Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a34333a3a2f34382d3438203d3e20323136303931.roa
File:                     326130623a346530373a34333a3a2f34382d3438203d3e20323136303931.roa (raw, json)
Hash identifier:          ApTqqzjvCoTMl4vE/D0HTTizI5XntkccsxRxJuLOQ4E=
Subject key identifier:   E9:A5:F7:35:ED:78:0D:AB:E7:F3:63:85:33:E7:8C:AD:98:9E:F3:47
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       51D4B8C01E6394C69497E6589CC36CAEB2D8AB9E
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a34333a3a2f34382d3438203d3e20323136303931.roa
Signing time:             Fri 26 Sep 2025 08:53:44 +0000
ROA not before:           Fri 26 Sep 2025 08:48:44 +0000
ROA not after:            Fri 25 Sep 2026 08:53:44 +0000
asID:                     216091
IP address blocks:        2a0b:4e07:43::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Oct 2025 09:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d4:b8:c0:1e:63:94:c6:94:97:e6:58:9c:c3:6c:ae:b2:d8:ab:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Sep 26 08:48:44 2025 GMT
            Not After : Sep 25 08:53:44 2026 GMT
        Subject: CN=E9A5F735ED780DABE7F3638533E78CAD989EF347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:33:e4:90:1c:8c:bb:dc:27:87:be:0e:7d:04:
                    86:39:55:18:44:c1:6b:09:bf:e2:ff:f6:c2:61:bb:
                    64:58:9f:45:89:16:d2:b4:86:d4:7a:1f:5b:41:fd:
                    b0:7d:61:85:82:04:4c:8a:4c:cf:64:30:d2:3d:f3:
                    4c:95:f3:33:20:66:d9:07:2d:bb:1d:97:14:39:0e:
                    76:b5:00:a2:46:29:6f:fe:4f:b9:b2:e6:ef:f0:97:
                    03:a6:2a:49:70:8e:0f:36:66:61:82:e9:2b:89:51:
                    c2:dc:41:b0:b6:fd:2d:21:95:31:da:aa:38:fc:54:
                    88:b4:82:a1:2d:8e:13:a6:01:fa:f5:8f:84:4e:fe:
                    f6:7c:46:67:2e:57:9a:0a:11:4b:a6:d5:d3:b2:fd:
                    03:d8:76:8a:10:1a:cf:3c:9b:30:23:67:fa:8f:90:
                    c0:23:d8:7e:f8:c6:e6:7a:20:da:be:cf:99:3f:87:
                    b8:12:a3:95:07:06:5d:92:2d:1c:95:8c:c3:84:7f:
                    1c:b9:7a:76:d6:1a:20:b9:24:9b:ca:0c:8e:38:18:
                    50:46:b1:7e:14:a0:38:86:53:bb:db:0e:1a:39:4c:
                    60:83:71:ab:41:8a:17:5f:21:32:03:21:1f:41:d9:
                    29:10:bd:10:bf:51:f6:e0:2a:82:81:2e:1e:f6:74:
                    90:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A5:F7:35:ED:78:0D:AB:E7:F3:63:85:33:E7:8C:AD:98:9E:F3:47
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a34333a3a2f34382d3438203d3e20323136303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:43::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:10:f1:0d:42:4b:df:3c:ed:00:f4:76:8c:3d:1b:29:bc:05:
         34:63:87:d4:21:78:fb:95:0f:9e:88:81:7c:59:07:37:3e:78:
         0a:ab:5c:84:ce:3a:ff:59:c6:aa:04:30:16:b2:d6:57:69:da:
         50:2b:3b:59:56:f2:c9:a5:7c:d2:0a:f0:e9:84:03:1a:ea:fe:
         35:27:a7:58:74:4f:74:88:1e:2e:74:9b:79:a8:ee:5a:fa:5b:
         48:d7:65:9e:f8:60:a8:2a:ed:7f:dc:41:3f:7f:77:51:b1:08:
         32:b1:f4:b6:05:db:b4:a5:e4:6e:6f:33:ee:2d:00:bb:4f:3b:
         ad:de:7a:06:26:8c:43:2e:cb:fa:64:a6:9d:e0:aa:e5:cc:f7:
         d3:47:f5:56:1a:55:84:b0:bb:77:43:2a:b4:03:3b:fe:95:ab:
         71:b9:32:f2:ec:c0:fe:8e:88:25:22:d2:f8:2b:0e:41:47:26:
         a5:7d:37:0e:0b:78:76:61:ce:05:b0:36:b9:0e:f2:22:9c:61:
         8c:51:55:f4:44:4d:9e:09:76:d4:1f:fa:5a:1d:b4:18:4c:68:
         46:79:34:b3:80:56:e9:ce:73:f5:74:c5:04:07:b0:80:3e:fc:
         ec:c7:64:6f:10:70:5a:57:4b:00:ba:18:da:68:93:1c:9e:0a:
         21:44:a0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 21:49:43 2025 by rpki-client