Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/326130623a346530373a356430303a3a2f34302d3438203d3e20323132333332.roa
File:                     326130623a346530373a356430303a3a2f34302d3438203d3e20323132333332.roa (raw, json)
Hash identifier:          cNvKxczcwJFS3GJIH6EumSrLueC7ahvzZOsrg7sLbR4=
Subject key identifier:   03:AC:40:6C:1F:E8:B3:6E:23:C7:B5:38:5D:11:82:79:FF:7B:DB:82
Certificate issuer:       /CN=99EA551918C05BC3D918A731137DF0B86224F868
Certificate serial:       128722723695C24BDB6688407221D34DF86E43EB
Authority key identifier: 99:EA:55:19:18:C0:5B:C3:D9:18:A7:31:13:7D:F0:B8:62:24:F8:68
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/99EA551918C05BC3D918A731137DF0B86224F868.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/326130623a346530373a356430303a3a2f34302d3438203d3e20323132333332.roa
Signing time:             Mon 12 Oct 2026 20:14:40 +0000
ROA not before:           Mon 12 Oct 2026 20:09:40 +0000
ROA not after:            Mon 11 Oct 2027 20:14:40 +0000
asID:                     212332
IP address blocks:        2a0b:4e07:5d00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/99EA551918C05BC3D918A731137DF0B86224F868.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/99EA551918C05BC3D918A731137DF0B86224F868.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/99EA551918C05BC3D918A731137DF0B86224F868.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 13:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:87:22:72:36:95:c2:4b:db:66:88:40:72:21:d3:4d:f8:6e:43:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99EA551918C05BC3D918A731137DF0B86224F868
        Validity
            Not Before: Oct 12 20:09:40 2026 GMT
            Not After : Oct 11 20:14:40 2027 GMT
        Subject: CN=03AC406C1FE8B36E23C7B5385D118279FF7BDB82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:69:03:28:7e:d0:2c:10:ec:48:34:fb:29:5b:
                    b9:5e:93:90:7a:aa:1f:36:6f:8f:03:99:78:67:47:
                    b2:6c:15:28:a6:ee:8e:01:90:15:36:47:52:30:d3:
                    07:30:68:34:81:7f:83:92:3f:c2:8b:f2:a2:48:b4:
                    12:94:a7:d2:5a:d6:ed:57:f1:a0:de:54:a1:11:e4:
                    b1:b9:5e:e4:62:c2:04:54:c9:0c:05:23:dd:fb:58:
                    b9:15:c6:44:47:fa:6c:30:1d:d8:40:44:23:cb:67:
                    8f:b6:5a:d9:62:fe:bd:0b:9d:ef:f1:e5:b5:3a:dd:
                    7e:9b:2a:9e:84:4b:5e:e2:c5:6b:75:6c:25:39:14:
                    4d:07:38:8d:ce:ae:0f:a4:14:ee:8d:93:57:e9:5a:
                    8d:e7:bb:e3:5b:d0:d1:21:7c:b7:45:bf:2c:b5:42:
                    57:df:fb:2f:44:a5:75:cb:5f:33:f0:1c:5d:37:0b:
                    19:bf:3f:95:da:72:4c:1c:38:96:d0:87:27:15:8c:
                    85:e2:e1:9e:c8:28:62:bc:07:a1:77:23:6a:48:09:
                    e0:7c:f1:2b:28:41:88:36:36:98:97:a4:bb:1d:c5:
                    95:4a:e0:46:83:db:6f:16:76:a7:db:4c:0e:fa:1c:
                    1b:90:4f:28:ec:92:cb:2e:74:29:ef:22:67:b1:d8:
                    3a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AC:40:6C:1F:E8:B3:6E:23:C7:B5:38:5D:11:82:79:FF:7B:DB:82
            X509v3 Authority Key Identifier:
