Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa
File:                     323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (raw, json)
Hash identifier:          tl8M/rg4fzRj4HcLbXbMPjG2fJQE/fLu0oqk+/bvTJ4=
Subject key identifier:   FC:3C:3B:45:06:F8:5F:BA:7E:CD:47:E1:E6:94:3B:7A:B3:BE:21:B5
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       2C1094A8B1E25F265454ABC1ED47E3E9C348EFD7
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa
Signing time:             Thu 17 Jul 2025 00:56:43 +0000
ROA not before:           Thu 17 Jul 2025 00:51:43 +0000
ROA not after:            Thu 16 Jul 2026 00:56:43 +0000
asID:                     208699
IP address blocks:        2602:f992:f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 18:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:10:94:a8:b1:e2:5f:26:54:54:ab:c1:ed:47:e3:e9:c3:48:ef:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Jul 17 00:51:43 2025 GMT
            Not After : Jul 16 00:56:43 2026 GMT
        Subject: CN=FC3C3B4506F85FBA7ECD47E1E6943B7AB3BE21B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:52:a6:a8:74:b3:04:92:42:75:b0:e6:5b:bf:
                    13:e2:61:b8:c3:71:e6:1a:0d:ae:ad:ae:b5:8d:9c:
                    f2:39:27:90:c8:66:c6:d9:8b:fd:8f:d6:3c:04:32:
                    3d:56:85:12:9b:08:47:c4:a5:f9:41:17:a9:4b:46:
                    2e:24:d5:75:d4:41:08:b1:89:0e:ee:fd:56:5b:f0:
                    b3:f0:71:63:92:1d:31:e1:f9:55:72:95:82:3d:6c:
                    ce:23:94:44:57:a8:db:b0:3c:23:55:0e:7f:6a:6f:
                    51:65:03:11:47:5d:fd:28:44:50:fa:90:7a:77:11:
                    7d:0b:ef:c4:35:f3:ec:96:5d:79:21:36:0f:66:92:
                    9f:ba:5a:f5:f1:5c:d5:bf:54:2f:0b:68:69:81:60:
                    f3:2a:b6:85:ca:c8:3e:cc:48:35:b9:0c:4b:db:90:
                    2b:1d:0a:32:25:3c:16:82:02:90:a3:40:b9:07:44:
                    f4:cc:b5:37:ef:ab:34:17:1d:ce:f0:b8:35:06:1a:
                    97:e1:8b:80:6d:80:e7:4a:03:1c:52:5c:47:be:49:
                    3e:70:9b:1a:dd:a6:35:99:eb:63:36:fa:dd:25:f4:
                    c7:ba:dc:2a:e1:ef:22:bf:82:0f:4c:5c:93:07:81:
                    89:f5:a1:9d:2f:65:db:36:31:67:49:f9:99:9c:d7:
                    b2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3C:3B:45:06:F8:5F:BA:7E:CD:47:E1:E6:94:3B:7A:B3:BE:21:B5
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f992:f4::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:53:82:bb:5e:2a:94:2b:6c:1c:1f:12:17:0c:70:8a:1c:2c:
         4d:2a:9c:25:57:3e:77:1e:6a:4c:41:0a:e2:10:51:d3:a3:24:
         1a:a1:d5:70:06:7e:4b:b4:55:c9:d0:b5:31:40:8b:77:b7:b1:
         a0:b5:1c:4a:cc:78:7d:59:1c:fa:c0:e8:e0:d5:6e:64:91:4f:
         e7:8f:3a:23:01:03:0f:c8:83:cb:cc:d4:dc:77:c2:35:0b:d1:
         c7:5a:e4:7d:63:0b:9f:9e:ac:eb:a5:a6:c6:e7:3b:0b:77:52:
         6b:aa:b5:8a:7c:bb:c2:17:7a:f5:8c:08:f6:1d:b8:8a:78:39:
         12:1f:c4:7e:72:91:d1:7a:f8:4a:a8:5d:4e:ac:82:01:63:e9:
         ea:e5:01:63:56:42:b0:1b:5c:c5:c9:6b:5c:a6:a0:f5:33:36:
         e1:55:5b:97:76:87:3e:b0:04:c0:33:27:82:f9:67:04:b5:e5:
         a0:ea:fb:3a:4f:42:49:20:5b:0e:67:d1:eb:31:0e:ee:6f:db:
         35:1e:ff:54:10:30:78:47:f9:25:cb:36:9f:0e:43:6b:91:7b:
         97:26:23:25:2f:98:88:90:74:02:3e:a8:e0:a8:0a:64:1b:ab:
         79:58:3c:85:e0:5e:50:56:23:65:27:47:9b:41:58:06:bc:df:
         56:c1:b4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:28:01 2025 by rpki-client