Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436633a3a2f34382d3438203d3e203531303837.roa
File:                     323630323a663932613a613436633a3a2f34382d3438203d3e203531303837.roa (raw, json)
Hash identifier:          w+kswlstGUjehlV0i/f3q0SmHbC+Fze6Op5EkzWRpfQ=
Subject key identifier:   27:AC:71:03:EC:4E:3F:74:1D:F6:DB:59:F3:35:BB:01:CE:D7:6B:0F
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       2A8412E51E07A0EEE6E5D71B8CA727034A1FB4C5
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436633a3a2f34382d3438203d3e203531303837.roa
Signing time:             Tue 02 Jun 2026 12:17:40 +0000
ROA not before:           Tue 02 Jun 2026 12:12:40 +0000
ROA not after:            Tue 01 Jun 2027 12:17:40 +0000
asID:                     51087
IP address blocks:        2602:f92a:a46c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 01:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:84:12:e5:1e:07:a0:ee:e6:e5:d7:1b:8c:a7:27:03:4a:1f:b4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Jun  2 12:12:40 2026 GMT
            Not After : Jun  1 12:17:40 2027 GMT
        Subject: CN=27AC7103EC4E3F741DF6DB59F335BB01CED76B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ed:69:32:4a:56:68:56:b2:e1:7a:e4:c2:6a:
                    58:61:f2:4f:5a:44:77:71:03:5b:e7:7b:68:7a:49:
                    d6:f3:ea:71:16:b8:9d:99:f2:87:dc:77:d2:21:18:
                    a0:8f:80:4e:5f:7b:73:a0:e0:42:4e:af:06:fe:40:
                    6f:5b:81:90:8b:d4:a4:d0:c5:6b:ef:90:82:2c:88:
                    43:ee:8e:c1:c5:cd:e0:7d:38:b0:d7:c7:36:19:da:
                    02:30:2f:7e:f4:18:aa:2c:74:d8:40:c9:ae:cd:09:
                    dc:1b:61:53:f3:6a:e8:20:ee:7c:e9:08:6b:2c:8b:
                    af:11:29:a1:c0:16:3a:47:d3:94:26:52:5c:27:48:
                    28:22:6e:9d:74:07:17:18:1a:4c:c0:06:18:45:92:
                    47:18:25:da:b8:16:4c:b3:b5:7d:7b:44:ab:52:82:
                    d7:af:1d:23:a0:b3:be:bb:3a:59:3b:93:ac:57:f7:
                    40:80:6b:8c:6b:7f:3f:be:f6:94:aa:e9:cd:fd:64:
                    f9:19:66:14:8a:6b:ac:ce:5b:e6:a5:5d:b4:bd:24:
                    71:fa:29:3f:d4:a2:3b:30:64:4f:b7:c5:68:f5:e4:
                    c0:97:08:17:69:b1:87:9f:c6:b6:e4:0c:d3:ad:74:
                    ad:33:76:40:fa:41:a1:3c:2a:ca:f3:9d:48:8d:15:
                    a0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AC:71:03:EC:4E:3F:74:1D:F6:DB:59:F3:35:BB:01:CE:D7:6B:0F
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436633a3a2f34382d3438203d3e203531303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a46c::/48

    Signature Algorithm: sha256WithRSAEncryption
         d9:0d:55:ca:60:27:f3:54:fe:d7:74:28:5a:35:fe:fd:10:a3:
         6f:ad:cc:47:e9:1e:ec:4d:d0:c8:24:ec:8a:e8:db:8c:71:ce:
         7a:58:cf:68:21:b4:03:0e:ea:39:dc:34:58:23:5d:db:94:32:
         0d:c0:7c:82:28:a1:d8:ad:4e:d0:a5:8e:ba:54:3c:d1:a0:1a:
         4c:4a:f5:a3:df:0d:d9:05:2b:1e:3d:6f:6c:d5:e4:46:53:10:
         ce:a6:88:1f:a3:4e:e3:d4:7d:22:c7:01:e0:c9:7f:5f:92:97:
         c1:08:00:ac:ac:00:8f:a5:5a:71:92:38:14:95:ae:59:81:df:
         27:76:64:0f:71:7c:09:ad:84:85:4b:1d:fd:3b:0d:08:5f:fa:
         a1:61:b7:a0:95:15:2e:b2:f5:e1:17:e3:ff:42:04:44:d1:38:
         8a:7f:ab:96:b8:68:d8:6d:2b:1e:6c:cd:f3:b8:72:2b:29:80:
         3e:40:31:e9:bd:58:8c:9b:2c:d4:d6:2d:7d:23:1a:36:89:2d:
         0c:72:90:cb:24:42:3a:7f:48:f1:2c:59:7f:cc:e8:80:11:60:
         ef:2d:67:c3:26:a5:0e:f3:44:26:d3:d2:d3:a3:a2:ec:c8:9f:
         63:d1:0f:da:fb:b3:50:6e:a8:e9:5a:97:03:b3:06:c9:37:91:
         a0:ea:bb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:03 2026 by rpki-client