Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/326130623a346530373a356430333a3a2f34382d3438203d3e203331383938.roa
File:                     326130623a346530373a356430333a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier:          5us64h9fKQcDKWQlsjbEb7vjafoAjmaDagpolHaxEBQ=
Subject key identifier:   94:28:71:88:40:04:54:0E:35:97:B3:22:23:60:45:B3:01:41:23:E7
Certificate issuer:       /CN=99EA551918C05BC3D918A731137DF0B86224F868
Certificate serial:       5674CB0CCE420F2684074D3B1DFB6E15CBD8F9CB
Authority key identifier: 99:EA:55:19:18:C0:5B:C3:D9:18:A7:31:13:7D:F0:B8:62:24:F8:68
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/99EA551918C05BC3D918A731137DF0B86224F868.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/326130623a346530373a356430333a3a2f34382d3438203d3e203331383938.roa
Signing time:             Tue 13 Oct 2026 23:52:35 +0000
ROA not before:           Tue 13 Oct 2026 23:47:35 +0000
ROA not after:            Tue 12 Oct 2027 23:52:35 +0000
asID:                     31898
IP address blocks:        2a0b:4e07:5d03::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/99EA551918C05BC3D918A731137DF0B86224F868.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/99EA551918C05BC3D918A731137DF0B86224F868.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/99EA551918C05BC3D918A731137DF0B86224F868.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 13:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:74:cb:0c:ce:42:0f:26:84:07:4d:3b:1d:fb:6e:15:cb:d8:f9:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99EA551918C05BC3D918A731137DF0B86224F868
        Validity
            Not Before: Oct 13 23:47:35 2026 GMT
            Not After : Oct 12 23:52:35 2027 GMT
        Subject: CN=942871884004540E3597B322236045B3014123E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2e:f2:de:83:3b:8a:ac:be:a1:b9:78:a0:78:
                    8e:8b:18:55:f6:b6:d9:9d:50:c5:99:f4:55:ef:b2:
                    54:1e:00:f7:d7:e7:ea:b9:f1:c6:5d:cf:d1:96:09:
                    1c:42:e5:34:3d:0b:33:44:3d:95:b0:49:1d:5e:de:
                    9d:70:6e:5b:3e:7b:ba:f0:57:a4:a4:6a:cb:24:3f:
                    22:92:09:f7:ec:04:f3:79:bf:ac:d9:04:5b:be:7c:
                    ca:89:c6:7f:48:33:07:23:53:2a:79:e6:fc:ae:05:
                    3b:c9:a4:de:a2:af:6a:ee:29:45:55:7e:72:89:f4:
                    ec:6e:c7:f9:0c:ae:d4:5a:45:c0:8b:4d:c2:a7:b0:
                    a2:63:77:8a:bb:e4:df:81:89:22:7a:a1:c2:0a:53:
                    41:71:a4:a4:bd:3c:fb:e4:62:24:fe:b7:28:cc:07:
                    d2:13:f9:f6:ff:e0:dd:7c:64:4c:d4:58:11:5e:ce:
                    77:cf:53:a1:4a:cd:bd:df:df:3c:37:41:f5:d7:bf:
                    6c:1e:17:42:51:00:c0:da:f0:4f:6f:3f:2a:35:43:
                    2c:4a:8c:9f:5c:f6:fb:08:5e:68:16:7b:7e:23:bc:
                    e4:cd:ee:b8:34:96:5e:34:1a:5a:9c:38:fe:db:24:
                    0d:f5:8b:9c:c4:10:72:d2:df:28:40:f9:c9:a7:2e:
                    2a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:28:71:88:40:04:54:0E:35:97:B3:22:23:60:45:B3:01:41:23:E7
            X509v3 Authority Key Identifier:
                keyid:99:EA:55:19:18:C0:5B:C3:D9:18:A7:31:13:7D:F0:B8:62:24:F8:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/99EA551918C05BC3D918A731137DF0B86224F868.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/99EA551918C05BC3D918A731137DF0B86224F868.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b63af879-baef-4de4-96d7-aaba6d9d8e5f/1/326130623a346530373a356430333a3a2f34382d3438203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:5d03::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:1a:75:3a:37:cb:16:bf:c2:b9:e1:ad:e7:85:4d:64:a0:84:
         56:22:40:19:57:09:5a:03:89:b1:94:6e:31:05:f6:91:77:dd:
         46:30:33:c0:6f:15:ce:68:4e:e3:7c:5e:b1:a7:d2:2d:1f:2c:
         3e:6b:81:d5:4a:03:b0:e6:4c:57:99:ce:13:42:9c:9d:a4:d8:
         62:f2:e0:bc:7f:8b:7a:a5:12:fb:15:6c:dd:26:b1:7a:a8:76:
         2d:ef:35:af:5e:4a:0f:e4:b3:44:3f:58:d0:68:84:49:e0:df:
         0a:ad:e0:7c:a9:00:56:07:56:32:14:28:c7:dd:7b:3c:66:8e:
         4c:73:44:a3:60:0d:47:64:38:f1:b2:66:10:c2:6e:3b:de:a4:
         4c:27:d5:2c:13:b0:66:87:7a:b0:31:29:78:a9:67:cc:13:0f:
         c3:4b:d1:60:9a:4e:55:4b:86:67:bb:5c:9c:b1:54:f7:db:7a:
         69:4e:37:81:fb:0c:2e:bf:b8:33:f1:6c:ed:3a:bd:1b:a1:76:
         fa:84:9c:82:05:67:aa:87:5a:19:3f:82:3d:1b:4d:01:9f:58:
         9b:0f:a0:b9:54:65:2b:02:54:8e:d9:a8:ce:a7:1a:93:52:1d:
         e7:40:ea:b4:c8:8c:2c:e0:d2:1f:a9:e8:97:b6:41:02:74:0c:
         65:fe:51:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 03:27:54 2026 by rpki-client