Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a31303a3a2f34342d3434203d3e203135333533.roa
File:                     323630323a666131313a31303a3a2f34342d3434203d3e203135333533.roa (raw, json)
Hash identifier:          1dYOvw6apXY1sXcPQQrFsNgGNAMK7452EeWc5DF5SB8=
Subject key identifier:   6A:F2:FB:1C:CC:4A:38:99:D5:90:BB:49:9D:C6:06:88:F1:69:5D:F0
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       65947D1B6665F2C52AC0CDC09112812F1E0FAC32
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a31303a3a2f34342d3434203d3e203135333533.roa
Signing time:             Mon 17 Aug 2026 11:00:28 +0000
ROA not before:           Mon 17 Aug 2026 10:55:28 +0000
ROA not after:            Mon 16 Aug 2027 11:00:28 +0000
asID:                     15353
IP address blocks:        2602:fa11:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 21:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:94:7d:1b:66:65:f2:c5:2a:c0:cd:c0:91:12:81:2f:1e:0f:ac:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Aug 17 10:55:28 2026 GMT
            Not After : Aug 16 11:00:28 2027 GMT
        Subject: CN=6AF2FB1CCC4A3899D590BB499DC60688F1695DF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:60:9d:a8:43:90:1d:d2:69:54:91:c7:d9:eb:
                    df:64:c4:e1:6a:54:a8:51:30:c0:b1:52:d3:bb:d3:
                    6e:9b:c7:6b:eb:fd:6e:db:a2:27:00:d4:54:a6:d2:
                    14:ac:88:89:21:34:58:1c:82:19:b9:3b:47:4c:46:
                    63:46:b5:89:66:20:ef:50:9c:5d:5d:d2:de:2c:03:
                    5d:ba:20:20:d5:3a:a1:d2:02:f5:24:05:5f:e7:cc:
                    c8:02:b7:09:64:ef:c8:3f:ed:3f:74:d7:c3:62:54:
                    00:9c:4c:0f:a7:27:8d:1b:da:d5:e9:e7:7e:be:74:
                    50:3b:3b:dd:c6:74:7c:02:4d:3a:96:3b:fb:ec:f0:
                    9c:cc:e3:27:d1:1f:91:a8:e0:43:ce:b1:c5:f2:57:
                    ae:a4:b9:d7:bf:ee:53:66:4d:bb:3b:3d:dc:39:27:
                    d3:79:1b:0e:52:03:a9:e6:d5:62:71:c5:8a:85:14:
                    8f:cd:26:30:98:83:ff:52:4d:bd:a6:a8:b7:39:74:
                    b7:2e:d8:b2:1e:c3:c3:7e:bf:c9:84:19:5b:1c:51:
                    e0:92:2c:94:ff:23:55:b8:5c:c4:0a:11:c0:37:da:
                    6c:fe:9b:7a:71:0a:6b:e0:77:ad:2c:fa:28:d4:3b:
                    9d:7b:4c:25:74:aa:fa:91:83:b5:1f:8d:37:a5:0e:
                    60:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F2:FB:1C:CC:4A:38:99:D5:90:BB:49:9D:C6:06:88:F1:69:5D:F0
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a31303a3a2f34342d3434203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         73:2a:ad:f0:9b:c2:ff:6b:00:55:ea:af:7f:85:bf:f5:06:23:
         05:e8:a5:c3:a6:bd:9e:be:c0:31:c9:c6:e6:cc:32:df:22:a5:
