Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66363a3a2f34382d3438203d3e2030.roa
File:                     323630323a663939323a66363a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          6GBWB4w7LpAqZZsFZ/5hqsbITBZPRg9rgrqjz2AA2Yo=
Subject key identifier:   B9:3F:46:75:D5:F6:41:23:DE:A0:B4:3C:A9:2C:40:80:8C:FF:2B:C6
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       50E4EF9EDFA5F1BB481B53D677C5BEB9397479E0
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66363a3a2f34382d3438203d3e2030.roa
Signing time:             Sat 27 Sep 2025 07:35:13 +0000
ROA not before:           Sat 27 Sep 2025 07:30:13 +0000
ROA not after:            Sat 26 Sep 2026 07:35:13 +0000
asID:                     0
IP address blocks:        2602:f992:f6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e4:ef:9e:df:a5:f1:bb:48:1b:53:d6:77:c5:be:b9:39:74:79:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Sep 27 07:30:13 2025 GMT
            Not After : Sep 26 07:35:13 2026 GMT
        Subject: CN=B93F4675D5F64123DEA0B43CA92C40808CFF2BC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:1d:10:85:b8:54:9f:34:01:11:ed:5e:3f:
                    60:43:3e:e3:bd:39:ac:71:d5:c4:60:a9:52:e2:38:
                    5e:5a:fb:c8:d5:ee:ce:4a:27:ad:54:c7:30:e7:71:
                    34:f4:43:64:60:f4:24:d8:9a:87:4e:5d:96:89:33:
                    90:f7:64:a5:08:1a:14:18:55:e2:57:07:94:ee:e8:
                    84:b6:d1:7c:31:fe:30:8f:b2:ca:39:1c:54:2e:70:
                    b5:f8:51:81:14:35:02:ba:e2:37:02:1f:4c:77:82:
                    6e:60:ce:30:32:d6:62:95:4f:3c:98:54:56:c0:46:
                    6a:54:cc:4e:c2:6e:a4:4f:a9:34:e0:0a:37:97:77:
                    49:14:d8:8e:5d:ec:10:89:9e:ed:9e:60:a4:4b:24:
                    fd:37:f1:4f:e5:a7:d4:cc:ec:02:20:02:ea:5a:f4:
                    5a:2c:b0:8a:ea:ee:c9:73:73:a2:8c:b7:a9:11:4f:
                    20:b2:4d:99:9f:a4:a5:e3:b0:21:f5:d0:f6:e6:ef:
                    4b:33:d8:bf:f8:0b:3f:ed:36:df:1d:43:e6:5a:7b:
                    99:d8:41:aa:ca:3d:bb:3f:e3:41:c9:55:82:89:53:
                    39:c1:8f:07:b2:98:6d:f0:7f:1d:2c:b1:d9:80:39:
                    80:12:d4:47:13:e8:72:80:af:8b:cc:26:fa:d1:e2:
                    51:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3F:46:75:D5:F6:41:23:DE:A0:B4:3C:A9:2C:40:80:8C:FF:2B:C6
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66363a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f992:f6::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:51:69:63:38:d0:cd:6c:8c:5c:ca:ef:95:43:12:a2:14:1c:
         70:94:1f:b2:8e:fa:0b:76:1e:bf:65:50:c1:f4:77:ee:da:29:
         ba:e3:d7:fa:67:1b:88:06:87:8c:44:90:0d:5d:84:14:99:4a:
         96:87:d5:34:7c:17:cc:26:57:73:ee:2e:2c:a5:44:ca:f1:c9:
         5f:1d:d1:40:4d:9d:3a:ce:58:a5:dd:47:c2:bd:bd:77:33:01:
         2f:b3:1c:cc:4c:f9:28:8d:50:77:03:1d:ad:e9:64:02:df:a5:
         f3:12:8f:99:f1:30:41:79:93:f6:f7:ea:33:55:ef:ec:f8:d7:
         73:95:a5:09:aa:f8:47:2e:c2:bf:50:26:af:9c:7b:c6:be:4b:
         c0:a1:97:10:ac:5e:f7:cb:88:75:2c:5f:63:c6:4a:0e:73:30:
         99:07:41:49:a8:06:84:bc:fb:0c:12:63:45:03:ab:8b:40:c9:
         01:54:81:b9:d1:b7:70:c7:b4:b6:ae:b6:22:5f:9f:b6:a8:ca:
         57:d6:42:19:98:b2:66:c0:fd:e0:f3:2d:c8:81:87:44:2c:c3:
         7e:ff:ec:ba:11:78:d5:77:e2:f1:d4:88:7e:bd:4b:dd:37:15:
         61:4e:77:a4:6b:38:96:3d:96:d7:82:b4:04:fb:17:03:79:63:
         d0:34:5d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:57:47 2025 by rpki-client