Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66363a3a2f34382d3438203d3e203533363637.roa
File:                     323630323a663939323a66363a3a2f34382d3438203d3e203533363637.roa (raw, json)
Hash identifier:          S/GTiHv/iE2vlNvAmKjrfN82g/16w/uz/fQYY+Mi6KU=
Subject key identifier:   56:F4:06:B7:62:3D:18:8B:AB:0F:30:1F:5B:F6:07:64:D6:9C:40:B6
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       0EACD783AF94C68488BC0026B2101DC3BB16E906
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66363a3a2f34382d3438203d3e203533363637.roa
Signing time:             Wed 27 Aug 2025 03:56:43 +0000
ROA not before:           Wed 27 Aug 2025 03:51:43 +0000
ROA not after:            Wed 26 Aug 2026 03:56:43 +0000
asID:                     53667
IP address blocks:        2602:f992:f6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 11:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ac:d7:83:af:94:c6:84:88:bc:00:26:b2:10:1d:c3:bb:16:e9:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Aug 27 03:51:43 2025 GMT
            Not After : Aug 26 03:56:43 2026 GMT
        Subject: CN=56F406B7623D188BAB0F301F5BF60764D69C40B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:fc:82:84:91:23:c6:67:a9:6e:56:64:a2:
                    c3:c2:14:65:38:f3:e0:fb:b7:0b:c3:07:fd:00:d2:
                    58:3a:fd:95:f3:b4:6a:b8:17:43:08:70:39:c0:c8:
                    a2:29:2e:13:70:66:cd:56:5a:5c:21:d3:d5:bf:87:
                    df:c3:f3:6e:41:4a:74:89:db:c5:fc:38:e8:35:f4:
                    87:c4:e8:e4:b1:62:3e:20:63:ed:99:51:0c:db:dd:
                    31:36:43:11:81:94:e2:ef:62:68:65:2b:a5:4f:15:
                    57:70:4e:fd:a2:5e:27:bb:02:98:8b:0f:c9:46:1a:
                    d0:74:c7:e3:99:12:26:d6:7c:d6:93:73:04:08:89:
                    e0:11:56:5f:5b:61:95:72:e3:c5:c7:19:32:a4:5f:
                    5b:93:b0:52:7f:78:e4:9f:9f:2b:b3:d8:39:b5:93:
                    aa:5a:67:14:60:30:b2:66:a7:a1:37:5c:f3:e1:a4:
                    12:42:09:1c:f2:d8:e9:19:11:31:40:dd:1c:44:76:
                    77:74:9b:5e:2b:e4:f1:53:fe:fb:32:f0:7f:5b:ec:
                    0c:da:fb:e3:3b:bb:88:73:61:67:4a:7e:42:f8:5d:
                    8f:18:77:92:45:9f:d8:04:5b:07:34:a7:bb:c2:17:
                    7e:33:7e:c7:12:ac:d6:2e:71:fa:a7:e0:27:c8:25:
                    7d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F4:06:B7:62:3D:18:8B:AB:0F:30:1F:5B:F6:07:64:D6:9C:40:B6
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66363a3a2f34382d3438203d3e203533363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f992:f6::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:30:79:ea:b6:7a:ff:ed:6b:e7:98:6a:8e:d8:23:48:66:d9:
         75:6f:81:ae:09:77:74:6c:5e:27:c7:4d:c4:af:83:b3:05:3d:
         c5:6f:cc:93:52:b3:c9:91:e4:74:a3:33:12:82:66:6e:fb:7a:
         7c:42:d7:d4:be:a8:bf:54:98:7d:e9:a5:88:31:13:1e:bb:e2:
         fe:69:b6:60:fb:7e:72:87:21:03:ab:91:fc:9f:31:6e:2e:fc:
         c6:a4:09:f6:7b:23:cd:bd:b6:62:7a:89:ad:4b:78:7b:52:40:
         68:5f:18:76:05:87:00:8e:a7:e4:bc:44:29:fe:e5:17:50:23:
         ab:34:30:6a:81:16:c3:24:0d:96:c2:33:ff:99:2e:be:5f:3e:
         b9:59:5a:81:cf:e7:3f:d2:7a:3e:f6:da:01:9e:20:48:56:36:
         cb:8d:ab:17:28:68:1a:9b:c5:93:e0:9f:02:2e:5e:c8:09:40:
         fb:27:72:e3:c4:c6:42:dd:07:25:b7:95:fe:48:84:72:ed:44:
         c8:e8:0c:92:f3:37:26:77:99:74:7b:2c:06:67:91:33:43:a9:
         02:8f:c3:04:c9:13:fa:2e:2c:d8:4a:d2:c0:e1:48:35:f9:e5:
         eb:6a:b4:86:a2:c4:1b:e3:54:ac:97:c4:75:70:25:2d:25:63:
         35:ba:03:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 00:31:20 2025 by rpki-client