Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613434303a3a2f34342d3438203d3e20323032373334.roa
File:                     323630323a663932613a613434303a3a2f34342d3438203d3e20323032373334.roa (raw, json)
Hash identifier:          /x54sy04KEBkncUVDv1v3lPj5HzRLggu5W3Ev+kqzzc=
Subject key identifier:   CA:27:57:41:98:07:C2:79:58:E5:1E:53:AB:98:1E:5B:30:3D:F0:2E
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       493E1FA3D90DC498F4E0F8106CE070E2C5CDD05B
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613434303a3a2f34342d3438203d3e20323032373334.roa
Signing time:             Tue 02 Jun 2026 12:17:55 +0000
ROA not before:           Tue 02 Jun 2026 12:12:55 +0000
ROA not after:            Tue 01 Jun 2027 12:17:55 +0000
asID:                     202734
IP address blocks:        2602:f92a:a440::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 01:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:3e:1f:a3:d9:0d:c4:98:f4:e0:f8:10:6c:e0:70:e2:c5:cd:d0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Jun  2 12:12:55 2026 GMT
            Not After : Jun  1 12:17:55 2027 GMT
        Subject: CN=CA2757419807C27958E51E53AB981E5B303DF02E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e0:55:91:0a:ba:af:9e:ba:14:72:ac:b2:4c:
                    fd:22:45:4c:37:ff:1f:37:a9:e9:45:5b:c2:76:55:
                    01:c6:10:19:52:a6:64:b5:27:3e:73:9f:a9:51:5f:
                    90:2f:bf:89:0d:0e:62:00:b6:98:f0:46:aa:42:84:
                    ce:45:67:54:53:02:ec:42:4a:51:b4:d9:04:47:f6:
                    70:a8:bc:d6:de:6e:e2:27:c3:4e:18:62:83:e6:d3:
                    d6:db:1f:b4:fd:6d:5d:c5:c4:73:88:ef:57:27:6d:
                    8d:f6:ca:bf:49:68:4f:16:73:6e:d5:ab:d3:b5:86:
                    0d:d0:b6:95:04:38:3e:46:da:57:79:fe:a6:d6:d3:
                    13:d9:fd:3b:22:2a:03:50:fe:38:05:51:17:7d:52:
                    3c:e2:56:65:e1:31:cd:78:d6:76:f3:db:ca:7e:86:
                    88:4e:69:f4:82:cc:9c:99:de:fb:c3:aa:04:8d:bf:
                    73:4f:88:b8:3b:6d:02:8d:cb:42:50:03:b3:15:36:
                    4f:1c:79:21:ba:54:dd:10:b8:2e:35:36:43:69:9a:
                    2c:62:3b:aa:3a:a3:94:10:a3:7a:bd:18:a2:2d:22:
                    e8:b4:ed:89:d1:18:81:fe:e2:23:ec:8b:2b:ee:9b:
                    a0:be:bf:dc:c7:75:4f:22:01:b3:e1:8a:8c:69:6e:
                    73:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:27:57:41:98:07:C2:79:58:E5:1E:53:AB:98:1E:5B:30:3D:F0:2E
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613434303a3a2f34342d3438203d3e20323032373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a440::/44

    Signature Algorithm: sha256WithRSAEncryption
         69:27:89:10:45:ec:e9:f6:92:93:ad:29:43:53:d7:d7:bb:e9:
         5f:b2:4e:21:52:25:8f:4d:fc:ba:44:8c:3e:88:c5:26:d9:09:
         0b:1c:ca:0e:c5:bd:a9:e8:bc:8f:9b:57:e0:f0:73:42:50:9e:
         be:02:59:4a:57:a5:db:89:b9:8a:7d:b9:fb:68:4e:0a:98:a2:
         8e:84:ce:a7:93:04:c2:1e:18:b5:02:32:f2:85:37:30:56:92:
         03:e4:65:f1:ec:cb:29:41:33:95:5e:c6:d2:d3:85:22:41:57:
         d4:ba:c2:ff:a9:e3:7e:f5:c7:b9:5c:22:21:90:e1:7e:b8:ba:
         4d:e2:ee:fd:6a:a6:24:6d:c3:48:fd:19:3e:5b:ac:94:19:44:
         1c:75:ec:77:27:ff:83:0e:8c:bf:7b:57:01:92:74:61:b6:c1:
         33:18:9d:9d:fb:86:9a:95:f6:ca:ec:26:51:2b:c3:85:fc:06:
         10:ec:97:76:04:74:8c:42:56:62:8f:62:18:b5:a8:aa:58:d1:
         9d:49:36:2d:47:03:c5:71:a3:e7:19:ef:00:6c:fb:dc:8f:f1:
         20:fe:6c:96:4b:8c:91:a7:a2:e2:8d:a3:5a:5e:a8:36:02:e9:
         db:69:60:70:54:ec:60:32:68:3c:c7:01:ae:98:73:6e:a7:16:
         75:d7:fe:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:39 2026 by rpki-client