         f4:1a:f0:0d:d2:25:c8:c3:52:81:93:b6:6a:0e:6e:37:03:bf:
         2a:e7:27:0f:b3:d3:67:b9:0f:a9:81:f3:ec:50:4a:d1:0d:6a:
         78:b7:23:6e:5b:a8:d7:21:aa:fc:22:49:19:2d:ae:e8:06:13:
         9e:83:dd:2a:e5:0d:d1:e5:f9:b6:22:8c:bc:2d:48:7b:09:94:
         2d:d9:f9:71:d3:69:83:d1:3a:1c:33:a8:70:24:fe:ed:cb:58:
         aa:96:ef:9e:2d:9f:b8:4a:90:ac:86:73:bb:37:a3:13:55:a7:
         0d:19:42:81:87:b9:d5:3c:15:7d:50:2b:c4:06:7b:2d:aa:5c:
         7a:18:6d:aa:fe:88:2a:76:cf:33:59:59:6b:fb:4b:86:c7:af:
         05:58:0e:f0:ef:29:88:a0:12:77:5a:5a:02:79:72:a9:5e:66:
         71:5f:33:1c:c9:70:c6:35:f2:d5:d2:00:7e:71:ce:42:6d:0d:
         e6:b1:8a:8e:6e:27:df:1d:3c:df:23:b0:c8:3a:e9:f5:10:c0:
         2e:60:8b:7d:dd:a4:01:56:76:5e:01:47:d1:fc:c9:16:26:36:
         b7:97:b3:c1
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUZZR9G2Zl8sUqwM3AkRKBLx4PrDIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0NDI0YjBlZjk0MGFlMjgzYTM5OWJmNDBiODg4YjQy
NGVkMDMyMmUwY2UwMmRhZDYwHhcNMjYwODE3MTA1NTI4WhcNMjcwODE2MTEwMDI4
WjAzMTEwLwYDVQQDEyg2QUYyRkIxQ0NDNEEzODk5RDU5MEJCNDk5REM2MDY4OEYx
Njk1REYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mCdqEOQHdJp
VJHH2evfZMThalSoUTDAsVLTu9Num8dr6/1u26InANRUptIUrIiJITRYHIIZuTtH
TEZjRrWJZiDvUJxdXdLeLANduiAg1Tqh0gL1JAVf58zIArcJZO/IP+0/dNfDYlQA
nEwPpyeNG9rV6ed+vnRQOzvdxnR8Ak06ljv77PCczOMn0R+RqOBDzrHF8leupLnX
v+5TZk27Oz3cOSfTeRsOUgOp5tViccWKhRSPzSYwmIP/Uk29pqi3OXS3LtiyHsPD
fr/JhBlbHFHgkiyU/yNVuFzEChHAN9ps/pt6cQpr4HetLPoo1Dude0wldKr6kYO1
H403pQ5gZQIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFGry+xzMSjiZ1ZC7SZ3GBojx
aV3wMB8GA1UdIwQYMBaAFLsmLS0Gpbv0/yImXHtPVR/wN0M9MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2
LWRiZmM0NTkzYzFhOC82L0JCMjYyRDJEMDZBNUJCRjRGRjIyMjY1QzdCNEY1NTFG
RjAzNzQzM0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYt
NGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTM4ZGUyZC01MTJhLTQ2OTItOGM1My1k
MmQ5YTZjZWI1NDkvN2M0NDI0YjBlZjk0MGFlMjgzYTM5OWJmNDBiODg4YjQyNGVk
MDMyMmUwY2UwMmRhZDYuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH
MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2LWRiZmM0NTkzYzFhOC82LzMyMzYzMDMy
M2E2NjYxMzEzMTNhMzEzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMxMzUzMzM1
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQmAvoRABAwDQYJKoZIhvcNAQELBQADggEBAHMqrfCbwv9r
AFXqr3+Fv/UGIwXopcOmvZ6+wDHJxubMMt8ipfQa8A3SJcjDUoGTtmoObjcDvyrn
Jw+z02e5D6mB8+xQStENani3I25bqNchqvwiSRktrugGE56D3SrlDdHl+bYijLwt
SHsJlC3Z+XHTaYPROhwzqHAk/u3LWKqW754tn7hKkKyGc7s3oxNVpw0ZQoGHudU8
FX1QK8QGey2qXHoYbar+iCp2zzNZWWv7S4bHrwVYDvDvKYigEndaWgJ5cqleZnFf
MxzJcMY18tXSAH5xzkJtDeaxio5uJ98dPN8jsMg66fUQwC5gi33dpAFWdl4BR9H8
yRYmNreXs8E=
-----END CERTIFICATE-----
Generated at Sat Sep 19 04:48:03 2026 by rpki-client