Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437363a3a2f34382d3438203d3e20323135313732.roa
File:                     323630323a663932613a613437363a3a2f34382d3438203d3e20323135313732.roa (raw, json)
Hash identifier:          0sHB7e89VcxG1InpwBdnCzN1A8SYCRuxHrAYXBhge5U=
Subject key identifier:   C8:73:CC:7E:BA:CF:79:5D:FF:C7:89:67:2D:EF:1B:52:AF:DB:59:2D
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       0C894343BA4BD992718F6A0DD7CE10725D82327B
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437363a3a2f34382d3438203d3e20323135313732.roa
Signing time:             Tue 02 Jun 2026 12:17:52 +0000
ROA not before:           Tue 02 Jun 2026 12:12:52 +0000
ROA not after:            Tue 01 Jun 2027 12:17:52 +0000
asID:                     215172
IP address blocks:        2602:f92a:a476::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 01:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:89:43:43:ba:4b:d9:92:71:8f:6a:0d:d7:ce:10:72:5d:82:32:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Jun  2 12:12:52 2026 GMT
            Not After : Jun  1 12:17:52 2027 GMT
        Subject: CN=C873CC7EBACF795DFFC789672DEF1B52AFDB592D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:16:98:f8:b9:37:ee:51:5a:44:ea:f2:7a:30:
                    9f:b2:fd:ae:17:26:4e:64:d6:f0:29:4e:df:a6:26:
                    d3:40:cc:ec:b0:97:56:24:76:e3:a1:7f:99:71:9c:
                    6e:ff:7d:11:11:45:c6:8d:e0:72:ea:86:96:57:b2:
                    62:e3:61:ec:ba:7b:d6:c6:72:28:44:78:f0:44:05:
                    51:63:ab:54:ba:5b:98:6a:7c:83:07:1e:1b:1b:22:
                    99:36:b6:06:bb:cc:ba:d6:5e:45:b9:b9:e1:1d:e6:
                    6a:7c:78:09:a2:8b:07:4f:28:62:3c:20:27:1d:90:
                    73:e3:83:8f:2a:1a:47:9c:60:b8:2e:cf:6b:49:cf:
                    9b:3c:a9:1f:75:07:af:8d:da:60:83:4e:1e:43:57:
                    cf:1c:b9:e2:9a:a0:44:25:1a:0a:09:13:0c:bc:26:
                    d5:ed:2a:16:1c:33:72:98:df:cd:ac:f1:40:91:9d:
                    c2:60:b6:e7:5b:d8:05:c5:4b:27:9e:62:66:32:47:
                    6f:13:34:c8:6c:45:46:f3:17:18:b5:45:cc:61:b5:
                    75:d0:65:2b:a5:67:9c:a1:3c:e5:87:e3:6b:2f:8d:
                    07:14:fe:d5:38:0d:d0:4b:9f:d4:6d:48:5c:31:a5:
                    6e:43:76:44:79:ad:64:64:cc:a5:15:40:d7:41:6f:
                    bb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:73:CC:7E:BA:CF:79:5D:FF:C7:89:67:2D:EF:1B:52:AF:DB:59:2D
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437363a3a2f34382d3438203d3e20323135313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a476::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:44:ab:28:eb:4d:74:26:7b:9d:03:05:f6:54:0c:0e:38:76:
         54:05:a2:86:3b:c0:8c:e7:e2:74:bb:92:9e:00:87:2b:0e:9e:
         57:75:0f:b3:96:99:d7:04:67:b9:81:15:61:d5:af:46:99:c6:
         77:0f:0d:0c:b0:cf:75:e7:a8:b5:26:b8:18:6e:c9:0b:93:d2:
         3b:c0:a2:16:cb:c1:fb:ee:13:de:e2:f9:4f:9d:f1:a9:d1:40:
         39:0b:6a:ff:28:2a:9e:7e:1a:27:91:bd:44:14:4e:d8:52:d2:
         01:37:e0:41:07:7a:9e:86:73:6c:b3:1f:30:39:01:23:67:8b:
         88:48:ee:ad:b4:37:a1:43:54:22:55:98:d9:39:35:ca:be:90:
         94:30:b4:b8:75:8f:fb:b0:ca:2a:d2:2b:c2:78:4d:b7:4f:2a:
         59:fe:f6:ee:70:2d:83:7b:37:71:35:a6:09:09:2a:a5:35:43:
         cc:e5:d5:c3:d9:64:30:cb:28:fa:ab:ea:01:72:11:2d:45:c3:
         60:ee:21:cc:a5:d0:ed:e3:32:3b:b2:40:6b:07:a9:af:17:71:
         d2:26:89:82:17:05:3d:cd:c6:6a:a3:8f:9f:43:f0:0e:6e:95:
         16:57:36:f3:74:01:0a:c8:0c:87:0d:53:18:a1:3b:32:30:bb:
         14:1b:29:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:38 2026 by rpki-client