Route Origin Authorization

$ rpki-client -vvf rpki.pudu.be/repo/pudu/4/323630323a663537643a3a2f34302d3438203d3e203437363839.roa
File:                     323630323a663537643a3a2f34302d3438203d3e203437363839.roa (raw, json)
Hash identifier:          m3BGbMwW1r4bzVHm+F/BhTxvQJoFu939yjwl5jj+V9Y=
Subject key identifier:   DE:09:79:FB:44:5C:DE:4F:F8:29:AB:DC:30:AB:43:B1:28:21:AB:D1
Certificate issuer:       /CN=4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8
Certificate serial:       1F9E5BF76EF9FD53F98D25B896DD4ECCB647ED3E
Authority key identifier: BE:DC:BA:A0:D6:AC:CB:E9:7C:22:F6:0B:E3:7F:81:2B:6D:69:04:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/4/323630323a663537643a3a2f34302d3438203d3e203437363839.roa
Signing time:             Fri 31 Jul 2026 17:24:37 +0000
ROA not before:           Fri 31 Jul 2026 17:19:37 +0000
ROA not after:            Fri 30 Jul 2027 17:24:37 +0000
asID:                     47689
IP address blocks:        2602:f57d::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.crl
                          rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9e:5b:f7:6e:f9:fd:53:f9:8d:25:b8:96:dd:4e:cc:b6:47:ed:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8
        Validity
            Not Before: Jul 31 17:19:37 2026 GMT
            Not After : Jul 30 17:24:37 2027 GMT
        Subject: CN=DE0979FB445CDE4FF829ABDC30AB43B12821ABD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:df:c2:34:7d:fc:79:cf:f2:52:bd:5d:d7:a5:
                    cf:44:a5:65:29:a0:be:93:2b:92:e0:b4:f9:04:f3:
                    c6:0a:9a:9d:37:ef:f2:99:a7:ee:51:f2:e1:5d:bd:
                    47:18:d8:fa:7d:a3:46:d9:d6:a9:37:f3:7e:96:06:
                    92:b5:ef:e8:22:44:71:b9:21:52:40:31:b1:a3:87:
                    3b:4a:85:aa:40:32:f8:46:5d:20:4a:fc:d6:85:b8:
                    8d:b0:1a:24:14:19:2e:b3:79:c6:9b:fd:78:d6:06:
                    8b:c9:fa:fd:64:bc:6a:b8:a9:c7:58:ca:77:7d:b9:
                    d5:b3:95:18:f5:6f:d1:ca:00:14:af:1d:0b:c6:f7:
                    fa:28:94:2d:f6:1a:87:41:06:f3:5e:ce:30:02:13:
                    27:45:96:09:14:85:ec:50:6b:d6:49:bb:1a:dd:73:
                    8b:82:4b:dd:7f:30:ee:c9:8d:7b:ad:e0:78:c5:74:
                    97:d8:64:24:fa:50:98:42:6a:84:e9:4e:a5:65:0c:
                    90:9e:47:e0:fe:38:f8:75:6e:2e:db:92:96:22:6b:
                    00:95:be:97:17:e8:e6:65:e1:85:59:58:ad:8c:68:
                    ee:cb:2d:05:f1:71:28:fd:53:e0:55:30:c3:6a:28:
                    76:06:56:be:69:0c:98:45:8c:6e:f2:0c:90:a4:e2:
                    f0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:09:79:FB:44:5C:DE:4F:F8:29:AB:DC:30:AB:43:B1:28:21:AB:D1
            X509v3 Authority Key Identifier:
                keyid:BE:DC:BA:A0:D6:AC:CB:E9:7C:22:F6:0B:E3:7F:81:2B:6D:69:04:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/4/323630323a663537643a3a2f34302d3438203d3e203437363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f57d::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:2a:8f:20:ed:b4:35:90:3c:53:7f:f9:f4:a3:9b:c1:77:00:
         ec:aa:57:d0:bf:4d:55:3a:49:d4:50:e8:8f:bb:60:45:9e:ef:
         ac:73:46:76:13:d7:51:38:11:de:01:00:b9:5d:03:56:fd:75:
         91:35:cb:6c:81:d5:b6:80:d6:f3:15:c0:27:96:fb:f8:50:41:
         c8:d9:c3:50:85:c9:30:4f:4b:8f:8a:f8:be:24:34:44:a1:ca:
         b9:3f:11:b1:9d:40:2c:f4:fa:71:e4:54:06:dd:c9:15:77:14:
         57:1b:47:40:d4:78:d3:88:47:f3:bf:83:b1:c5:e0:45:f1:9b:
         0e:5b:76:ed:40:30:a5:90:2b:a3:91:48:a0:08:cc:41:c7:fe:
         55:16:37:97:98:3b:3e:fc:07:c6:60:9c:d6:48:76:e4:bc:c3:
         97:36:9f:52:24:bb:f5:8c:c3:37:29:a6:7b:ca:c8:d0:b1:bd:
         e0:35:9f:0a:33:cc:8a:ea:50:9a:79:34:b5:d9:14:f6:42:e9:
         de:71:a4:f2:8d:84:0c:04:d4:00:33:91:e7:6a:d1:0b:65:dd:
         90:f5:ae:32:09:b5:a1:79:04:46:84:81:dc:c1:87:8c:08:63:
         d9:fb:6c:cd:bf:e2:62:da:2c:8e:fb:13:f6:fe:50:50:ab:87:
         49:72:df:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:31:03 2026 by rpki-client