Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/323630323a663530633a6330303a3a2f34382d313238203d3e20323035393431.roa
File:                     323630323a663530633a6330303a3a2f34382d313238203d3e20323035393431.roa (raw, json)
Hash identifier:          cWyW4xHleqLk84rEzGTR8NRbqNQlRwAtCtLspkb3tV8=
Subject key identifier:   B9:D9:45:DC:1D:87:4D:54:C8:95:64:C6:26:05:75:49:0E:78:A3:37
Certificate issuer:       /CN=D6D172D72D23BAC1F197C131AD720E6E8230B003
Certificate serial:       47A6CC2DF8F21EB2EDF9C87718CDE7251A77C248
Authority key identifier: D6:D1:72:D7:2D:23:BA:C1:F1:97:C1:31:AD:72:0E:6E:82:30:B0:03
Authority info access:    rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/323630323a663530633a6330303a3a2f34382d313238203d3e20323035393431.roa
Signing time:             Sat 23 May 2026 16:51:22 +0000
ROA not before:           Sat 23 May 2026 16:46:22 +0000
ROA not after:            Sat 22 May 2027 16:51:22 +0000
asID:                     205941
IP address blocks:        2602:f50c:c00::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 06:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a6:cc:2d:f8:f2:1e:b2:ed:f9:c8:77:18:cd:e7:25:1a:77:c2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6D172D72D23BAC1F197C131AD720E6E8230B003
        Validity
            Not Before: May 23 16:46:22 2026 GMT
            Not After : May 22 16:51:22 2027 GMT
        Subject: CN=B9D945DC1D874D54C89564C6260575490E78A337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:c1:1c:b0:40:17:bf:bb:b1:64:3e:72:21:
                    63:33:ea:d9:3b:35:d3:e8:26:d3:db:9f:f6:64:9b:
                    c9:1d:e0:38:52:d5:75:f0:6d:f8:c4:df:67:e4:5a:
                    a1:09:0a:43:c2:45:4d:b7:bf:e5:ec:7a:5d:d0:4a:
                    71:14:6c:5f:85:2b:9b:8d:40:a2:d5:04:b9:a0:33:
                    c9:40:13:07:65:0b:21:dd:a0:1a:43:cb:e2:62:a3:
                    cd:6b:e7:dc:97:8e:81:04:4e:5d:61:71:44:a4:da:
                    58:f3:39:2b:7d:35:6e:e0:b8:90:b7:b4:43:3f:2e:
                    56:53:1d:20:04:40:ed:27:7f:56:ef:97:d8:a9:f8:
                    14:03:6c:bc:e1:62:a7:1f:df:84:51:0f:95:e4:aa:
                    60:a0:53:a4:15:87:d0:b0:1e:8f:c2:3f:c9:89:23:
                    f3:17:26:21:7f:e2:a9:f6:66:b8:84:ac:25:bc:5e:
                    24:37:c8:92:5f:1e:af:9d:d0:fc:67:e1:a5:ba:6f:
                    41:e8:3d:84:2a:f4:ab:17:67:8d:13:52:fc:0d:ab:
                    f4:2a:55:ea:34:2d:e9:a8:d8:80:5e:3b:e7:a8:6a:
                    6e:e7:3e:eb:df:db:00:92:24:1f:99:65:f0:9d:b6:
                    66:f3:ed:72:13:6e:1a:be:85:ad:d3:d4:aa:e8:c2:
                    32:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D9:45:DC:1D:87:4D:54:C8:95:64:C6:26:05:75:49:0E:78:A3:37
            X509v3 Authority Key Identifier:
                keyid:D6:D1:72:D7:2D:23:BA:C1:F1:97:C1:31:AD:72:0E:6E:82:30:B0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/323630323a663530633a6330303a3a2f34382d313238203d3e20323035393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f50c:c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:aa:fc:a1:7f:10:4b:15:3f:77:d8:8c:a4:ab:df:0e:8e:c9:
         60:cc:d2:ca:bd:a2:6c:f7:57:6c:50:fd:9b:f6:ab:be:0d:83:
         93:4b:6a:80:83:71:fa:90:d5:ae:c5:27:87:fb:d0:32:bb:6b:
         4d:3e:99:b1:08:36:5c:ae:fa:56:95:9d:0d:e0:45:1b:10:ea:
         3c:6e:8d:04:2b:a0:50:bf:e0:13:f8:5f:59:ac:7c:19:1f:42:
         c3:2d:91:5f:47:02:4d:f6:c2:d7:57:d2:33:b2:43:a3:c9:55:
         54:ec:c4:e8:6a:cc:34:2d:73:ff:c3:8a:14:f1:ef:81:4f:d2:
         fc:de:0d:31:49:31:c1:13:48:da:24:15:4b:19:76:b9:0a:c7:
         f9:1b:8f:f6:5d:1f:31:28:58:ea:47:7d:47:af:bd:a7:79:41:
         85:5e:e7:a1:ad:79:57:7a:16:da:ac:7d:51:ae:3e:70:49:b8:
         86:ce:db:58:cd:aa:bc:78:77:2c:35:bd:e0:ad:3a:04:e0:97:
         da:ae:16:ab:dc:4f:bb:23:65:3b:ff:80:99:c9:7f:5f:3b:de:
         3d:a8:e2:22:18:41:2f:7d:53:7d:27:36:db:01:20:49:7f:5f:
         4e:27:2d:7b:a7:75:a2:e1:e0:ea:b5:e6:7f:b2:32:b8:b4:be:
         2d:bf:13:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:02:55 2026 by rpki-client