Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32353a3a2f34382d3438203d3e203131393637.roa
File:                     326130623a346530373a32353a3a2f34382d3438203d3e203131393637.roa (raw, json)
Hash identifier:          zuSkGyOnJKX4f1z0AJOwwRYX12/W8EE5bKRMBC8oEr8=
Subject key identifier:   99:FB:03:E3:C4:25:41:57:EC:69:5D:C6:10:00:AB:D1:83:D4:48:1E
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       5543410C939425A126A2453FFD458E339178A10E
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32353a3a2f34382d3438203d3e203131393637.roa
Signing time:             Wed 15 Oct 2025 20:44:43 +0000
ROA not before:           Wed 15 Oct 2025 20:39:43 +0000
ROA not after:            Wed 14 Oct 2026 20:44:43 +0000
asID:                     11967
IP address blocks:        2a0b:4e07:25::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Oct 2025 04:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:43:41:0c:93:94:25:a1:26:a2:45:3f:fd:45:8e:33:91:78:a1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Oct 15 20:39:43 2025 GMT
            Not After : Oct 14 20:44:43 2026 GMT
        Subject: CN=99FB03E3C4254157EC695DC61000ABD183D4481E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:a9:c7:1d:d8:45:ed:b0:8b:9f:0f:70:fb:
                    92:2b:53:96:69:9b:09:86:d7:66:1e:ba:42:34:c7:
                    17:b6:b6:86:3a:da:84:fc:3e:e6:af:80:1e:8b:f4:
                    72:86:42:13:cc:20:8d:05:ce:a2:64:6e:05:72:33:
                    b1:d9:10:29:43:27:67:4b:ce:76:d6:83:77:a6:f5:
                    90:b3:1d:51:52:e9:9a:d6:3e:1b:0f:23:7f:03:62:
                    a1:82:dc:67:85:bd:b5:e1:ed:df:3e:62:ff:b4:43:
                    9d:e1:80:a1:5b:f4:f1:f1:eb:f5:1a:0e:48:97:b6:
                    43:bb:d2:c0:18:27:d2:13:f5:bc:1f:97:72:0e:54:
                    ec:ed:da:41:c7:ec:f7:b9:c6:36:20:5e:2e:8d:f2:
                    04:e5:b4:da:89:21:03:bb:be:80:b9:e1:a2:5b:67:
                    45:e0:24:1b:70:bd:e9:32:22:47:2f:71:88:0a:15:
                    d2:c4:cf:f2:4c:d0:c0:0b:a5:9f:d0:d6:b2:a6:65:
                    b1:a7:33:a1:5f:88:6a:be:7b:f7:be:94:46:11:eb:
                    1b:9a:e5:c2:d7:a5:41:f7:40:52:f2:e2:4b:ad:52:
                    0a:3d:b2:49:91:e4:35:45:4e:d7:d0:9f:2c:bc:e6:
                    f3:b3:98:a7:11:b2:78:ad:c4:8d:96:f0:bb:1b:26:
                    26:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FB:03:E3:C4:25:41:57:EC:69:5D:C6:10:00:AB:D1:83:D4:48:1E
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32353a3a2f34382d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:25::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:60:11:f4:49:a4:d6:ad:15:aa:48:bf:eb:24:84:43:5d:10:
         b5:ca:bf:a5:46:24:c4:51:0d:61:fe:51:75:57:4f:9b:25:c9:
         8c:df:27:43:f9:27:19:de:de:49:c9:92:eb:eb:d0:ad:78:20:
         53:12:6e:bf:8c:29:4e:1e:84:e2:16:e9:75:6c:91:58:f6:f5:
         c5:d9:5a:22:75:5f:95:c3:95:b4:66:12:09:66:4c:c4:95:eb:
         96:ef:cc:d4:ad:48:7f:44:8f:c5:f7:7c:e8:bc:42:18:f9:97:
         a7:4e:f6:51:31:db:38:a0:81:bd:24:d8:e8:c2:8e:61:e4:12:
         57:14:13:4f:2e:72:ec:1d:f2:aa:3b:d3:a8:64:88:89:a9:38:
         f8:a3:56:97:b9:7f:0a:83:46:7f:6c:ff:5e:94:34:b5:d0:54:
         21:77:b5:29:ba:30:96:23:67:de:1f:34:b8:8c:12:6e:7f:0e:
         e3:11:38:12:63:52:b1:ff:76:fc:f2:7b:71:8b:43:4a:f2:9f:
         73:b8:6c:bb:84:87:55:59:f4:ad:75:a4:fd:74:a9:20:2e:a4:
         21:0e:cb:2d:12:70:82:8b:14:a0:dc:0d:5c:87:f6:b1:63:a6:
         f2:3c:01:80:e8:06:f2:7b:81:2f:a6:53:72:7b:3e:f1:a6:9c:
         d0:10:16:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 13:49:56 2025 by rpki-client