Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a383030303a3a2f33332d3438203d3e20323033303632.roa
File:                     326130623a346530373a383030303a3a2f33332d3438203d3e20323033303632.roa (raw, json)
Hash identifier:          frJGSTXBKFq45t74Y4qsdPJu9zCh9t34zdbRPCmvpog=
Subject key identifier:   44:12:CE:D9:8D:38:5B:B5:A2:A6:59:EA:20:8B:08:0F:84:01:F6:DD
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       45B52D3029EC59AE2210036C78A42071902C69B3
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a383030303a3a2f33332d3438203d3e20323033303632.roa
Signing time:             Thu 29 May 2025 12:47:28 +0000
ROA not before:           Thu 29 May 2025 12:42:28 +0000
ROA not after:            Thu 28 May 2026 12:47:28 +0000
asID:                     203062
IP address blocks:        2a0b:4e07:8000::/33 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:15:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b5:2d:30:29:ec:59:ae:22:10:03:6c:78:a4:20:71:90:2c:69:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: May 29 12:42:28 2025 GMT
            Not After : May 28 12:47:28 2026 GMT
        Subject: CN=4412CED98D385BB5A2A659EA208B080F8401F6DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:70:03:30:b1:47:ae:ea:ff:cc:54:83:ba:
                    aa:1e:7a:09:63:c3:f2:13:2f:2c:37:35:1c:f9:29:
                    42:5c:dc:e0:44:e4:00:b8:f7:eb:01:01:ba:a5:b5:
                    ab:a9:2b:3a:bf:1c:f1:99:8b:9c:31:fb:d3:e5:21:
                    46:69:c4:37:01:4c:ce:52:53:b8:93:fb:34:f4:5a:
                    10:75:83:72:45:d1:55:a8:8f:cf:58:56:a1:25:c2:
                    ad:cc:8b:5a:6a:6c:33:1f:3c:e2:ae:79:42:8b:b1:
                    e4:71:3c:80:40:b9:85:a4:c8:d8:49:f2:0c:06:f9:
                    26:8f:44:f3:6b:6b:43:d5:d8:e6:30:6d:7e:95:3f:
                    da:3e:a4:80:85:da:1d:6c:f7:6a:48:00:0e:66:25:
                    9d:ef:d4:9c:08:2b:4d:59:2f:06:66:68:42:e7:93:
                    b2:84:94:2a:1b:79:2c:ba:ef:1f:b9:d2:e6:82:0d:
                    42:d5:2b:29:4b:e2:70:a6:c9:89:e2:37:a8:da:f3:
                    f5:7c:07:20:72:53:31:df:7b:f6:6b:f9:cd:e0:4e:
                    08:9d:db:fb:d0:f3:9e:a9:5f:e8:ee:61:fb:74:e6:
                    bc:ca:b3:99:ed:d3:a0:46:12:27:da:a9:69:67:d7:
                    da:b1:60:82:e5:01:f5:0b:5b:a3:73:93:15:b4:6f:
                    7b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:12:CE:D9:8D:38:5B:B5:A2:A6:59:EA:20:8B:08:0F:84:01:F6:DD
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a383030303a3a2f33332d3438203d3e20323033303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         29:ad:b1:6f:5f:c5:8a:1c:c8:fc:1c:6a:10:68:8f:ef:24:59:
         65:58:e5:28:36:b8:a3:f8:99:0f:f7:49:95:47:c2:30:e5:d6:
         13:eb:f7:5b:0d:96:ab:e2:69:8a:47:83:ac:91:bf:69:9b:b2:
         a3:07:83:a4:1c:62:6a:49:d2:a9:60:35:99:4f:9b:86:04:77:
         4c:8d:5e:a5:e1:c1:2c:7f:53:3f:70:b0:e4:05:95:45:05:26:
         37:c7:4c:50:ed:2d:ba:09:2a:12:5f:71:3c:87:bb:20:e1:d7:
         63:07:cd:db:cb:6b:6f:65:6d:38:3a:75:eb:81:37:4b:42:bb:
         56:41:c3:fc:0a:49:d8:de:79:8a:7e:83:8b:9e:e4:65:81:9e:
         57:fa:7a:94:81:0a:ac:90:83:dc:a6:e4:d2:f6:18:26:e0:ea:
         e9:73:c5:ad:39:c4:ff:d1:c3:bd:f2:61:f3:61:c8:e5:9d:8e:
         78:18:cd:f2:6f:6e:61:6e:80:f6:f7:dc:8f:03:99:4b:76:c0:
         e7:c4:0c:19:40:70:2d:a9:2a:6c:88:8e:fb:b7:43:2a:7a:c2:
         79:bd:ed:74:c9:11:58:ec:50:ba:fb:77:3d:00:8d:04:0f:22:
         39:20:5d:90:52:cb:f6:a4:7b:53:70:c0:2f:ea:49:c9:a6:60:
         85:f6:97:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:37:31 2025 by rpki-client