Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3134392e3131322e3131372e302f32342d3234203d3e203430313135.roa
File:                     3134392e3131322e3131372e302f32342d3234203d3e203430313135.roa (raw, json)
Hash identifier:          6ZrQwCYPIhT6Q1s29P2jCOApZZ1bzPlB4pZHoGaZvdI=
Subject key identifier:   A1:9C:0B:31:3C:D8:2F:69:A8:A4:C8:77:8B:96:0D:5A:7C:89:42:87
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       224E7D423E65025FD8635B20C7E64A6FF3E847AB
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3134392e3131322e3131372e302f32342d3234203d3e203430313135.roa
Signing time:             Fri 03 Jul 2026 01:52:05 +0000
ROA not before:           Fri 03 Jul 2026 01:47:05 +0000
ROA not after:            Fri 02 Jul 2027 01:52:05 +0000
asID:                     40115
IP address blocks:        149.112.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4e:7d:42:3e:65:02:5f:d8:63:5b:20:c7:e6:4a:6f:f3:e8:47:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Jul  3 01:47:05 2026 GMT
            Not After : Jul  2 01:52:05 2027 GMT
        Subject: CN=A19C0B313CD82F69A8A4C8778B960D5A7C894287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a6:09:e8:fd:35:3c:9d:28:69:2d:72:c8:14:
                    37:ca:8d:11:e1:e1:4b:e0:c7:83:0f:ca:0c:07:ac:
                    b7:c5:35:ff:cc:fc:24:64:f6:d4:e5:29:99:bb:81:
                    cd:c2:1d:c0:dc:dd:1f:1d:55:f5:1f:bb:e8:82:5b:
                    ac:9c:41:d9:cb:51:25:57:9f:c2:08:c8:6c:f9:91:
                    33:e2:fa:cd:df:a4:cc:7e:c6:5c:85:51:e7:e3:bf:
                    71:fe:d2:c4:67:c1:11:4d:9f:66:d8:42:aa:92:e9:
                    42:5b:5a:7a:ff:a3:19:6a:e8:85:b3:f1:f8:e7:59:
                    e9:ec:79:7d:83:82:4c:20:46:03:71:dc:9d:1f:7c:
                    1d:29:28:b0:70:00:ef:6b:4a:67:8f:1e:14:ee:ce:
                    16:b4:df:be:f1:9c:bd:49:c2:46:94:ae:13:8a:5a:
                    c4:55:7a:9f:d3:5e:6c:9f:85:5d:bf:a1:98:d5:36:
                    8f:fc:e6:9a:93:07:4d:c9:58:6c:e9:df:88:f8:65:
                    01:e7:c2:ab:d9:fb:78:49:60:8b:df:b8:4a:a7:11:
                    b6:c5:d2:02:a8:f6:68:12:64:93:6b:c6:fe:20:fe:
                    da:b7:29:d1:e7:c9:b0:44:e6:42:a7:76:d2:9e:1c:
                    7a:7f:4b:2d:45:31:80:0c:c2:7f:d3:e6:35:61:e9:
                    67:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9C:0B:31:3C:D8:2F:69:A8:A4:C8:77:8B:96:0D:5A:7C:89:42:87
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3134392e3131322e3131372e302f32342d3234203d3e203430313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:fe:7b:c4:16:72:8f:5f:d2:a1:7b:48:1c:86:58:36:fa:57:
         12:82:bf:e2:23:db:f5:3f:04:ff:45:91:5a:bc:23:95:89:a3:
         ba:6c:44:43:0b:4f:9b:c7:33:5c:5c:26:ac:f6:76:7e:c7:f6:
         66:c8:22:c9:d4:27:4e:dc:c1:4e:99:a7:1a:48:5a:d4:78:3b:
         36:e9:02:8c:7d:20:db:33:7a:bf:d5:28:d7:62:52:a4:f8:df:
         bf:63:a0:d8:00:da:1b:55:7b:51:4f:28:0e:e2:f7:76:f7:67:
         1e:b0:31:a0:db:93:6b:24:b8:d1:c7:2d:c4:20:81:cd:cd:07:
         e0:03:1e:d5:36:f9:22:c3:bd:dc:2f:92:55:a8:a6:f7:ef:04:
         17:c5:dc:bc:61:2e:b9:61:d2:15:e9:9a:87:e4:b7:e4:2d:ac:
         74:5d:84:69:69:73:0d:b1:0b:89:55:79:fc:56:74:c8:ab:98:
         bc:32:84:37:94:66:38:fa:09:81:50:d3:df:c7:5b:2d:37:66:
         55:83:0f:e9:4b:ea:66:63:a3:da:5f:5b:b9:13:5b:bd:c5:d9:
         25:84:8c:05:2f:f7:d1:0f:56:7e:04:9c:47:6d:ee:4a:b1:3a:
         92:05:aa:b7:c5:e2:4d:b1:e7:15:b0:d5:6a:6a:1a:04:9b:bb:
         d2:c8:80:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:23:51 2026 by rpki-client