Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa
File:                     323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa (raw, json)
Hash identifier:          hRmLydWmcfazDzBdzKkHMSyYRS6IDeOppP0EGdhb/JQ=
Subject key identifier:   23:E8:C2:D0:9B:40:7F:B8:82:E9:A6:AF:85:86:2F:1F:A9:50:33:32
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       580EB611FE708FF1B769F566489F809D2D9052DE
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa
Signing time:             Tue 02 Jun 2026 12:17:45 +0000
ROA not before:           Tue 02 Jun 2026 12:12:45 +0000
ROA not after:            Tue 01 Jun 2027 12:17:45 +0000
asID:                     214955
IP address blocks:        2602:f92a:a46d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 00:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0e:b6:11:fe:70:8f:f1:b7:69:f5:66:48:9f:80:9d:2d:90:52:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Jun  2 12:12:45 2026 GMT
            Not After : Jun  1 12:17:45 2027 GMT
        Subject: CN=23E8C2D09B407FB882E9A6AF85862F1FA9503332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5b:95:ce:17:ed:1b:7f:ab:a1:58:ee:ad:78:
                    0c:ff:9b:97:08:d2:2f:77:d4:9f:74:e0:ae:ea:9a:
                    64:b6:44:f6:33:cd:d5:96:57:ca:bc:72:b1:f3:fa:
                    0b:8b:84:e0:79:6e:f6:fd:d7:f3:ac:fd:7b:24:fd:
                    dd:a3:8e:2b:92:8f:75:58:cc:dd:26:2d:05:40:86:
                    0b:dc:eb:e9:c1:c9:14:58:70:52:70:0d:a9:a4:1b:
                    2c:b8:ba:b6:ba:e1:6e:65:3b:15:f1:05:16:56:1b:
                    97:ed:5b:8c:9b:8a:77:13:ff:4b:3f:b5:52:36:86:
                    fb:6f:a9:c8:e1:cb:01:97:f6:dc:10:ed:99:69:e5:
                    90:61:d0:7f:65:08:b1:5a:21:c8:a3:23:30:9a:05:
                    00:ef:2c:51:ae:39:39:3c:37:f6:ec:e9:69:a0:18:
                    4c:a4:8f:b5:97:2f:10:50:a7:29:c8:45:c4:df:ae:
                    20:62:07:de:6a:ff:1a:5d:91:83:69:6a:91:81:3b:
                    ac:e5:47:b3:5b:62:32:2b:1d:7b:53:f8:2b:23:d5:
                    b4:29:88:ba:57:9a:a1:0f:94:cd:ec:14:1b:ab:d6:
                    2e:78:96:2c:f2:c9:55:dd:69:c1:90:e4:b6:7e:59:
                    4e:07:0f:e7:ec:3d:4c:72:c3:f0:94:31:0f:8c:f8:
                    31:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E8:C2:D0:9B:40:7F:B8:82:E9:A6:AF:85:86:2F:1F:A9:50:33:32
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a46d::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:49:39:b0:47:10:67:55:85:40:f7:3e:11:6d:93:a7:a9:06:
         5e:f2:05:6b:a2:f2:68:8f:e1:82:92:f0:79:e8:88:ef:73:a7:
         cb:32:be:e0:54:4c:ff:94:53:e1:78:0f:59:0e:d0:c3:36:13:
         3e:31:eb:1a:c4:f9:ef:dc:6f:f6:38:ab:65:6e:97:c0:d5:ba:
         a0:cf:6f:9f:5b:b2:39:dd:d3:75:63:b1:4f:ea:8c:53:b4:44:
         f2:40:a9:be:4c:d1:83:b6:41:fa:d0:9d:6e:84:d2:4c:a2:5d:
         5e:f0:b0:d1:60:f2:7c:16:a9:33:ff:fa:a4:cb:73:7d:98:9a:
         2d:7c:b4:8a:30:57:2b:2b:23:3d:90:8b:37:1f:a1:8f:d7:36:
         fe:67:de:49:eb:d0:07:a1:4d:88:d9:94:93:b7:79:0b:1c:04:
         6d:e5:8c:25:4e:e9:ff:a6:9c:58:00:05:d3:a1:69:4f:64:32:
         8b:2f:aa:40:58:7b:3d:37:40:42:2b:9f:62:bb:3e:95:ae:9c:
         d6:b3:fc:ac:91:e3:33:56:2d:4f:40:13:28:fe:8b:9d:88:32:
         78:74:d4:fa:f3:46:c8:ca:de:12:29:7e:73:b0:44:ed:bc:e6:
         1e:31:c4:61:23:66:2c:50:03:cd:f6:b1:4b:7a:90:3d:df:52:
         b0:34:04:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:25 2026 by rpki-client