Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437343a3a2f34382d3438203d3e20313339333137.roa
File:                     323630323a663932613a613437343a3a2f34382d3438203d3e20313339333137.roa (raw, json)
Hash identifier:          pwWvAl/s3SyNbh1+58ewpYWxNwkqqan8cSguW+DibWE=
Subject key identifier:   20:2D:6C:9E:04:8B:85:73:1A:50:43:24:9F:2D:9C:E8:91:84:F4:89
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       79AB447746C5B319A4C64688C2798A1E57E01476
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437343a3a2f34382d3438203d3e20313339333137.roa
Signing time:             Tue 02 Jun 2026 12:17:46 +0000
ROA not before:           Tue 02 Jun 2026 12:12:46 +0000
ROA not after:            Tue 01 Jun 2027 12:17:46 +0000
asID:                     139317
IP address blocks:        2602:f92a:a474::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 00:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ab:44:77:46:c5:b3:19:a4:c6:46:88:c2:79:8a:1e:57:e0:14:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Jun  2 12:12:46 2026 GMT
            Not After : Jun  1 12:17:46 2027 GMT
        Subject: CN=202D6C9E048B85731A5043249F2D9CE89184F489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:a6:08:a9:7e:67:35:80:c0:dd:8c:9b:84:
                    f6:76:11:12:75:92:0e:b0:3a:40:3a:8c:fa:9c:7a:
                    ad:d0:ef:17:70:95:9c:56:02:d5:96:50:86:e7:3f:
                    ac:6c:6f:3e:a7:9f:2e:22:0e:e1:82:f5:e2:7a:ee:
                    78:6c:0f:30:1b:8d:ab:37:7f:cd:08:e5:3a:87:04:
                    28:bc:23:62:6f:c4:1e:c0:e3:ca:27:93:7d:93:04:
                    56:fc:55:9a:d1:e2:2f:e1:d7:fe:62:3d:44:ed:e0:
                    2a:b2:54:70:79:ca:08:c8:77:51:fb:f3:44:3a:6a:
                    24:f2:63:a3:4d:a6:df:10:b5:c1:40:ef:26:7f:e8:
                    03:20:21:32:57:e8:08:0c:41:be:4b:da:93:ba:68:
                    48:27:2f:a4:55:79:8b:3e:b1:7b:02:b2:23:08:1d:
                    9b:03:61:79:53:50:2f:87:95:3d:19:ab:2c:90:66:
                    55:48:c6:28:5e:1f:9e:cb:3f:dd:fd:2c:e3:f6:ee:
                    d3:e8:3f:0f:d3:5f:8f:e7:21:72:9d:60:ac:7f:3b:
                    ee:26:b6:ba:65:3f:e0:75:17:9d:c2:29:dc:b1:bf:
                    84:bd:d2:81:e4:32:83:36:4d:c1:7f:19:6f:a6:52:
                    26:61:56:36:cb:2f:47:01:b7:92:a7:4c:29:3f:22:
                    e3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2D:6C:9E:04:8B:85:73:1A:50:43:24:9F:2D:9C:E8:91:84:F4:89
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437343a3a2f34382d3438203d3e20313339333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a474::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:68:5b:c2:7a:53:05:a0:3e:93:1d:ea:26:0b:3d:91:77:fa:
         9a:e8:4c:34:ee:aa:d6:8b:3b:be:58:76:57:c5:81:e6:32:d3:
         25:78:c6:df:88:63:60:14:89:29:e0:66:fe:a0:e7:b0:8f:a1:
         a5:32:f9:64:b8:3a:a0:e1:0a:6f:f0:47:b0:5d:3b:d9:59:10:
         db:3b:1d:a1:42:db:6e:04:c4:ec:5a:02:c7:9c:24:8b:27:44:
         54:59:75:39:a0:a3:8d:6a:3a:a2:ba:58:5d:36:59:3e:b7:93:
         97:53:13:6f:84:76:46:4c:84:4e:85:0c:18:15:eb:f0:0d:f7:
         12:7a:3b:fa:74:23:41:02:cf:b1:d1:84:d1:94:d1:f8:93:87:
         5f:f2:89:8a:71:4c:3b:5f:09:1d:cf:77:9a:3c:79:d5:64:89:
         c7:bb:2e:90:55:9d:87:d3:84:df:27:30:36:d6:e2:01:14:5c:
         10:a6:cb:0a:f5:fb:86:84:50:48:be:1a:20:83:93:77:e9:1e:
         14:41:99:4c:77:20:ba:55:60:ea:f1:4e:83:dc:5e:15:5d:f6:
         5b:dc:a7:58:5b:f8:01:c9:45:e4:27:9e:a2:f1:ac:eb:b5:70:
         54:19:bc:ea:1d:42:bd:9d:e9:62:a5:f2:69:18:2e:f1:54:a1:
         35:ea:4d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:21:33 2026 by rpki-client