Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32613a3a2f34382d3438203d3e20323031323639.roa
File:                     326130623a346530373a32613a3a2f34382d3438203d3e20323031323639.roa (raw, json)
Hash identifier:          hENv7xgt/1aNvbUD/peORLX4Mt+jXnnWCHRp7YOM07I=
Subject key identifier:   1C:A7:72:B0:02:56:F0:A5:30:1E:FB:26:93:FC:EC:66:BC:55:24:52
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       4642117B3D7FDEC33E0239CF443E4F063B80EA59
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32613a3a2f34382d3438203d3e20323031323639.roa
Signing time:             Tue 10 Feb 2026 14:31:42 +0000
ROA not before:           Tue 10 Feb 2026 14:26:42 +0000
ROA not after:            Tue 09 Feb 2027 14:31:42 +0000
asID:                     201269
IP address blocks:        2a0b:4e07:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Feb 2026 18:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:42:11:7b:3d:7f:de:c3:3e:02:39:cf:44:3e:4f:06:3b:80:ea:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Feb 10 14:26:42 2026 GMT
            Not After : Feb  9 14:31:42 2027 GMT
        Subject: CN=1CA772B00256F0A5301EFB2693FCEC66BC552452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:a7:35:4f:e9:1b:7e:30:cd:64:ac:df:3a:
                    ce:e8:c1:fd:e8:eb:46:15:aa:ed:dd:41:b7:18:21:
                    c2:96:c6:59:e9:80:d9:7a:3c:7b:8d:f3:0a:dc:11:
                    41:cc:6b:26:76:18:1b:31:1d:50:6a:17:18:1a:38:
                    13:34:b6:d9:39:6d:fb:8f:61:f1:93:4a:cf:f0:ef:
                    50:01:25:da:01:b4:f1:e8:c5:55:41:65:f5:3e:80:
                    45:98:68:b1:c4:35:8e:85:3a:f4:1f:bc:c0:53:21:
                    f0:d9:08:3c:ec:43:81:45:f9:89:34:01:a9:f7:bf:
                    42:53:21:dd:dc:8f:f2:4d:17:67:49:ec:76:63:9f:
                    67:ce:54:2a:16:8c:bb:78:72:fa:d9:22:cc:13:46:
                    e9:52:09:d9:d8:59:96:f6:b8:8f:36:14:20:6d:7b:
                    f6:f6:d9:e6:19:5f:9b:21:17:f4:5a:f8:d5:51:0f:
                    02:75:bc:19:a3:a5:52:a5:73:e4:17:84:b0:c9:80:
                    d2:cd:df:ab:99:2f:8e:0b:2a:46:d7:46:93:ac:9f:
                    5d:eb:0f:b6:2d:26:ca:97:bb:92:70:f8:7f:3a:f9:
                    8f:93:16:55:07:c1:16:00:0a:6c:60:bf:0e:97:7e:
                    f4:46:96:28:8c:26:63:d2:80:6f:0d:24:e2:ff:5f:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A7:72:B0:02:56:F0:A5:30:1E:FB:26:93:FC:EC:66:BC:55:24:52
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32613a3a2f34382d3438203d3e20323031323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:bb:51:40:4d:3e:76:03:b7:4c:6b:1c:41:d0:40:c7:bf:5b:
         91:42:f1:4f:f1:a2:a4:98:28:48:c1:f5:53:b9:69:02:c4:24:
         c5:26:55:6d:9e:05:ae:69:2c:7d:91:3d:80:ce:80:0c:39:5a:
         1c:fc:c4:46:98:40:64:6f:a3:33:0f:06:7f:db:a0:0a:8a:e1:
         33:47:1a:8d:c3:6c:e5:78:1a:56:cc:ea:a4:86:59:d6:c7:e3:
         7c:1b:a0:9a:f0:c5:bf:11:d5:5d:4f:d6:95:a1:69:63:68:d0:
         93:d5:d6:6e:75:cf:c6:b9:fa:24:7e:7d:6d:b9:89:c4:34:55:
         ac:a6:9c:26:21:df:f2:0f:20:aa:74:41:09:46:60:27:3f:7c:
         10:d8:b3:47:2b:b3:35:ad:65:d3:39:0a:54:5f:c1:0f:43:6f:
         ed:d2:65:81:10:c1:3b:fc:bd:cf:9d:35:80:f6:31:38:1f:4b:
         72:48:86:29:9c:9c:98:67:5c:d6:3e:1c:b8:f8:f0:50:39:4d:
         64:1e:32:15:32:61:e8:e4:a1:ec:df:43:be:99:cd:a6:44:fb:
         c8:24:13:cb:61:73:de:53:00:ad:e4:c7:eb:1a:dd:33:5f:a4:
         c9:bb:ae:dc:01:29:39:e9:25:b5:cc:b9:25:6a:e5:ee:6e:f4:
         a2:63:ad:fa
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgIURkIRez1/3sM+AjnPRD5PBjuA6lkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1
Qzk3NzhCRjAeFw0yNjAyMTAxNDI2NDJaFw0yNzAyMDkxNDMxNDJaMDMxMTAvBgNV
BAMTKDFDQTc3MkIwMDI1NkYwQTUzMDFFRkIyNjkzRkNFQzY2QkM1NTI0NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzGqc1T+kbfjDNZKzfOs7owf3o
60YVqu3dQbcYIcKWxlnpgNl6PHuN8wrcEUHMayZ2GBsxHVBqFxgaOBM0ttk5bfuP
YfGTSs/w71ABJdoBtPHoxVVBZfU+gEWYaLHENY6FOvQfvMBTIfDZCDzsQ4FF+Yk0
Aan3v0JTId3cj/JNF2dJ7HZjn2fOVCoWjLt4cvrZIswTRulSCdnYWZb2uI82FCBt
e/b22eYZX5shF/Ra+NVRDwJ1vBmjpVKlc+QXhLDJgNLN36uZL44LKkbXRpOsn13r
D7YtJsqXu5Jw+H86+Y+TFlUHwRYACmxgvw6XfvRGliiMJmPSgG8NJOL/Xzr1AgMB
AAGjggJmMIICYjAdBgNVHQ4EFgQUHKdysAJW8KUwHvsmk/zsZrxVJFIwHwYDVR0j
BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG
QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4
MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu
Y2VyMIGoBggrBgEFBQcBCwSBmzCBmDCBlQYIKwYBBQUHMAuGgYhyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl
ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTMyNjEzYTNhMmYzNDM4
MmQzNDM4MjAzZDNlMjAzMjMwMzEzMjM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HACowDQYJ
KoZIhvcNAQELBQADggEBADO7UUBNPnYDt0xrHEHQQMe/W5FC8U/xoqSYKEjB9VO5
aQLEJMUmVW2eBa5pLH2RPYDOgAw5Whz8xEaYQGRvozMPBn/boAqK4TNHGo3DbOV4
GlbM6qSGWdbH43wboJrwxb8R1V1P1pWhaWNo0JPV1m51z8a5+iR+fW25icQ0Vaym
nCYh3/IPIKp0QQlGYCc/fBDYs0crszWtZdM5ClRfwQ9Db+3SZYEQwTv8vc+dNYD2
MTgfS3JIhimcnJhnXNY+HLj48FA5TWQeMhUyYejkoezfQ76ZzaZE+8gkE8thc95T
AK3kx+sa3TNfpMm7rtwBKTnpJbXMuSVq5e5u9KJjrfo=
-----END CERTIFICATE-----
Generated at Mon Feb 23 08:49:08 2026 by rpki-client