Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332353a3a2f34382d3438203d3e20323138363638.roa
File:                     323630323a663932613a313332353a3a2f34382d3438203d3e20323138363638.roa (raw, json)
Hash identifier:          0CSLc9/U/LBjoM6KltGXFkarbgj/4b8PhwP37cHowmM=
Subject key identifier:   12:76:C9:44:5E:96:97:E7:98:5F:96:91:59:E7:2D:10:1B:65:1C:5A
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       12265B0C83F3473B0678EC3B709D20E42AEDF9CA
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332353a3a2f34382d3438203d3e20323138363638.roa
Signing time:             Fri 23 Oct 2026 00:11:59 +0000
ROA not before:           Fri 23 Oct 2026 00:06:59 +0000
ROA not after:            Fri 22 Oct 2027 00:11:59 +0000
asID:                     218668
IP address blocks:        2602:f92a:1325::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 04:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:26:5b:0c:83:f3:47:3b:06:78:ec:3b:70:9d:20:e4:2a:ed:f9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Oct 23 00:06:59 2026 GMT
            Not After : Oct 22 00:11:59 2027 GMT
        Subject: CN=1276C9445E9697E7985F969159E72D101B651C5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f9:f8:03:c5:f7:77:9f:bb:74:08:8d:6d:c5:
                    6c:cb:ab:ab:d8:c8:97:60:f6:d7:3f:c1:eb:d8:3b:
                    e5:49:ce:ba:51:c6:10:ee:01:cb:af:ab:69:31:88:
                    09:28:0d:9a:79:e0:06:82:f5:e3:bd:00:2a:8b:1d:
                    dc:7c:29:3a:e3:7e:a6:0c:ad:e5:39:58:71:64:7b:
                    86:d9:df:ca:c1:3f:d9:3f:6e:0a:fa:14:86:2a:1a:
                    9f:f0:a7:31:f0:3d:47:b5:30:69:d8:7b:81:c6:71:
                    7e:04:89:20:f6:fb:a0:3f:66:ab:ad:af:66:e7:16:
                    3d:9a:39:79:d9:14:b5:cf:06:b4:76:dd:71:73:de:
                    c6:84:ff:7c:69:29:96:a6:3c:f6:74:cc:6d:62:19:
                    96:35:f9:60:eb:4f:0d:e5:cf:86:03:cf:27:89:ea:
                    12:7a:de:21:2c:98:c5:9f:a0:3d:09:9a:53:cb:f5:
                    4b:8b:7a:c3:3c:33:99:ec:e9:fd:37:bf:0e:13:33:
                    1d:97:fa:e6:c9:4c:af:6d:03:01:3e:eb:b0:15:52:
                    38:01:6b:3c:73:1e:a7:9d:a8:59:7b:f6:23:50:ca:
                    02:c8:be:d2:c6:22:64:2e:b1:a7:da:7c:d0:4b:70:
                    1d:6e:f1:58:70:a4:e9:53:3b:89:07:68:c7:2e:ea:
                    29:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:76:C9:44:5E:96:97:E7:98:5F:96:91:59:E7:2D:10:1B:65:1C:5A
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a313332353a3a2f34382d3438203d3e20323138363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:1325::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:a6:f0:5c:16:48:eb:c2:01:d0:57:98:4b:52:ca:15:70:2c:
         e7:44:4a:14:65:11:0c:2f:e2:65:17:7a:80:7a:8b:3d:cd:b2:
         91:92:ae:2e:2f:c8:95:1f:74:fb:28:6e:34:76:3b:ab:f7:fa:
         b5:ea:b4:59:94:95:c0:a0:a5:85:d4:d0:b8:b6:a6:6f:99:6d:
         11:83:42:e6:51:d3:e6:dc:e2:ea:32:72:90:db:93:f9:5c:d7:
         dd:3d:33:f0:cb:b8:14:11:6d:77:6f:67:09:c1:75:53:a1:5c:
         26:9a:db:06:ad:a9:cf:4d:0b:c0:1d:7c:79:89:4e:a5:e6:6f:
         c2:29:5c:3b:b1:0a:56:c9:9b:0c:bc:25:ba:c7:90:c9:f3:af:
         1f:67:ac:45:cf:35:45:4a:5c:08:96:aa:b6:9a:1e:af:9a:c8:
         27:af:46:e2:76:8b:2b:03:cc:05:f3:c2:09:9d:5f:dc:2a:ee:
         67:e4:4f:b9:17:77:22:ee:89:2f:0a:4f:3d:8c:f6:7c:38:25:
         60:8b:fe:fb:36:c1:47:b3:c9:b7:d3:c2:5e:f7:66:4c:3d:3b:
         97:51:da:c3:e1:fa:d7:94:26:fc:af:dd:93:03:8a:9a:02:c1:
         c7:4c:85:e5:ae:91:8e:3a:dd:68:bc:85:35:6f:4c:a8:f3:dd:
         ae:0e:54:4c
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIUEiZbDIPzRzsGeOw7cJ0g5Crt+cowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4
ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYxMDIzMDAwNjU5WhcNMjcxMDIyMDAxMTU5
WjAzMTEwLwYDVQQDEygxMjc2Qzk0NDVFOTY5N0U3OTg1Rjk2OTE1OUU3MkQxMDFC
NjUxQzVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvn4A8X3d5+7
dAiNbcVsy6ur2MiXYPbXP8Hr2DvlSc66UcYQ7gHLr6tpMYgJKA2aeeAGgvXjvQAq
ix3cfCk6436mDK3lOVhxZHuG2d/KwT/ZP24K+hSGKhqf8Kcx8D1HtTBp2HuBxnF+
BIkg9vugP2arra9m5xY9mjl52RS1zwa0dt1xc97GhP98aSmWpjz2dMxtYhmWNflg
608N5c+GA88nieoSet4hLJjFn6A9CZpTy/VLi3rDPDOZ7On9N78OEzMdl/rmyUyv
bQMBPuuwFVI4AWs8cx6nnahZe/YjUMoCyL7SxiJkLrGn2nzQS3AdbvFYcKTpUzuJ
B2jHLuopKQIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFBJ2yURelpfnmF+WkVnnLRAb
ZRxaMB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5
LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4
NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt
NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k
OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi
NWQ4YTU5YTI2NDUwYzguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH
MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy
M2E2NjM5MzI2MTNhMzEzMzMyMzUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMx
MzgzNjM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAmAvkqEyUwDQYJKoZIhvcNAQELBQADggEBAIim
8FwWSOvCAdBXmEtSyhVwLOdEShRlEQwv4mUXeoB6iz3NspGSri4vyJUfdPsobjR2
O6v3+rXqtFmUlcCgpYXU0Li2pm+ZbRGDQuZR0+bc4uoycpDbk/lc1909M/DLuBQR
bXdvZwnBdVOhXCaa2watqc9NC8AdfHmJTqXmb8IpXDuxClbJmwy8JbrHkMnzrx9n
rEXPNUVKXAiWqraaHq+ayCevRuJ2iysDzAXzwgmdX9wq7mfkT7kXdyLuiS8KTz2M
9nw4JWCL/vs2wUezybfTwl73Zkw9O5dR2sPh+teUJvyv3ZMDipoCwcdMheWukY46
3Wi8hTVvTKjz3a4OVEw=
-----END CERTIFICATE-----
Generated at Fri Oct 23 14:10:30 2026 by rpki-client