Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436303a3a2f34382d3438203d3e20313430363832.roa
File:                     323630323a663932613a613436303a3a2f34382d3438203d3e20313430363832.roa (raw, json)
Hash identifier:          Co7gtWebQzN+Uxmyz98AFg3I4g0p540cVklK38VZR8U=
Subject key identifier:   EA:7D:0C:6F:A2:AE:14:46:DF:A4:34:F0:2C:E4:9E:0E:52:EC:0E:22
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       772DBBCF085566553924EB5C24EA0C93EAE03EAA
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436303a3a2f34382d3438203d3e20313430363832.roa
Signing time:             Tue 02 Jun 2026 12:17:55 +0000
ROA not before:           Tue 02 Jun 2026 12:12:55 +0000
ROA not after:            Tue 01 Jun 2027 12:17:55 +0000
asID:                     140682
IP address blocks:        2602:f92a:a460::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 00:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:2d:bb:cf:08:55:66:55:39:24:eb:5c:24:ea:0c:93:ea:e0:3e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Jun  2 12:12:55 2026 GMT
            Not After : Jun  1 12:17:55 2027 GMT
        Subject: CN=EA7D0C6FA2AE1446DFA434F02CE49E0E52EC0E22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:93:ee:8f:99:c2:3b:c3:14:d2:dc:b3:8b:
                    f5:6a:e7:91:f3:74:ac:1f:d0:66:37:51:ab:e9:7a:
                    cd:f7:b8:d4:f9:b2:28:19:4f:01:ed:d8:bc:92:e5:
                    20:82:cd:24:8c:5c:e8:a3:c4:b0:31:c0:82:ad:c9:
                    9c:7e:70:6d:43:28:75:2a:cb:85:f3:90:4d:ec:eb:
                    d0:c4:27:81:95:69:f3:b9:a5:ab:98:51:4e:f8:53:
                    75:8a:45:a4:cd:19:61:6d:7e:37:91:d2:0c:b0:4d:
                    7d:d8:98:46:d4:f2:b7:ea:b3:82:d0:b0:bb:04:ac:
                    81:8d:48:ea:d1:1b:1b:c6:a5:bd:f6:43:47:d1:f3:
                    fa:27:83:31:8e:5b:d1:7a:25:c3:21:1c:ee:25:72:
                    7b:c4:cf:75:6e:2e:3b:98:74:22:9c:12:ed:7d:68:
                    cb:03:15:86:d1:d7:8f:cc:37:c9:5b:d6:45:91:70:
                    b7:cc:a4:59:6c:61:79:fc:9f:2e:fa:0d:2f:f7:bb:
                    a7:90:20:2c:61:d1:3e:9d:68:4f:5e:ff:62:0d:e7:
                    7c:97:fe:81:4f:e0:d3:7f:bd:9d:76:9f:07:b8:88:
                    aa:3a:04:94:cc:8c:9a:99:4c:89:80:99:2d:27:81:
                    3b:8d:a6:f5:42:26:18:00:bd:ee:0e:d9:0a:3d:43:
                    a6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7D:0C:6F:A2:AE:14:46:DF:A4:34:F0:2C:E4:9E:0E:52:EC:0E:22
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436303a3a2f34382d3438203d3e20313430363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a460::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:d3:17:c2:4f:ce:c9:17:7c:64:e7:3c:69:c2:62:88:4d:34:
         22:43:b4:0b:22:9a:c3:70:14:59:30:f2:39:9d:14:05:87:f2:
         d3:cc:7c:a2:8a:8f:f9:6d:45:55:44:8e:06:e2:ac:3b:1c:42:
         b2:1e:2a:c0:4c:4e:39:b8:91:2e:06:2e:31:53:a2:b1:4b:f6:
         af:21:15:f5:f9:28:70:be:41:d4:d1:33:6a:20:5c:76:64:8a:
         1c:a1:9a:9c:72:51:a8:37:ff:97:fc:04:8e:b0:c2:25:0c:64:
         51:4a:e6:c5:f3:60:84:3e:ba:c8:ae:8a:48:57:05:39:d0:ce:
         87:ec:00:7a:06:f8:2c:f8:43:b6:d3:3a:f7:09:1f:ea:9f:3f:
         ad:17:0d:d3:33:4e:35:d5:aa:57:71:1a:93:62:48:5d:96:44:
         49:d0:d5:73:12:63:9f:b9:5a:43:7b:f7:fd:ff:0c:9a:f2:85:
         39:76:b1:19:1a:41:7b:a6:f4:92:a8:bf:c1:ba:77:33:e3:dd:
         a2:28:d5:00:64:d5:2d:34:84:9f:6b:bd:f9:7c:33:b8:59:3f:
         3d:d5:ce:da:0d:61:af:dd:13:06:cb:13:8c:2f:d7:02:59:31:
         4f:bc:87:9a:2b:66:4d:21:bd:e4:56:e5:e4:8b:12:fc:cc:44:
         85:48:38:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:39 2026 by rpki-client