Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a393030313a3a2f34382d3438203d3e20313938353930.roa
File:                     326130363a313238333a393030313a3a2f34382d3438203d3e20313938353930.roa (raw, json)
Hash identifier:          +PuOOmP6mlbAmWXUN1SVKGqMQE+mtoymvLOl8E7Oqkw=
Subject key identifier:   05:DB:04:46:60:A5:4A:CF:E2:7D:87:AE:9F:AA:78:A8:A5:83:82:D5
Certificate issuer:       /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Certificate serial:       3694BA3732D79369020A0E7A072140F2CAA46B56
Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a393030313a3a2f34382d3438203d3e20313938353930.roa
Signing time:             Fri 22 May 2026 18:48:45 +0000
ROA not before:           Fri 22 May 2026 18:43:45 +0000
ROA not after:            Fri 21 May 2027 18:48:45 +0000
asID:                     198590
IP address blocks:        2a06:1283:9001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 May 2026 12:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:94:ba:37:32:d7:93:69:02:0a:0e:7a:07:21:40:f2:ca:a4:6b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
        Validity
            Not Before: May 22 18:43:45 2026 GMT
            Not After : May 21 18:48:45 2027 GMT
        Subject: CN=05DB044660A54ACFE27D87AE9FAA78A8A58382D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2d:60:e0:19:7c:85:63:dd:41:7f:c0:16:e9:
                    11:a3:43:f4:c7:e3:66:9a:65:f8:ae:3c:35:48:c1:
                    ea:e8:bd:23:4e:e7:3a:5a:12:0b:66:2d:7e:59:c4:
                    48:9b:ad:cb:c3:89:31:92:0a:35:a8:0f:4b:0a:fb:
                    b3:75:f6:58:0b:91:18:c3:c7:17:31:cf:01:0d:14:
                    bc:cc:8a:8b:fd:90:df:42:bd:60:57:44:8e:df:69:
                    64:e5:79:07:74:36:3e:9d:3e:97:42:43:ce:3e:81:
                    40:b8:3e:b2:b7:10:19:6e:00:8c:ee:d2:fe:05:c2:
                    ca:6c:7c:e1:66:a1:d2:0c:6a:cb:a8:27:73:8e:44:
                    82:2c:10:b4:8b:fd:88:b8:bc:45:ca:fa:11:53:63:
                    67:50:75:c4:fb:3f:d0:49:68:3d:c7:6e:fc:79:01:
                    0b:ef:b4:c9:ef:53:23:89:f2:c8:36:40:07:da:85:
                    ec:7e:8b:fc:92:ed:76:67:20:03:ea:29:b1:7b:6b:
                    59:6c:5e:85:64:f2:c0:11:4c:1f:23:36:61:f8:29:
                    ae:b3:53:0d:11:c9:9c:21:02:80:f3:c8:28:df:ac:
                    82:22:d8:14:dd:7a:e1:76:fa:8d:d1:ef:bc:a8:58:
                    60:7e:be:21:4b:7a:95:0c:ba:cc:58:1e:af:cc:7c:
                    f2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DB:04:46:60:A5:4A:CF:E2:7D:87:AE:9F:AA:78:A8:A5:83:82:D5
            X509v3 Authority Key Identifier:
                keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a393030313a3a2f34382d3438203d3e20313938353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:9001::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:a9:9f:76:59:1d:85:5c:4f:24:93:c3:c4:98:42:71:6b:a4:
         66:f5:00:cf:85:8e:a6:9d:66:fd:a6:99:e3:43:62:63:97:de:
         fb:59:71:a5:c6:23:7a:97:d0:c8:de:9e:21:03:0f:88:48:76:
         10:2d:95:54:60:57:38:99:d0:2b:17:91:85:75:c7:81:65:55:
         b2:ac:a6:da:31:72:e6:f1:4b:88:3e:bd:56:2b:ec:94:ef:f0:
         ac:ef:c6:4a:d2:7d:1b:bf:e6:13:9e:e6:66:e0:6d:19:a1:de:
         46:e2:19:95:0f:15:75:f0:9c:b9:5d:43:ac:78:aa:64:60:22:
         d5:10:b2:35:f4:13:70:6b:bd:39:ad:2f:58:08:07:08:58:85:
         98:56:6e:7f:9e:0f:1f:bf:ba:f7:d0:98:eb:b6:05:08:de:d2:
         10:b5:d6:23:a9:86:14:57:11:0a:7b:75:69:93:8c:ca:77:2d:
         4f:fc:2f:96:6e:d1:e1:28:46:b3:c0:b2:c7:72:47:41:db:3f:
         c5:fa:4c:82:8d:44:f3:a7:b4:ab:42:10:41:d8:99:ff:47:8f:
         ed:30:a1:36:25:8f:a1:25:e7:43:cf:92:42:b5:81:a4:60:79:
         74:8d:49:df:72:bc:c2:bb:c9:5a:55:32:9b:7e:15:31:e8:c1:
         d4:f2:3d:6c
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUNpS6NzLXk2kCCg56ByFA8sqka1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0
RjI5QzNGQjAeFw0yNjA1MjIxODQzNDVaFw0yNzA1MjExODQ4NDVaMDMxMTAvBgNV
BAMTKDA1REIwNDQ2NjBBNTRBQ0ZFMjdEODdBRTlGQUE3OEE4QTU4MzgyRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6LWDgGXyFY91Bf8AW6RGjQ/TH
42aaZfiuPDVIwerovSNO5zpaEgtmLX5ZxEibrcvDiTGSCjWoD0sK+7N19lgLkRjD
xxcxzwENFLzMiov9kN9CvWBXRI7faWTleQd0Nj6dPpdCQ84+gUC4PrK3EBluAIzu
0v4FwspsfOFmodIMasuoJ3OORIIsELSL/Yi4vEXK+hFTY2dQdcT7P9BJaD3Hbvx5
AQvvtMnvUyOJ8sg2QAfahex+i/yS7XZnIAPqKbF7a1lsXoVk8sARTB8jNmH4Ka6z
Uw0RyZwhAoDzyCjfrIIi2BTdeuF2+o3R77yoWGB+viFLepUMusxYHq/MfPIXAgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQUBdsERmClSs/ifYeun6p4qKWDgtUwHwYDVR0j
BBgwFoAUSAfBGL00iTS1zFmz6KeowU8pw/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm
NDA5LzQvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5QzNGQi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5
QzNGQi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt
MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzQvMzI2MTMwMzYzYTMxMzIzODMz
M2EzOTMwMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkzODM1MzkzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoGEoOQATANBgkqhkiG9w0BAQsFAAOCAQEAn6mfdlkdhVxPJJPD
xJhCcWukZvUAz4WOpp1m/aaZ40NiY5fe+1lxpcYjepfQyN6eIQMPiEh2EC2VVGBX
OJnQKxeRhXXHgWVVsqym2jFy5vFLiD69VivslO/wrO/GStJ9G7/mE57mZuBtGaHe
RuIZlQ8VdfCcuV1DrHiqZGAi1RCyNfQTcGu9Oa0vWAgHCFiFmFZuf54PH7+699CY
67YFCN7SELXWI6mGFFcRCnt1aZOMynctT/wvlm7R4ShGs8Cyx3JHQds/xfpMgo1E
86e0q0IQQdiZ/0eP7TChNiWPoSXnQ8+SQrWBpGB5dI1J33K8wrvJWlUym34VMejB
1PI9bA==
-----END CERTIFICATE-----
Generated at Thu May 28 18:29:04 2026 by rpki-client