d:ec:9b:df:db:
         ad:be:2b:b1:9e:51:7d:1d:e6:82:84:78:33:5b:0a:04:36:c8:
         0a:11:52:80:4c:19:44:82:6b:ca:47:aa:f0:2a:8c:a7:c7:e1:
         92:fc:dd:ac:0a:52:9d:55:6b:e2:84:50:76:9b:fb:aa:d8:6e:
         01:7c:55:08:39:87:8f:36:bd:34:a6:b5:53:9f:69:56:28:c1:
         a9:92:73:e2:91:db:34:5a:2a:62:d9:b1:04:43:bf:00:bb:3e:
         53:16:46:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:03:11 2026 by rpki-client