Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS215191.roa
File:                     AS215191.roa (raw, json)
Hash identifier:          UAolVZeA+uvxt9+DzUhLZPRTIgUG681oTXQt4b9Ownk=
Subject key identifier:   22:79:86:EC:1F:AE:F6:E5:B0:D3:DA:C4:BE:A6:E1:9D:34:AF:DF:FA
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       560FAE73A2A8E95146694D548886F26BFB105031
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS215191.roa
Signing time:             Tue 07 Jul 2026 20:35:40 +0000
ROA not before:           Tue 07 Jul 2026 20:30:40 +0000
ROA not after:            Tue 06 Jul 2027 20:35:40 +0000
asID:                     215191
IP address blocks:        2a0b:4e07:f0::/46 maxlen: 48
                          2a0b:4e07:ffc::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 Jul 2026 20:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0f:ae:73:a2:a8:e9:51:46:69:4d:54:88:86:f2:6b:fb:10:50:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Jul  7 20:30:40 2026 GMT
            Not After : Jul  6 20:35:40 2027 GMT
        Subject: CN=227986EC1FAEF6E5B0D3DAC4BEA6E19D34AFDFFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d8:36:6a:52:0d:6b:7e:1a:6d:95:11:bf:ba:
                    61:fa:92:25:81:80:77:ab:01:4f:b6:b8:e1:6d:e5:
                    bc:4a:3c:ce:09:1e:69:9e:d5:87:cf:8f:5f:0a:c7:
                    c9:71:db:aa:58:98:c9:b1:3a:b8:3d:35:36:ab:dc:
                    2d:d2:86:a6:34:13:07:69:ac:8f:fe:51:5d:1e:50:
                    26:9b:0e:ea:3b:a3:a1:25:57:cf:d8:8c:a8:a2:ca:
                    4d:d4:61:f4:64:5f:f6:0e:7b:64:62:5c:9e:88:31:
                    45:29:2b:0e:d0:e7:c7:31:8a:60:7f:8b:23:8a:8f:
                    a7:c0:c7:f7:97:91:eb:a0:71:aa:cd:df:7b:55:34:
                    92:02:23:f7:ca:1d:56:61:cd:68:9b:4c:72:4a:fc:
                    4f:14:f0:96:12:1d:2d:0e:02:bc:2f:37:4a:2f:ec:
                    c0:85:d5:9a:3d:df:dc:0d:d6:ce:5c:d2:0d:aa:8c:
                    59:dc:6f:c0:5f:0c:d9:23:2c:40:72:fb:92:e1:fb:
                    11:10:a6:a8:cf:21:94:0e:5e:84:da:55:00:39:c0:
                    f5:cb:f0:09:67:73:a2:1a:a8:f8:a6:49:ca:f6:a5:
                    ea:35:e8:ce:48:82:f8:46:01:33:df:fd:22:a1:d1:
                    35:eb:56:a2:56:d2:5d:d5:f0:c1:7e:5e:a8:54:03:
                    a5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:79:86:EC:1F:AE:F6:E5:B0:D3:DA:C4:BE:A6:E1:9D:34:AF:DF:FA
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS215191.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:f0::/46
                  2a0b:4e07:ffc::/46

    Signature Algorithm: sha256WithRSAEncryption
         15:8a:5b:7e:20:87:4b:28:ce:85:e4:b0:b3:1f:6e:22:f1:8d:
         34:a7:86:1a:e4:94:b5:bd:49:33:06:8a:8f:5c:72:a1:1a:07:
         11:b2:d7:63:13:e6:88:a6:81:5f:fe:c6:5e:c1:0c:e6:3c:b2:
         e7:50:c9:9b:ac:28:45:90:d7:52:37:f3:e4:8e:8c:d3:31:1a:
         09:79:84:23:c3:77:c4:74:12:cd:e0:11:d8:24:69:51:f3:1e:
         bd:d2:a9:4d:9a:19:1d:a8:f0:c4:e0:8d:04:ad:69:b8:7a:32:
         52:2e:ef:6b:b3:45:9b:2c:2d:a9:7a:ba:26:10:7d:77:74:1b:
         43:79:94:c4:27:15:dd:46:f5:92:6e:cb:b3:68:4b:2d:41:77:
         47:a8:60:c9:65:f8:3b:b9:63:30:2c:37:e9:b0:5b:41:da:95:
         57:c9:93:28:a5:9f:cf:27:a9:11:ad:58:81:4d:a9:a9:bf:74:
         09:4e:e4:c6:30:7f:b8:7a:6a:e8:b8:84:41:29:da:7c:40:61:
         1a:41:57:2a:c8:21:7b:d5:ea:23:12:d5:e2:70:c0:a3:b4:a1:
         66:86:67:97:b2:52:ad:5f:20:61:19:fc:58:ca:a5:f9:13:c5:
         3b:a4:c1:a3:a2:64:3b:57:ee:27:4b:70:89:b2:a7:e1:6e:0b:
         d4:4a:e6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 13:33:07 2026 by rpki-client