Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61303a3a2f34342d3438203d3e203433363431.roa
File:                     323630323a663939323a61303a3a2f34342d3438203d3e203433363431.roa (raw, json)
Hash identifier:          VOrAFxco2wif90ptN+7JtyQbdIcEhDu8JRBfxWeM5AA=
Subject key identifier:   3F:47:58:6F:AF:D4:7C:F5:84:F3:AA:A2:CC:2D:76:3D:22:E7:3C:FA
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       37205075A77EA84DE9559561B68B8838148EFA72
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61303a3a2f34342d3438203d3e203433363431.roa
Signing time:             Sun 07 Jun 2026 17:28:01 +0000
ROA not before:           Sun 07 Jun 2026 17:23:01 +0000
ROA not after:            Sun 06 Jun 2027 17:28:01 +0000
asID:                     43641
IP address blocks:        2602:f992:a0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:20:50:75:a7:7e:a8:4d:e9:55:95:61:b6:8b:88:38:14:8e:fa:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Jun  7 17:23:01 2026 GMT
            Not After : Jun  6 17:28:01 2027 GMT
        Subject: CN=3F47586FAFD47CF584F3AAA2CC2D763D22E73CFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2a:c9:61:8c:6a:78:b4:aa:29:42:b5:51:ad:
                    f3:50:21:6d:d2:6b:22:8a:56:65:e7:91:fd:e1:da:
                    bb:de:21:4a:d2:ce:e7:00:b4:8c:e3:31:4d:11:a1:
                    9d:fc:f7:8e:25:ff:49:ed:d5:eb:cf:fc:16:9f:4e:
                    df:43:a9:d2:2f:29:f5:37:5a:1d:33:22:f4:2b:65:
                    21:58:37:5a:54:55:f1:c5:c8:51:cc:24:34:da:34:
                    71:4d:b4:fc:12:3b:fa:c4:fa:16:1b:b0:d1:b4:82:
                    8e:50:26:f1:a4:a8:60:2f:b3:9e:de:80:dd:74:10:
                    99:09:d4:70:27:03:a0:13:43:4e:cf:e7:af:3e:48:
                    fd:2b:7d:2c:00:da:97:cf:44:5f:e4:d3:e2:9f:ba:
                    9d:42:50:2d:0b:34:78:75:c5:21:8b:55:b4:cd:a8:
                    21:60:4f:a2:84:7f:e9:f5:3c:26:96:a4:4e:55:44:
                    09:e8:53:f4:e5:a3:f8:ad:90:e2:1d:51:c4:73:ab:
                    c2:f0:3a:4d:f1:8c:62:65:d4:31:af:52:7a:2a:2d:
                    d9:fc:8e:ed:89:30:8c:f0:8c:69:4b:7f:0a:c5:2d:
                    3a:eb:ed:75:99:36:e7:f3:85:ab:4e:87:08:b9:15:
                    a2:da:1c:80:21:b7:b1:1e:ed:3b:b6:e6:dc:43:33:
                    00:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:47:58:6F:AF:D4:7C:F5:84:F3:AA:A2:CC:2D:76:3D:22:E7:3C:FA
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61303a3a2f34342d3438203d3e203433363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f992:a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         04:6f:b5:e9:85:81:df:3f:5b:f6:e1:42:e6:38:a4:f6:91:4b:
         c0:05:ba:c7:c2:66:96:0b:3a:af:25:97:90:54:64:ba:41:f9:
         9b:25:de:39:fc:72:ca:71:d7:a1:90:85:a3:a5:3c:d7:c1:4d:
         4a:53:58:50:5c:33:98:35:3d:70:8e:e2:be:92:14:08:3a:9c:
         47:57:38:b8:7c:1c:32:16:c1:ef:9d:4f:b3:c2:db:4e:37:7e:
         17:e1:1a:15:2e:90:a1:b7:21:22:27:99:cb:bd:e3:7f:69:00:
         21:91:cd:4b:69:2c:2d:4f:fc:0d:f2:9f:d6:01:cc:6f:6f:fb:
         8b:1e:1f:9c:d8:5f:45:44:10:e3:08:e1:3b:61:b3:77:f8:81:
         c9:9c:ff:d0:25:69:d3:6e:3c:92:c7:f6:cf:c0:cf:a3:4d:e1:
         23:b5:77:d2:18:e9:39:6b:96:ec:0e:23:08:11:5c:5e:77:a4:
         40:b4:bf:b8:12:49:51:64:22:28:0f:5e:1f:bb:a4:d4:09:28:
         da:03:ab:5c:52:f6:2d:0c:8c:a7:a5:1e:15:4c:d9:69:f3:e6:
         7c:dd:0d:02:39:31:f8:c4:d8:78:a9:c0:8c:78:ad:4a:1e:5c:
         57:c9:92:a8:01:4d:9d:16:31:bf:76:cd:75:84:36:31:6a:2d:
         93:05:d0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:26:06 2026 by rpki-client