Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a37303a3a2f34342d3438203d3e20323134363330.roa
File:                     326130623a346530373a37303a3a2f34342d3438203d3e20323134363330.roa (raw, json)
Hash identifier:          0f1eO5N7MLYP2s/I5dkRxsoJZYBXeGLVc6N+uQQFQR8=
Subject key identifier:   83:1A:B2:DD:ED:0A:D6:D8:79:F2:87:6D:27:AA:2A:CF:FD:8F:BD:8B
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       6CD7ADFA8C9798FEE9ACC33B8CA2DEDC08AAE5E4
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a37303a3a2f34342d3438203d3e20323134363330.roa
Signing time:             Fri 26 Sep 2025 09:34:53 +0000
ROA not before:           Fri 26 Sep 2025 09:29:53 +0000
ROA not after:            Fri 25 Sep 2026 09:34:53 +0000
asID:                     214630
IP address blocks:        2a0b:4e07:70::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 13:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d7:ad:fa:8c:97:98:fe:e9:ac:c3:3b:8c:a2:de:dc:08:aa:e5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Sep 26 09:29:53 2025 GMT
            Not After : Sep 25 09:34:53 2026 GMT
        Subject: CN=831AB2DDED0AD6D879F2876D27AA2ACFFD8FBD8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:23:04:ec:a1:83:7a:65:90:d8:d3:5c:89:
                    19:55:da:5f:61:ed:1c:59:73:07:f0:e7:1f:f0:bf:
                    ec:c5:ae:2c:72:06:27:95:d5:40:66:96:5b:25:be:
                    51:18:5c:41:a1:d2:e2:b1:96:cf:75:ca:c1:07:6f:
                    43:cf:d4:de:af:b6:d0:bd:ac:60:07:de:23:ac:66:
                    18:2a:c4:ff:5c:8a:33:88:f0:30:3f:f6:68:6d:0b:
                    fb:1b:4c:0f:a2:80:b1:fb:51:eb:f1:f5:9b:22:be:
                    f7:11:32:15:d1:9f:6a:51:b6:08:97:ee:4e:8d:c6:
                    a5:fa:50:b9:45:3b:38:e0:21:bc:ef:74:45:d5:96:
                    18:38:73:da:69:26:b4:f4:78:5a:a0:79:6b:68:7b:
                    f8:6a:65:82:fc:3d:84:e8:c0:b1:77:76:c1:4e:ac:
                    fc:ce:b0:7f:f0:3b:0c:0d:f4:81:94:77:39:5b:45:
                    d9:be:0f:10:1d:d8:29:a1:15:2a:c2:33:a5:0a:a0:
                    a6:9e:ed:43:81:2a:d5:0e:85:37:d9:c2:df:ad:3a:
                    6f:2d:de:c5:8d:13:88:22:45:50:2c:40:68:11:4f:
                    dc:6f:ca:d8:db:89:3e:1d:c1:3b:0a:89:c3:ca:37:
                    0d:32:59:21:11:b9:32:36:1e:52:bc:aa:4c:6a:9b:
                    0c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1A:B2:DD:ED:0A:D6:D8:79:F2:87:6D:27:AA:2A:CF:FD:8F:BD:8B
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a37303a3a2f34342d3438203d3e20323134363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:70::/44

    Signature Algorithm: sha256WithRSAEncryption
         53:db:84:8d:93:31:4c:bb:66:a9:a4:e3:52:21:f9:50:35:02:
         a8:0c:ae:cf:47:31:05:03:5e:af:46:34:c1:ef:e4:be:78:3f:
         94:28:24:5f:d9:5f:bf:b2:59:fc:b4:b5:b9:ba:38:35:82:79:
         14:83:14:75:59:12:33:a9:74:82:76:dc:d0:77:71:60:ee:08:
         d4:2b:e0:6b:9b:bb:7e:96:aa:a4:1f:08:a1:f1:9a:1c:ce:41:
         75:8d:46:f0:bb:29:0a:a7:dd:b3:d7:4c:14:ba:9f:ee:81:af:
         59:c0:2e:a8:69:d8:f2:a1:8a:59:56:33:9a:b7:72:28:7f:9f:
         6c:90:31:14:30:32:57:02:8c:1f:ef:56:31:71:bf:61:25:67:
         bb:8c:3f:a4:52:d4:76:64:50:e4:03:d4:f3:3c:11:e0:d1:17:
         c7:68:b7:05:ef:a9:95:87:7f:23:60:b0:e2:c1:f4:a6:f3:98:
         d5:5c:ad:0e:87:ac:70:ef:dd:47:de:bd:59:21:3c:a8:1c:b9:
         1a:b9:81:e1:57:5f:d1:78:6e:09:90:62:c1:69:08:49:dd:76:
         2a:1e:dc:86:10:48:8a:32:ba:6b:f6:83:56:3a:1c:79:8b:36:
         ab:b1:7f:27:57:b1:ce:60:de:d5:7b:c1:d7:2b:69:5c:17:ee:
         78:71:91:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:54:05 2025 by rpki-client