Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a343a3a2f34362d3436203d3e203539343439.roa
File:                     326130623a346530373a343a3a2f34362d3436203d3e203539343439.roa (raw, json)
Hash identifier:          HgNyX1SJXZh8XHd84aF7CinnCggcUL1Lq7Dvuxhy0Qg=
Subject key identifier:   71:F6:83:22:08:B2:35:47:5F:37:C3:CC:9B:06:3C:4B:16:A8:19:FF
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       4EA80D33E1CC46C4287BD8E04D4770C66EAB9A6A
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a343a3a2f34362d3436203d3e203539343439.roa
Signing time:             Fri 11 Apr 2025 14:27:56 +0000
ROA not before:           Fri 11 Apr 2025 14:22:56 +0000
ROA not after:            Fri 10 Apr 2026 14:27:56 +0000
asID:                     59449
IP address blocks:        2a0b:4e07:4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 13:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a8:0d:33:e1:cc:46:c4:28:7b:d8:e0:4d:47:70:c6:6e:ab:9a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Apr 11 14:22:56 2025 GMT
            Not After : Apr 10 14:27:56 2026 GMT
        Subject: CN=71F6832208B235475F37C3CC9B063C4B16A819FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:90:2d:28:fc:65:3c:58:33:ea:ed:e6:4a:87:
                    cc:2c:b8:4f:01:7d:0a:5c:cd:70:d6:16:be:8c:23:
                    46:e7:b1:43:d6:cf:d2:5a:9f:85:48:d4:fe:03:69:
                    6f:89:db:f3:bf:a6:12:bf:ae:a3:c4:f1:3c:e2:6a:
                    b4:16:28:24:3a:1d:a1:f7:61:e8:3a:16:3a:ea:92:
                    3e:f5:ae:04:c3:d6:da:fe:ce:2b:dc:4b:2c:84:26:
                    aa:40:b7:c3:af:36:9c:14:ef:12:5c:bc:e3:60:28:
                    7d:79:0c:80:bf:89:e8:14:58:68:09:0c:a6:4f:2e:
                    93:18:84:84:d7:33:72:aa:52:43:1f:e4:ad:a3:04:
                    f6:db:d5:b2:7a:c1:75:44:bd:60:0a:db:1e:32:86:
                    24:71:8a:a6:64:04:f1:a0:01:7d:ad:93:63:4b:58:
                    13:5c:c1:8a:f3:3a:bd:5a:09:5b:9b:0b:27:5c:b7:
                    f5:3f:54:32:b7:8b:22:9d:a9:c5:95:68:97:eb:15:
                    46:b5:79:d9:a0:13:5f:4a:b2:10:cb:7e:d8:0a:db:
                    25:24:b7:12:ab:07:eb:a6:7b:18:45:ae:ae:17:4a:
                    4c:a7:d0:0f:21:82:2f:23:c0:d8:4b:fb:2a:20:6f:
                    63:94:ec:b4:9c:18:cb:97:ee:3f:ec:d5:e4:6b:e5:
                    9b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F6:83:22:08:B2:35:47:5F:37:C3:CC:9B:06:3C:4B:16:A8:19:FF
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a343a3a2f34362d3436203d3e203539343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:4::/46

    Signature Algorithm: sha256WithRSAEncryption
         85:f0:2c:b8:27:08:d1:cb:43:2f:4d:dc:b2:72:43:64:f4:20:
         a3:57:e5:4f:db:07:ce:8f:6b:eb:88:24:33:2a:66:f2:8f:6f:
         84:01:4e:b7:f7:db:c3:a4:10:1e:04:87:c0:57:e1:40:7c:bf:
         32:b3:7e:9a:59:71:20:14:46:5e:65:7f:c8:04:a4:57:ee:6b:
         fe:80:f7:a2:1e:17:33:3f:75:8a:50:98:e1:e5:52:6b:d7:13:
         b0:1e:37:81:8e:05:02:04:9d:87:37:4f:16:d5:40:c9:99:cd:
         12:8c:8c:fa:8b:ba:b5:b3:15:56:c4:7e:82:0c:69:ec:1d:e1:
         1e:12:b6:e0:32:1a:f8:89:ef:a9:e9:4d:8c:8d:bc:16:a1:cd:
         bb:6c:1d:75:f0:f4:ef:d3:d2:1f:ab:fd:02:44:9a:a9:fa:4b:
         39:a6:a4:cf:d8:56:4a:34:5a:9e:95:0c:23:a2:5c:8b:6a:91:
         50:db:08:e0:c3:2f:4f:1b:51:c4:75:e0:03:4b:06:dd:66:e3:
         a7:6a:6a:de:50:f1:20:2d:f0:9c:cb:30:34:65:e6:e7:6f:88:
         07:78:52:59:b4:56:b9:c8:40:35:69:d0:ae:46:48:e8:7f:27:
         22:00:5c:59:43:55:92:b7:7b:cc:23:b2:43:a4:ad:26:6b:5e:
         ae:5b:3f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:02:56 2025 by rpki-client