Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436663a3a2f34382d3438203d3e20323134393333.roa
File:                     323630323a663932613a613436663a3a2f34382d3438203d3e20323134393333.roa (raw, json)
Hash identifier:          v3TpS4epPl5elch9fS0clgTO9S6Z6X4LFJOxX7pUzYg=
Subject key identifier:   C1:10:4E:6B:C9:46:5F:E2:F2:DE:21:9E:D8:3C:E0:14:AA:05:DD:4E
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       6D865902EBC606A02967F12D115A97F8852BE263
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436663a3a2f34382d3438203d3e20323134393333.roa
Signing time:             Tue 02 Jun 2026 12:17:47 +0000
ROA not before:           Tue 02 Jun 2026 12:12:47 +0000
ROA not after:            Tue 01 Jun 2027 12:17:47 +0000
asID:                     214933
IP address blocks:        2602:f92a:a46f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 01:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:86:59:02:eb:c6:06:a0:29:67:f1:2d:11:5a:97:f8:85:2b:e2:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Jun  2 12:12:47 2026 GMT
            Not After : Jun  1 12:17:47 2027 GMT
        Subject: CN=C1104E6BC9465FE2F2DE219ED83CE014AA05DD4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7c:19:12:61:4c:ee:24:40:30:68:e9:1e:81:
                    56:ba:51:cf:93:5d:a0:eb:78:d7:90:e0:e6:0d:e7:
                    b9:0c:27:f4:8a:2d:19:2f:00:f2:a3:58:62:47:a0:
                    6f:68:fd:b6:2c:ae:8a:d8:53:7f:ba:6a:43:65:b8:
                    bf:40:74:b5:64:58:5e:1a:0a:10:99:d8:67:e1:1f:
                    27:e0:7b:21:e0:f5:a7:4f:4b:b5:5c:ac:93:68:76:
                    34:e3:a1:f2:fe:71:34:07:e6:61:76:e7:e8:a7:ce:
                    9f:b2:a7:d4:7c:8e:68:ed:a9:c2:b9:fe:76:7c:ca:
                    60:da:83:6e:66:6a:a0:ad:ad:bc:f4:75:a9:84:c8:
                    96:ca:70:8b:29:95:92:2e:4f:e5:24:b7:cb:b6:3f:
                    19:f1:44:d9:f4:1d:32:12:91:df:a3:3f:6e:05:6b:
                    32:6f:59:05:9c:19:f2:1c:59:60:17:1f:e0:f4:38:
                    6c:38:f1:a0:0b:a6:46:d7:16:b0:81:e7:f5:47:9a:
                    dc:e5:a0:82:b5:d0:98:4e:14:78:d3:a1:17:e2:23:
                    57:11:96:a7:98:fb:bd:bc:98:a5:f6:46:30:3b:97:
                    ed:a5:ae:9d:7d:24:c6:1f:bb:aa:8b:03:d3:6f:12:
                    a4:4f:60:e4:24:30:e1:f8:35:a2:fd:47:b6:30:0a:
                    5e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:10:4E:6B:C9:46:5F:E2:F2:DE:21:9E:D8:3C:E0:14:AA:05:DD:4E
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436663a3a2f34382d3438203d3e20323134393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a46f::/48

    Signature Algorithm: sha256WithRSAEncryption
         d8:aa:8e:37:eb:93:4d:ff:14:28:fa:7d:40:da:6a:76:c6:d1:
         55:af:5e:06:d5:a8:e5:b6:45:ae:1b:44:21:a6:33:b3:a0:70:
         6a:0d:11:92:2c:4f:7c:27:40:91:3e:98:68:e7:64:66:01:f8:
         4e:3d:ca:b5:b4:f1:b4:19:ee:ae:b4:34:8d:9f:f3:90:07:e2:
         89:a2:e0:c3:15:29:ad:0c:82:41:a2:13:36:16:67:97:62:cc:
         7a:51:89:06:90:62:bb:de:15:6b:b4:3c:b6:af:22:00:ed:82:
         09:33:47:24:2d:7f:3b:10:ce:4c:91:e1:4a:32:32:bd:b5:0e:
         04:c3:fd:8a:fe:42:f6:49:7f:df:95:c6:24:f1:b3:54:c0:b4:
         5e:23:e3:25:98:7c:0d:56:6e:5e:ff:6b:2e:62:2d:48:61:e1:
         31:9f:fc:fa:73:18:8f:e5:43:ed:28:f4:57:fc:38:f4:f0:78:
         33:45:d2:c4:d4:93:9d:9b:a0:ee:f9:44:83:b5:55:5d:dc:11:
         81:58:18:7c:39:3d:b4:0a:38:df:41:77:be:ec:23:65:56:6f:
         33:f0:9b:f5:89:89:eb:2a:07:5d:4e:43:81:91:72:1f:ef:75:
         c9:30:d7:ba:eb:3b:dd:79:5e:6a:ab:7d:c1:23:46:b9:ae:23:
         7e:26:16:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:39 2026 by rpki-client