                keyid:99:EA:55:19:18:C0:5B:C3:D9:18:A7:31:13:7D:F0:B8:62:24:F8:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/99EA551918C05BC3D918A731137DF0B86224F868.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/99EA551918C05BC3D918A731137DF0B86224F868.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/326130623a346530373a356430303a3a2f34302d3438203d3e20323132333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:5d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:0f:b9:d1:3b:2f:ab:c1:8d:43:3e:c7:5f:81:fd:13:1c:0f:
         d3:a6:74:2e:08:1c:76:d7:16:73:3d:ee:c8:81:30:80:95:63:
         d8:28:b0:58:c7:c0:60:2f:22:f8:77:de:e9:4d:b0:fb:31:26:
         40:1c:23:d5:44:11:76:18:b7:0e:df:75:e0:69:7f:22:a7:7d:
         cf:1f:4b:6a:e9:c2:79:09:a1:38:55:5a:6f:92:98:28:8c:a3:
         e1:62:99:e8:97:ae:2c:2b:8c:6b:6d:61:5b:2d:f3:04:43:e0:
         76:4b:bf:0d:80:a1:92:74:12:93:da:82:8b:f8:40:46:c1:af:
         75:35:b2:2e:eb:f3:6b:6d:5a:17:94:bc:b1:a7:a9:2d:d3:70:
         85:24:5a:76:f6:89:7b:6d:15:d9:53:d5:a8:50:71:a2:fe:e4:
         6d:d5:2f:ae:0d:7c:5d:54:50:d8:70:a6:db:07:61:bd:ac:1b:
         68:78:22:30:81:21:f8:75:05:76:d1:fc:c4:0b:bd:ca:9f:68:
         fc:0d:fc:3b:7e:55:ea:c3:48:71:2a:a8:67:6c:9d:d6:0c:a4:
         5f:8f:6b:40:7b:9a:49:0f:fb:b1:7f:d5:09:8d:72:e2:8f:2f:
         39:aa:34:65:4a:71:d2:e2:96:cd:ec:5e:b8:5b:e8:11:50:48:
         06:ec:e5:08
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUEocicjaVwkvbZohAciHTTfhuQ+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlFQTU1MTkxOEMwNUJDM0Q5MThBNzMxMTM3REYwQjg2
MjI0Rjg2ODAeFw0yNjEwMTIyMDA5NDBaFw0yNzEwMTEyMDE0NDBaMDMxMTAvBgNV
BAMTKDAzQUM0MDZDMUZFOEIzNkUyM0M3QjUzODVEMTE4Mjc5RkY3QkRCODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbaQMoftAsEOxINPspW7lek5B6
qh82b48DmXhnR7JsFSim7o4BkBU2R1Iw0wcwaDSBf4OSP8KL8qJItBKUp9Ja1u1X
8aDeVKER5LG5XuRiwgRUyQwFI937WLkVxkRH+mwwHdhARCPLZ4+2Wtli/r0Lne/x
5bU63X6bKp6ES17ixWt1bCU5FE0HOI3Org+kFO6Nk1fpWo3nu+Nb0NEhfLdFvyy1
Qlff+y9EpXXLXzPwHF03Cxm/P5XackwcOJbQhycVjIXi4Z7IKGK8B6F3I2pICeB8
8SsoQYg2NpiXpLsdxZVK4EaD228WdqfbTA76HBuQTyjskssudCnvImex2DppAgMB
AAGjggJ5MIICdTAdBgNVHQ4EFgQUA6xAbB/os24jx7U4XRGCef9724IwHwYDVR0j
BBgwFoAUmepVGRjAW8PZGKcxE33wuGIk+GgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjYzYWY4NzktYmFlZi00ZGU0LTk2ZDctYWFiYTZkOWQ4
ZTVmLzEvOTlFQTU1MTkxOEMwNUJDM0Q5MThBNzMxMTM3REYwQjg2MjI0Rjg2OC5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz
MDUzZjgyMGY1LzEvOTlFQTU1MTkxOEMwNUJDM0Q5MThBNzMxMTM3REYwQjg2MjI0
Rjg2OC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjYzYWY4Nzkt
YmFlZi00ZGU0LTk2ZDctYWFiYTZkOWQ4ZTVmLzEvMzI2MTMwNjIzYTM0NjUzMDM3
M2EzNTY0MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzMjMzMzMzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoLTgddMA0GCSqGSIb3DQEBCwUAA4IBAQAZD7nROy+rwY1DPsdf
gf0THA/TpnQuCBx21xZzPe7IgTCAlWPYKLBYx8BgLyL4d97pTbD7MSZAHCPVRBF2
GLcO33XgaX8ip33PH0tq6cJ5CaE4VVpvkpgojKPhYpnol64sK4xrbWFbLfMEQ+B2
S78NgKGSdBKT2oKL+EBGwa91NbIu6/NrbVoXlLyxp6kt03CFJFp29ol7bRXZU9Wo
UHGi/uRt1S+uDXxdVFDYcKbbB2G9rBtoeCIwgSH4dQV20fzEC73Kn2j8Dfw7flXq
w0hxKqhnbJ3WDKRfj2tAe5pJD/uxf9UJjXLijy85qjRlSnHS4pbN7F64W+gRUEgG
7OUI
-----END CERTIFICATE-----
Generated at Sat Oct 31 03:27:50 2026 by rpki-client