Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6336383a3a2f34362d3436203d3e20323134383138.roa
File:                     326130623a346530373a6336383a3a2f34362d3436203d3e20323134383138.roa (raw, json)
Hash identifier:          H9TabbrhETm9ZMuQOABqPXgL18Kv4mJbj6ybi4PA/rg=
Subject key identifier:   90:B2:C6:78:4D:BC:AA:9B:90:73:32:52:DC:5E:49:1C:ED:73:BF:EB
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       128487834E2FD827654F67E34F57570246D19895
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6336383a3a2f34362d3436203d3e20323134383138.roa
Signing time:             Fri 11 Apr 2025 14:29:46 +0000
ROA not before:           Fri 11 Apr 2025 14:24:46 +0000
ROA not after:            Fri 10 Apr 2026 14:29:46 +0000
asID:                     214818
IP address blocks:        2a0b:4e07:c68::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 13:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:84:87:83:4e:2f:d8:27:65:4f:67:e3:4f:57:57:02:46:d1:98:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Apr 11 14:24:46 2025 GMT
            Not After : Apr 10 14:29:46 2026 GMT
        Subject: CN=90B2C6784DBCAA9B90733252DC5E491CED73BFEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f4:bb:25:5d:dc:cb:b7:00:41:cc:40:33:46:
                    23:25:f5:bd:81:99:24:c3:89:0d:98:61:6f:f5:89:
                    f9:23:2e:ff:48:f4:91:d1:c6:02:99:31:9d:85:6c:
                    ae:ff:a2:b6:ce:bf:00:47:e7:fc:7f:88:d4:fe:83:
                    eb:e7:92:71:32:83:90:a1:83:c6:b2:f4:75:e9:fc:
                    76:6e:1d:bf:13:b7:be:28:34:1e:ef:2b:5b:be:37:
                    19:42:ea:6e:bb:da:92:e2:d2:23:06:98:8b:af:15:
                    9e:54:75:d7:b9:01:93:20:98:e0:99:9e:55:6e:a8:
                    a8:73:40:81:b1:5f:6b:97:71:44:37:e2:c8:88:a6:
                    8c:c8:fc:f0:b5:41:30:d2:50:cf:43:3b:bb:8a:e0:
                    73:cc:2c:4b:bc:2a:ae:95:35:cd:3d:f1:c8:dc:42:
                    5c:f7:08:53:38:7e:20:85:36:52:76:cb:37:74:4d:
                    73:bb:fa:e8:cb:b3:93:47:86:af:24:d5:f6:6f:e3:
                    63:31:60:c1:b9:e3:cc:c1:c0:05:5d:ea:63:78:3b:
                    75:d8:73:c5:39:9d:c5:fb:0e:af:76:8a:45:10:25:
                    74:90:9a:2a:8e:b4:68:8a:67:93:3b:4f:5b:d5:d8:
                    e4:ec:34:ec:61:69:0e:72:47:6c:4b:a4:a1:aa:ea:
                    47:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B2:C6:78:4D:BC:AA:9B:90:73:32:52:DC:5E:49:1C:ED:73:BF:EB
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a6336383a3a2f34362d3436203d3e20323134383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:c68::/46

    Signature Algorithm: sha256WithRSAEncryption
         27:bb:56:f4:fe:94:ad:0e:bf:65:d6:21:62:f9:e0:4c:ec:3c:
         9f:d3:dd:24:cb:81:3f:b0:13:d0:43:6c:6e:58:58:26:f1:0a:
         46:55:96:f7:9c:0d:1b:ff:78:8e:cd:ae:a7:c3:d3:ea:71:21:
         ae:66:8e:d7:c0:f7:97:c3:08:07:8b:76:d9:d0:61:d5:59:c2:
         b8:e7:04:8f:bd:2f:b2:73:4a:57:8d:61:d0:4b:4e:6f:bd:b0:
         71:f7:f8:94:11:a7:15:ee:f9:62:28:b2:95:3c:0d:dc:8e:73:
         fd:cd:f1:92:b2:dd:fd:f7:d4:3d:65:75:59:8b:da:42:98:c6:
         03:01:89:5e:6b:73:23:88:7b:f1:f7:9c:d5:e9:80:21:dd:ce:
         b7:c7:2f:ce:a3:1e:63:97:b8:fe:f0:14:bf:26:0b:cb:00:4e:
         86:d4:ca:1e:d0:5c:19:51:3f:8b:a3:ad:8e:4f:40:41:0c:37:
         4f:b8:78:fc:d4:45:fc:ce:9c:bd:b0:c8:66:4c:46:a9:bc:1f:
         c6:4b:0d:5f:11:7b:8e:87:a1:c0:6e:f0:1b:cc:70:8c:73:97:
         1e:8e:c4:0c:47:7a:0d:bf:7c:b9:b8:2c:21:1e:51:d6:71:ff:
         e7:ae:90:72:50:09:56:75:2e:da:a4:58:2d:05:ba:48:6b:51:
         29:b2:2e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:24 2025 by rpki-client