Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313331363a3a2f34382d3438203d3e20323131353835.roa
File:                     323630323a663932613a313331363a3a2f34382d3438203d3e20323131353835.roa (raw, json)
Hash identifier:          zyArsgAs0jmC24KWL1SssiGi7MjO5CA1Ff7LEh9R9GY=
Subject key identifier:   D6:FA:6C:4E:55:67:C2:98:20:55:B8:DD:0D:A8:D1:B6:8C:14:6B:8D
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       219E817E4A03C382B6C5CE0F4FCCF3EC977A13A2
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313331363a3a2f34382d3438203d3e20323131353835.roa
Signing time:             Fri 04 Sep 2026 22:54:54 +0000
ROA not before:           Fri 04 Sep 2026 22:49:54 +0000
ROA not after:            Fri 03 Sep 2027 22:54:54 +0000
asID:                     211585
IP address blocks:        2602:f92a:1316::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 04:54:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9e:81:7e:4a:03:c3:82:b6:c5:ce:0f:4f:cc:f3:ec:97:7a:13:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Sep  4 22:49:54 2026 GMT
            Not After : Sep  3 22:54:54 2027 GMT
        Subject: CN=D6FA6C4E5567C2982055B8DD0DA8D1B68C146B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:2f:ca:d6:13:7f:8c:39:f4:e7:c7:87:8c:9f:
                    4c:3c:23:ef:76:58:9c:1e:11:f8:36:09:14:db:63:
                    37:2b:98:96:c4:e8:cb:fb:c1:30:24:38:a3:90:6a:
                    14:64:3f:be:09:5a:74:7c:9f:52:b2:24:59:d1:7d:
                    aa:6e:17:63:f0:67:8d:c3:43:51:04:09:8e:35:31:
                    0d:1f:a7:13:7a:82:57:38:8c:eb:a0:a4:d9:d9:cc:
                    61:14:87:49:64:b2:35:8c:76:75:5b:a3:d6:53:18:
                    a9:de:59:7d:13:f5:6b:e7:11:b6:dd:c2:e8:ec:9d:
                    61:c3:9a:09:65:d7:bf:fa:90:03:b9:0f:96:f2:7e:
                    94:c5:87:a6:5f:6a:9b:69:4a:ae:f7:b5:67:09:46:
                    f0:fe:49:5f:ac:4e:4e:f3:53:53:50:9b:8c:47:23:
                    8e:c2:fd:1c:f0:b7:f8:de:f7:bc:ff:51:47:e3:d4:
                    10:28:b2:23:f6:c2:b0:b3:19:06:21:7c:7d:a6:2e:
                    b3:f1:27:54:67:21:0d:7a:80:7e:07:af:94:c0:7b:
                    09:f9:6e:2d:4d:67:e1:72:fc:e3:da:e9:7d:33:90:
                    99:1b:1c:30:d2:9c:b8:dd:ea:d6:8f:2e:d6:de:93:
                    e9:51:63:7f:1d:fc:d1:97:80:de:61:c0:54:54:67:
                    47:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FA:6C:4E:55:67:C2:98:20:55:B8:DD:0D:A8:D1:B6:8C:14:6B:8D
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313331363a3a2f34382d3438203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:1316::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:de:84:da:cd:68:79:d5:67:ea:20:22:ee:bb:69:63:f1:13:
         f9:cb:2a:fd:fa:97:c7:ce:74:b7:24:ea:3f:0b:57:a1:bc:da:
         ec:67:61:20:b1:0c:b4:b1:36:a8:6a:2b:ec:8a:b7:39:12:b2:
         db:b5:68:31:d5:83:0d:c8:65:89:6c:c5:47:ba:76:08:3b:9b:
         ce:05:07:3e:1a:c5:49:2c:1e:4d:96:42:2e:07:c8:73:ea:42:
         e0:21:8c:28:e8:05:1e:81:4a:da:3f:40:76:ce:de:f1:d4:a8:
         fc:fc:9c:b5:11:34:13:4e:52:7c:8e:d5:c0:5a:c7:3d:8e:5f:
         a9:c7:15:10:41:4a:73:d1:69:ca:48:80:36:ec:56:a4:75:44:
         04:96:89:63:25:0a:ad:02:98:2a:5c:10:20:50:07:ce:6d:41:
         68:4a:14:ac:95:20:13:e3:89:79:0d:43:bc:0b:3a:36:7b:62:
         66:a7:95:c3:ca:d8:0d:9d:2e:d7:d0:ad:35:b7:b1:99:21:e5:
         a6:e4:e0:22:4b:a4:91:3f:de:34:84:05:5d:60:15:2b:dd:20:
         dd:6c:05:c5:f6:97:69:43:c5:32:e2:26:2d:aa:16:9f:20:6b:
         8a:2b:bb:e8:89:54:cf:75:44:e5:a8:a0:09:33:85:1e:60:19:
         f6:f0:1b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:01:17 2026 by rpki-client