Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386130303a3a2f34302d3438203d3e20323131303636.roa
File:                     326130363a313238333a386130303a3a2f34302d3438203d3e20323131303636.roa (raw, json)
Hash identifier:          0UwJEaqOuZNt12cGdgRNs6h5sg/UqNE4VWJ7LVXWQWc=
Subject key identifier:   75:73:75:4F:0A:F6:6A:B4:43:1F:4B:6D:5A:6B:71:0B:F0:62:06:E2
Certificate issuer:       /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Certificate serial:       3AD9D3658838ADD633CB5FADD516934B38960B39
Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386130303a3a2f34302d3438203d3e20323131303636.roa
Signing time:             Fri 04 Jul 2025 16:48:01 +0000
ROA not before:           Fri 04 Jul 2025 16:43:01 +0000
ROA not after:            Fri 03 Jul 2026 16:48:01 +0000
asID:                     211066
IP address blocks:        2a06:1283:8a00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d9:d3:65:88:38:ad:d6:33:cb:5f:ad:d5:16:93:4b:38:96:0b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
        Validity
            Not Before: Jul  4 16:43:01 2025 GMT
            Not After : Jul  3 16:48:01 2026 GMT
        Subject: CN=7573754F0AF66AB4431F4B6D5A6B710BF06206E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5f:df:e3:e5:7d:6f:29:e5:8b:cf:3d:b2:63:
                    6c:ab:22:27:2a:3c:f2:aa:70:99:a2:43:01:19:11:
                    51:fe:fc:7f:f9:a8:6c:d5:fb:10:ca:e4:1d:b1:09:
                    82:79:37:44:86:8c:65:c9:5a:6e:84:04:9d:5b:f5:
                    a4:6d:7e:8f:8f:ad:65:9a:8a:9a:0c:18:bd:dd:f6:
                    fb:32:be:d7:dc:79:a8:52:b7:41:07:81:15:ab:e4:
                    46:d7:18:e0:0a:be:02:de:43:57:65:02:f9:71:db:
                    07:e0:2d:71:0b:04:d2:dd:a4:db:20:3b:14:57:59:
                    c7:1b:0e:4f:5f:28:1b:61:fc:d3:01:1e:61:18:c9:
                    8a:07:cc:89:de:c4:07:61:0e:76:16:fd:95:2a:1c:
                    13:09:89:d1:66:1f:2f:e9:32:83:cc:82:0d:b5:9b:
                    3d:2c:c1:24:e6:b3:71:30:fa:32:52:dd:4b:f0:c7:
                    70:88:44:af:60:d4:92:40:1f:a8:6c:9c:9a:53:73:
                    2e:19:17:78:2f:d0:dc:67:f1:dc:da:e2:cc:34:8f:
                    14:72:32:33:cf:5e:36:a0:68:ad:2c:18:c4:9a:82:
                    01:23:a8:b8:99:f6:c3:9f:2e:99:f9:e9:be:e0:27:
                    de:7a:25:0c:26:63:73:fd:6f:f4:28:27:d9:34:60:
                    86:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:73:75:4F:0A:F6:6A:B4:43:1F:4B:6D:5A:6B:71:0B:F0:62:06:E2
            X509v3 Authority Key Identifier:
                keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386130303a3a2f34302d3438203d3e20323131303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:8a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:01:62:6d:71:13:f5:f4:4a:e1:86:49:0f:ad:a0:18:84:88:
         3b:ec:b1:a9:ef:bd:21:76:26:c2:85:c8:e5:ab:c7:fe:0f:45:
         f0:e7:57:41:f5:1a:91:7a:e0:07:4a:56:d6:08:01:9d:01:07:
         7b:37:7c:d8:89:04:5c:60:82:45:84:37:b7:be:5c:aa:62:f5:
         a3:ad:c5:3d:c8:f4:c0:44:05:b8:83:c8:90:91:6d:12:80:41:
         db:a1:a6:01:a6:fd:f8:eb:e0:d3:86:f6:64:7b:bc:52:c2:41:
         da:93:e3:ac:f9:55:61:73:f7:23:0f:de:17:85:da:ef:9a:cf:
         4c:eb:99:b7:b9:62:ea:ac:42:ab:ef:52:bc:ec:3d:8e:1c:8e:
         d9:8a:6b:48:c2:e7:88:11:08:06:be:56:73:31:a9:d7:eb:e2:
         b2:29:86:71:d9:24:3b:f9:90:c2:3d:5c:4d:dd:75:88:91:f9:
         84:89:b4:16:06:51:3e:a2:fc:ef:a3:b5:36:4d:6b:5e:b0:e2:
         1e:c2:bb:b9:0a:3e:2a:db:75:f9:5d:14:2b:81:c8:9a:b5:7b:
         d5:32:09:72:de:5c:04:f6:f4:9e:70:1c:7b:90:cc:06:23:d1:
         ad:bc:d0:26:27:00:09:23:d9:5f:eb:ae:a0:bc:a8:f6:bb:af:
         f0:56:60:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:45:21 2025 by rpki-client