Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a313430303a3a2f33382d3438203d3e20323135303137.roa
File:                     326130623a346530373a313430303a3a2f33382d3438203d3e20323135303137.roa (raw, json)
Hash identifier:          I5Qb4b2fjEick9WzdUnvkGRb2SBXKryIO9NSUTWFqzU=
Subject key identifier:   2B:AF:A5:79:67:6F:02:DC:8E:CD:4F:70:F6:72:A7:ED:DD:A1:71:4C
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       7911015925F9FBA6A5760B25F56F58AE953BA688
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a313430303a3a2f33382d3438203d3e20323135303137.roa
Signing time:             Thu 25 Sep 2025 14:13:29 +0000
ROA not before:           Thu 25 Sep 2025 14:08:29 +0000
ROA not after:            Thu 24 Sep 2026 14:13:29 +0000
asID:                     215017
IP address blocks:        2a0b:4e07:1400::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:11:01:59:25:f9:fb:a6:a5:76:0b:25:f5:6f:58:ae:95:3b:a6:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Sep 25 14:08:29 2025 GMT
            Not After : Sep 24 14:13:29 2026 GMT
        Subject: CN=2BAFA579676F02DC8ECD4F70F672A7EDDDA1714C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ee:ab:c2:d4:73:4e:e3:83:29:ea:2a:04:d8:
                    37:46:86:ad:13:ba:b1:a0:18:83:03:80:e2:aa:b5:
                    7d:e5:b2:7f:eb:39:e5:22:07:95:53:ad:d0:98:2e:
                    62:f5:bc:e8:89:3c:5d:0a:67:42:75:13:28:05:d6:
                    b1:af:86:24:3d:1e:66:44:93:be:87:9b:69:ca:fd:
                    10:c3:f2:b4:d4:31:56:c0:86:fc:4f:3a:05:37:5f:
                    04:11:7f:74:f7:37:0a:12:c3:a5:b3:64:d6:ee:24:
                    78:2a:6c:41:9a:ad:2a:c2:01:e2:58:79:96:b2:4c:
                    00:7b:17:d9:2a:65:14:fd:85:af:27:92:f2:a2:49:
                    2c:14:dc:d5:a2:b8:ee:a9:dc:0b:35:26:55:70:c1:
                    5c:f1:75:a2:45:12:2c:b9:3f:92:d8:fd:00:f5:b1:
                    80:25:f9:91:c1:7f:cd:8a:59:c8:22:94:dd:f6:0f:
                    a7:8c:38:f5:34:67:81:12:64:75:8f:ad:52:13:22:
                    c2:e4:ba:01:64:e0:02:83:6f:6b:96:1e:e0:c3:ce:
                    6e:3a:ae:19:c7:6c:32:4f:af:42:20:0e:c3:35:8e:
                    17:b2:ef:19:d7:34:eb:ac:4d:7a:73:b1:3c:45:fc:
                    1a:2a:cf:d2:55:b4:d2:fc:0a:1b:29:ea:e0:d9:38:
                    1a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AF:A5:79:67:6F:02:DC:8E:CD:4F:70:F6:72:A7:ED:DD:A1:71:4C
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a313430303a3a2f33382d3438203d3e20323135303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:1400::/38

    Signature Algorithm: sha256WithRSAEncryption
         37:f1:57:0c:dc:69:a9:b8:90:e3:82:91:b0:85:4c:59:a0:a4:
         84:4a:a3:6c:f1:1f:4a:6f:31:a1:da:13:40:a8:4e:8d:66:26:
         d5:5a:8d:85:5c:9b:95:99:91:e8:dd:12:27:63:ca:63:d0:2a:
         a9:1f:c3:3a:82:65:a4:fc:8f:09:77:c0:9b:14:e1:f5:4a:f9:
         a9:fc:62:08:c8:b4:6e:8b:64:1e:96:a6:dd:ba:66:0b:af:34:
         14:d6:04:17:70:3c:98:1e:7f:0a:2b:cc:8a:72:cf:df:0d:39:
         74:bd:fc:25:e3:ac:89:7e:61:f6:45:6e:e2:5e:42:02:bb:79:
         10:45:cb:e5:7f:78:2c:fc:a9:f8:90:6d:03:45:bf:58:44:a0:
         34:c0:5d:bd:da:02:ae:8d:b5:dc:3e:f8:af:c8:7c:98:8e:aa:
         1e:81:ae:ea:2d:49:4f:24:b5:82:c3:a5:a8:af:c1:67:f0:9a:
         de:b8:63:85:17:dc:2b:e3:53:38:89:dd:2c:bd:03:d8:98:b9:
         e0:47:d8:87:e1:9c:ac:9c:6b:59:49:da:9a:a3:27:69:59:e2:
         01:33:c0:99:0f:5f:ce:da:21:a7:10:65:cf:1a:ae:38:69:fe:
         18:a4:45:78:ae:43:70:60:c4:98:52:d4:c9:52:a4:0a:b9:9f:
         f7:b2:63:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:26:18 2025 by rpki-client