Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/326130623a346530373a323030343a3a2f34362d3438203d3e20323139333331.roa
File:                     326130623a346530373a323030343a3a2f34362d3438203d3e20323139333331.roa (raw, json)
Hash identifier:          WwLkOeRgD2xAhxOEdsCC2ANBObDpMM4BGQxexbsQL6o=
Subject key identifier:   A0:94:2D:98:DB:2A:33:3D:2C:C5:7A:BE:FA:FA:42:02:9A:2C:CB:C2
Certificate issuer:       /CN=EAEE4A02E545C02C2C5A2556E1E446F1C94E5222
Certificate serial:       3D421950805DCC3FDBE22180F57040A8DD640040
Authority key identifier: EA:EE:4A:02:E5:45:C0:2C:2C:5A:25:56:E1:E4:46:F1:C9:4E:52:22
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/326130623a346530373a323030343a3a2f34362d3438203d3e20323139333331.roa
Signing time:             Sat 15 Aug 2026 13:10:08 +0000
ROA not before:           Sat 15 Aug 2026 13:05:08 +0000
ROA not after:            Sat 14 Aug 2027 13:10:08 +0000
asID:                     219331
IP address blocks:        2a0b:4e07:2004::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 15:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:42:19:50:80:5d:cc:3f:db:e2:21:80:f5:70:40:a8:dd:64:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAEE4A02E545C02C2C5A2556E1E446F1C94E5222
        Validity
            Not Before: Aug 15 13:05:08 2026 GMT
            Not After : Aug 14 13:10:08 2027 GMT
        Subject: CN=A0942D98DB2A333D2CC57ABEFAFA42029A2CCBC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:de:94:17:04:4c:18:a1:89:8a:a9:45:14:d3:
                    1f:17:88:81:30:5a:45:e8:7d:e6:d8:96:cb:ab:59:
                    e5:b0:e9:ce:3a:f9:86:95:f9:ec:9e:42:6a:3e:bc:
                    9f:11:86:f1:43:a6:5f:f9:a8:18:63:ce:c9:22:93:
                    d5:47:ff:0f:a3:c9:35:96:0e:a7:23:82:26:4b:7e:
                    95:ca:a6:76:42:89:07:11:f8:1c:dc:ee:9b:7b:66:
                    78:ef:94:29:07:60:1e:03:41:36:1a:59:ab:38:51:
                    35:72:69:a3:72:e3:aa:7d:cb:90:55:38:0a:d4:71:
                    14:09:c1:df:80:21:37:09:43:36:c1:f9:7c:9d:99:
                    34:19:a5:dd:fd:3e:93:fe:01:20:ab:cf:15:91:85:
                    d8:81:e6:aa:e9:74:bf:e1:87:37:84:bb:74:66:7f:
                    fc:e5:20:b5:2b:7c:8b:82:5c:ec:3d:db:bd:d7:a0:
                    d5:b6:eb:d5:fb:cf:e9:c2:72:69:e9:54:2b:91:25:
                    e9:d1:95:16:cd:cb:f1:17:f4:2e:2f:39:dc:dc:41:
                    77:6d:00:43:4b:c6:2a:12:a4:b3:a9:51:4d:00:bd:
                    d1:26:4a:5a:c1:77:ef:b9:b6:0a:c8:12:ee:38:f8:
                    9c:05:77:6e:c2:a7:5c:0d:c1:0f:97:39:4a:67:0e:
                    84:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:94:2D:98:DB:2A:33:3D:2C:C5:7A:BE:FA:FA:42:02:9A:2C:CB:C2
            X509v3 Authority Key Identifier:
                keyid:EA:EE:4A:02:E5:45:C0:2C:2C:5A:25:56:E1:E4:46:F1:C9:4E:52:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/326130623a346530373a323030343a3a2f34362d3438203d3e20323139333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:2004::/46

    Signature Algorithm: sha256WithRSAEncryption
         7a:6c:6b:2a:18:a3:f4:9a:cb:c4:22:3e:a2:41:32:40:f7:94:
         06:bd:7d:69:6d:c7:ef:d1:4e:17:ba:1d:9a:86:23:41:d0:ca:
         76:8f:4b:86:07:84:52:0b:83:f5:25:68:c9:d0:fc:cb:b2:01:
         5e:48:a3:45:35:96:14:2e:27:99:b3:77:16:32:43:76:80:2e:
         eb:dd:17:9c:16:e7:6c:b0:4f:8b:0c:49:0d:c9:12:b7:fe:f3:
         41:07:a8:3e:7e:a6:b6:42:f6:65:01:18:4d:63:47:a6:d8:5d:
         ed:02:e8:9d:73:c1:12:4b:05:e4:8f:02:02:78:c4:ed:63:43:
         be:41:98:2d:0b:b0:7c:d4:e3:19:91:79:b2:2e:73:9c:4d:5a:
         2b:74:3a:28:cd:52:55:a7:93:46:3b:23:7b:52:04:47:43:f0:
         b4:fa:d3:7a:0e:7c:de:87:42:ae:bc:ed:b9:d4:dc:7e:09:eb:
         44:b2:57:8d:35:6e:ce:10:02:88:92:9a:46:73:d1:6b:e5:ea:
         2d:a9:ac:83:87:00:ed:07:19:1d:a6:cf:b4:64:ae:ff:6d:30:
         0c:89:6b:67:1d:8b:60:3e:a6:8e:f4:42:67:39:49:1a:e6:ac:
         31:f9:60:e3:e3:ca:47:71:0b:71:51:4f:64:5c:b8:49:a5:b1:
         6e:de:43:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:51:19 2026 by rpki-client