Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa
File:                     323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (raw, json)
Hash identifier:          K8umBIyysIyTKzGAPqQYfyOuH8+F5WnTKQ7wEtfjocE=
Subject key identifier:   CA:83:A7:6E:8A:A2:31:9B:BF:56:53:2F:08:0C:3E:E4:A6:96:DF:69
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       6F630FF422D94F33697C142D158F234D9DBDD3BF
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa
Signing time:             Thu 18 Jun 2026 01:27:08 +0000
ROA not before:           Thu 18 Jun 2026 01:22:08 +0000
ROA not after:            Thu 17 Jun 2027 01:27:08 +0000
asID:                     208699
IP address blocks:        2602:f992:f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 12:53:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:63:0f:f4:22:d9:4f:33:69:7c:14:2d:15:8f:23:4d:9d:bd:d3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Jun 18 01:22:08 2026 GMT
            Not After : Jun 17 01:27:08 2027 GMT
        Subject: CN=CA83A76E8AA2319BBF56532F080C3EE4A696DF69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:20:51:f0:07:e8:62:7f:62:8f:6d:f2:f6:e5:
                    0a:43:88:79:97:65:c2:fe:9e:1a:a9:c5:01:51:4d:
                    0e:e1:3e:93:7a:09:8c:cd:7f:8a:99:7a:ba:7e:80:
                    c7:70:37:9a:f8:40:02:a1:90:d0:bc:c2:f1:a9:6a:
                    be:9d:15:75:77:06:6f:72:a5:fc:04:18:b5:15:cf:
                    9e:10:87:18:c5:6e:08:d6:68:4b:eb:78:13:56:71:
                    23:7c:94:23:de:c6:93:4b:e7:54:1c:ef:1e:f9:57:
                    99:98:d4:60:87:9d:fd:49:b5:fd:1c:21:68:99:61:
                    29:b2:24:1c:f2:d8:99:72:7a:cb:5b:f7:06:92:f7:
                    43:2d:19:49:7b:32:ee:c0:58:d2:ca:00:a4:22:ee:
                    37:59:b5:d9:47:b1:d5:94:da:2d:b5:32:97:a4:22:
                    77:df:f2:e8:a7:d6:dc:de:a3:2f:bc:35:9f:f6:a6:
                    fa:d0:6d:1d:4c:16:b1:cc:3c:8d:85:99:d3:ba:26:
                    66:b5:26:a2:3a:62:ff:6d:c3:09:64:ad:7c:88:b2:
                    9d:0d:c8:7b:81:b1:09:02:dc:4c:9c:15:49:f6:a7:
                    58:86:ef:9f:1b:3a:3a:09:aa:d0:b1:de:6c:83:15:
                    40:49:5e:70:57:2f:44:d5:17:23:13:b1:ca:d0:17:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:83:A7:6E:8A:A2:31:9B:BF:56:53:2F:08:0C:3E:E4:A6:96:DF:69
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f992:f4::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:e5:94:8d:cc:fc:b4:88:59:12:4c:d0:90:1d:3c:24:85:53:
         54:15:46:44:10:1b:97:ea:bd:23:56:c7:dc:91:78:36:50:df:
         b5:28:93:b5:ba:3d:fb:ca:a6:0c:a9:18:4b:8b:44:76:23:18:
         fd:96:bb:bb:ed:5e:61:b8:13:67:4d:e5:29:31:48:92:b6:ae:
         51:9a:af:1d:83:91:2d:61:a8:db:5c:73:71:9c:c1:68:96:ff:
         6f:83:93:cf:e2:ab:8a:a6:8c:50:52:e3:19:3f:80:14:3f:6f:
         d0:88:51:28:9d:4e:82:75:f3:8d:66:8c:10:1f:13:6f:14:03:
         07:02:5f:ba:a1:0d:4b:d3:39:78:1b:0f:eb:89:2f:53:b0:a8:
         74:24:3a:a2:d1:68:b0:ad:8d:53:fe:5f:3e:b2:31:28:97:b7:
         eb:8e:da:ad:68:94:92:8d:05:29:da:a4:2d:51:68:b9:74:13:
         00:8c:41:5e:05:3f:bd:53:f8:b0:a4:a6:f5:00:4e:0b:33:95:
         f1:34:d6:c3:94:74:82:4a:91:a0:d0:4d:87:bb:2a:6b:6a:e3:
         df:8e:0b:d2:29:6a:2d:a6:8d:23:ba:8f:1a:1b:27:e3:7d:56:
         50:5f:7e:5b:6f:8e:da:6c:46:fd:a0:b3:e1:fa:ae:cd:1e:9c:
         30:9d:b4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 13:40:12 2026 by rpki-client