Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437333a3a2f34382d3438203d3e20323134343339.roa
File:                     323630323a663932613a613437333a3a2f34382d3438203d3e20323134343339.roa (raw, json)
Hash identifier:          lGt1ZjXjRhRs0ziAQ0CBy2SwnwmGPBUk5+bElbfsgjY=
Subject key identifier:   D4:BE:0E:5B:AF:9A:B8:7E:4D:EB:DC:32:D5:33:7B:0E:36:BD:90:F3
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       791CAA0F8F14D36A23AEBC2C8D3516B9CFC6B005
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437333a3a2f34382d3438203d3e20323134343339.roa
Signing time:             Tue 02 Jun 2026 12:17:56 +0000
ROA not before:           Tue 02 Jun 2026 12:12:56 +0000
ROA not after:            Tue 01 Jun 2027 12:17:56 +0000
asID:                     214439
IP address blocks:        2602:f92a:a473::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 01:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:1c:aa:0f:8f:14:d3:6a:23:ae:bc:2c:8d:35:16:b9:cf:c6:b0:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Jun  2 12:12:56 2026 GMT
            Not After : Jun  1 12:17:56 2027 GMT
        Subject: CN=D4BE0E5BAF9AB87E4DEBDC32D5337B0E36BD90F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:de:11:ee:b8:d9:12:d3:2e:e5:e8:31:ed:22:
                    a6:73:28:c5:3f:ff:7c:1e:7e:02:18:8d:80:ad:72:
                    3d:31:e2:e8:c4:c8:20:81:34:f8:8c:51:17:57:46:
                    0e:42:f1:c5:45:06:65:ca:17:7d:9c:7a:12:42:0c:
                    54:da:30:54:0b:02:96:fa:56:62:82:a0:93:a7:a1:
                    db:d4:75:f7:cc:ad:c8:b6:c1:52:64:03:d6:ef:bc:
                    74:93:51:fb:67:27:fa:9f:c9:93:52:21:56:b3:76:
                    55:c5:69:08:e5:cf:7e:6a:02:6d:b1:ae:3d:e6:fa:
                    46:40:36:3e:f8:51:a5:97:c4:7a:d0:90:c6:2b:50:
                    70:7c:82:36:f7:5a:4b:8d:8b:79:1d:05:28:85:0a:
                    9c:c9:9a:c7:df:7c:0c:3f:ea:13:10:b8:c7:b3:e6:
                    ee:9d:d3:4b:30:7e:35:7f:06:be:f8:2e:76:bd:bb:
                    52:72:d5:bf:26:ff:b4:ca:9b:21:f6:5b:2c:7d:82:
                    23:ea:b0:54:5e:92:04:4a:07:fd:0e:a0:98:e1:06:
                    44:f3:a7:80:9e:5a:fb:e4:2d:83:37:89:98:1f:87:
                    c5:2a:6a:27:ae:35:3b:69:92:d6:f8:50:a2:01:c1:
                    70:ce:9b:47:ca:f3:00:d9:27:ed:38:ef:e9:68:b6:
                    cb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BE:0E:5B:AF:9A:B8:7E:4D:EB:DC:32:D5:33:7B:0E:36:BD:90:F3
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437333a3a2f34382d3438203d3e20323134343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a473::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:89:89:df:7e:ec:8a:54:6e:39:22:4e:1a:90:61:71:d9:b8:
         28:f4:ff:dc:14:48:03:fe:28:55:c8:c7:9b:1c:4f:d6:ac:0f:
         5f:30:a0:34:fa:1d:d2:6e:65:00:68:e5:65:40:90:09:e0:85:
         37:ca:ca:01:de:a4:72:8d:5c:ff:9a:8f:63:a5:f5:c5:bc:72:
         e5:16:9b:aa:f2:1a:01:59:4b:02:10:c5:b0:4b:08:aa:a1:66:
         47:08:c1:97:d6:50:86:e2:3c:74:e0:17:06:75:ea:fb:34:b0:
         a6:8d:de:48:3e:0c:a8:a0:1c:c9:65:b0:a6:88:84:20:73:2b:
         40:63:55:c6:b9:d0:49:a0:ad:66:58:24:24:41:1c:6d:fb:03:
         09:f0:53:b2:9d:49:32:23:27:6a:72:01:6b:d0:8c:8a:60:62:
         23:04:d0:d2:13:e2:00:90:80:26:fb:4d:7f:ba:e2:b8:01:95:
         f6:2f:42:be:76:d0:e7:2d:ed:c7:fb:1c:57:ab:74:9b:2e:8a:
         df:94:e7:4b:7b:5a:b0:41:81:61:a2:40:db:80:23:13:40:92:
         86:81:19:cb:b8:a2:3d:e7:e0:c8:42:4e:c4:46:2d:0d:4d:17:
         ed:19:5f:14:15:98:ad:2c:79:53:d3:48:49:e7:88:8f:32:10:
         d5:39:c4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:37 2026 by rpki-client