Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613435303a3a2f34342d3438203d3e20323037363138.roa
File:                     323630323a663932613a613435303a3a2f34342d3438203d3e20323037363138.roa (raw, json)
Hash identifier:          wMJaCx/oJIr9tqUJ+x/RNO6ixDffZOKO0l1RGPAlg0Q=
Subject key identifier:   63:1E:6D:6B:ED:33:8C:05:B2:84:F4:AB:D1:AC:81:56:A5:8D:7F:9A
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       67C678CFF1D0A13D4EC6C9774897DFA1F9E16CAD
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613435303a3a2f34342d3438203d3e20323037363138.roa
Signing time:             Tue 02 Jun 2026 12:17:46 +0000
ROA not before:           Tue 02 Jun 2026 12:12:46 +0000
ROA not after:            Tue 01 Jun 2027 12:17:46 +0000
asID:                     207618
IP address blocks:        2602:f92a:a450::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 01:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c6:78:cf:f1:d0:a1:3d:4e:c6:c9:77:48:97:df:a1:f9:e1:6c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Jun  2 12:12:46 2026 GMT
            Not After : Jun  1 12:17:46 2027 GMT
        Subject: CN=631E6D6BED338C05B284F4ABD1AC8156A58D7F9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:10:d1:e9:58:7b:94:ed:8c:44:cb:e4:a0:65:
                    a0:1b:eb:ca:d4:af:69:12:55:05:be:fe:47:a6:6c:
                    a0:5a:51:18:bc:6c:4e:de:77:72:63:8c:3d:94:56:
                    f5:f3:8a:cc:94:13:bf:e1:cf:e4:d3:58:5a:b8:1a:
                    65:2a:f1:1f:8e:90:76:e5:10:61:c0:df:cd:2e:08:
                    4e:c9:15:29:7f:8a:22:3c:85:c1:a7:29:fa:46:0b:
                    f4:2f:b6:d2:3c:0c:56:02:23:56:2f:a3:aa:78:02:
                    57:3d:ce:8a:8f:4f:98:d4:09:58:03:5b:ec:40:ad:
                    fa:73:cb:63:48:86:f3:72:90:e0:12:22:95:b9:70:
                    28:0f:32:6e:e2:ea:e8:dd:22:97:e3:1c:a5:aa:cb:
                    37:9f:cb:1d:38:87:0b:19:63:2d:5b:38:ba:e2:7c:
                    13:f7:c1:b2:1c:52:9f:6e:a9:ff:4d:e8:76:22:5d:
                    c0:63:34:8e:9a:a4:d7:eb:08:94:e1:dd:72:64:95:
                    f0:88:74:0a:c6:89:a0:fb:dc:e1:01:9a:aa:19:e3:
                    e0:7a:dd:5a:24:94:4d:64:99:a4:43:7e:90:1c:f9:
                    dd:97:46:e4:75:37:12:e0:a0:bc:7f:b5:0c:ba:5a:
                    25:b1:77:6b:f1:e7:1b:e9:14:03:21:3b:3b:c1:bd:
                    5e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1E:6D:6B:ED:33:8C:05:B2:84:F4:AB:D1:AC:81:56:A5:8D:7F:9A
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613435303a3a2f34342d3438203d3e20323037363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a450::/44

    Signature Algorithm: sha256WithRSAEncryption
         64:55:91:19:51:25:b8:42:f5:a7:6e:b2:90:74:a3:8c:56:1e:
         79:9f:8f:1e:c8:fa:73:ac:25:e7:e3:e2:d1:a8:6d:47:14:4a:
         c2:fe:94:77:da:85:4e:40:6a:5b:ea:e6:29:bd:9d:b5:12:ca:
         78:e0:a3:74:3b:44:da:84:2c:fb:9b:f5:07:56:ba:87:57:cf:
         ab:24:80:f3:08:05:d2:ed:4a:35:8a:26:d0:ba:34:39:77:39:
         5c:d2:0e:69:4a:73:68:75:c5:f2:9f:3b:f0:18:1e:5b:c6:df:
         9b:13:8a:21:f0:8d:e4:de:37:08:4e:43:b2:12:92:3b:25:1b:
         67:1b:4f:99:47:8a:3d:a5:1a:d3:53:b5:b4:7c:99:99:e3:3c:
         53:bf:fe:41:ba:4e:a0:e8:c5:18:98:0d:2f:70:aa:db:c6:05:
         90:d5:34:2c:e2:c0:1d:0c:ac:ef:e2:44:0a:98:b8:e6:53:ab:
         aa:b4:d4:5e:0b:4f:dc:1e:ee:55:4c:49:6b:cd:99:4f:1a:3c:
         69:bd:0e:8f:70:08:21:79:92:e0:18:99:e7:62:ec:14:a0:f8:
         e4:12:42:a4:de:0d:e5:be:74:7c:a4:0b:46:5a:d5:66:62:52:
         b4:a7:6d:6f:ba:24:97:5c:99:9b:97:88:2f:43:37:86:8b:c2:
         30:14:de:cd
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIUZ8Z4z/HQoT1Oxsl3SJffofnhbK0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4
ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYwNjAyMTIxMjQ2WhcNMjcwNjAxMTIxNzQ2
WjAzMTEwLwYDVQQDEyg2MzFFNkQ2QkVEMzM4QzA1QjI4NEY0QUJEMUFDODE1NkE1
OEQ3RjlBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhDR6Vh7lO2M
RMvkoGWgG+vK1K9pElUFvv5HpmygWlEYvGxO3ndyY4w9lFb184rMlBO/4c/k01ha
uBplKvEfjpB25RBhwN/NLghOyRUpf4oiPIXBpyn6Rgv0L7bSPAxWAiNWL6OqeAJX
Pc6Kj0+Y1AlYA1vsQK36c8tjSIbzcpDgEiKVuXAoDzJu4uro3SKX4xylqss3n8sd
OIcLGWMtWzi64nwT98GyHFKfbqn/Teh2Il3AYzSOmqTX6wiU4d1yZJXwiHQKxomg
+9zhAZqqGePget1aJJRNZJmkQ36QHPndl0bkdTcS4KC8f7UMulolsXdr8ecb6RQD
ITs7wb1ewQIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFGMebWvtM4wFsoT0q9GsgVal
jX+aMB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5
LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4
NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt
NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k
OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi
NWQ4YTU5YTI2NDUwYzguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH
MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy
M2E2NjM5MzI2MTNhNjEzNDM1MzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjMw
MzczNjMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwQmAvkqpFAwDQYJKoZIhvcNAQELBQADggEBAGRV
kRlRJbhC9aduspB0o4xWHnmfjx7I+nOsJefj4tGobUcUSsL+lHfahU5Aalvq5im9
nbUSynjgo3Q7RNqELPub9QdWuodXz6skgPMIBdLtSjWKJtC6NDl3OVzSDmlKc2h1
xfKfO/AYHlvG35sTiiHwjeTeNwhOQ7ISkjslG2cbT5lHij2lGtNTtbR8mZnjPFO/
/kG6TqDoxRiYDS9wqtvGBZDVNCziwB0MrO/iRAqYuOZTq6q01F4LT9we7lVMSWvN
mU8aPGm9Do9wCCF5kuAYmedi7BSg+OQSQqTeDeW+dHykC0Za1WZiUrSnbW+6JJdc
mZuXiC9DN4aLwjAU3s0=
-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:26 2026 by rpki-client