Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437383a3a2f34382d3438203d3e20323131353735.roa
File:                     323630323a663932613a613437383a3a2f34382d3438203d3e20323131353735.roa (raw, json)
Hash identifier:          7apgUrzNT98k2R9Kt/d7gPSr0alvH8MMBZBWNmYO9rY=
Subject key identifier:   3E:88:E5:79:12:2D:0C:D9:4B:2B:E7:3B:3C:A1:BE:B5:73:AA:83:B9
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       23248F2ACC5BCAAADCDE182A43B7897F6FFF7860
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437383a3a2f34382d3438203d3e20323131353735.roa
Signing time:             Tue 02 Jun 2026 12:17:44 +0000
ROA not before:           Tue 02 Jun 2026 12:12:44 +0000
ROA not after:            Tue 01 Jun 2027 12:17:44 +0000
asID:                     211575
IP address blocks:        2602:f92a:a478::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 00:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:24:8f:2a:cc:5b:ca:aa:dc:de:18:2a:43:b7:89:7f:6f:ff:78:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Jun  2 12:12:44 2026 GMT
            Not After : Jun  1 12:17:44 2027 GMT
        Subject: CN=3E88E579122D0CD94B2BE73B3CA1BEB573AA83B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:35:3c:6d:3e:c8:09:d1:77:83:ce:8a:1e:
                    b0:08:47:90:b4:cf:10:6e:9d:bc:8b:86:73:a6:06:
                    14:49:d9:30:a9:03:64:bd:ea:db:97:bb:65:f9:d5:
                    90:b4:fd:76:fe:df:af:44:41:a7:81:7c:67:2a:de:
                    c6:d8:08:92:80:19:a3:16:54:32:d5:cf:18:2d:ba:
                    a0:61:3f:9e:89:d4:b3:e7:16:0a:ef:00:14:cf:63:
                    7f:76:5e:ad:56:b2:71:4f:94:13:df:61:f1:1d:e0:
                    dc:e2:3b:ba:69:79:97:c4:63:9b:80:4a:c9:24:8c:
                    6e:3b:8f:bb:c9:ed:37:c8:a2:89:33:3e:b4:91:09:
                    1f:e5:b8:e6:53:08:6e:79:2d:3c:22:6e:b6:bc:30:
                    7f:a8:b0:ab:6f:57:be:ac:ac:32:bd:fb:07:c6:06:
                    be:98:d1:9f:1d:fd:e3:b3:78:0d:cd:d6:7c:10:0e:
                    b8:12:a5:ae:9d:a0:29:c8:11:f3:84:34:ff:07:d0:
                    e0:f6:5b:74:93:27:f2:39:75:96:1c:00:48:68:2a:
                    cf:ae:bd:df:1a:bb:fa:c5:81:3c:cb:33:ee:25:61:
                    d6:b8:52:32:84:3f:a8:1d:62:49:08:9f:05:e1:e5:
                    43:d9:22:b2:ae:86:65:e7:26:d2:7b:ce:27:2c:5a:
                    2b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:88:E5:79:12:2D:0C:D9:4B:2B:E7:3B:3C:A1:BE:B5:73:AA:83:B9
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437383a3a2f34382d3438203d3e20323131353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a478::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:2f:23:c4:6e:ab:4b:dc:c1:60:9b:38:0d:08:d2:5e:11:18:
         6f:14:5a:16:b0:47:6e:b2:82:29:01:bb:f9:1b:e0:20:c4:c1:
         a8:20:9b:1a:70:d4:bd:a5:8b:73:0c:61:07:95:7b:10:45:8a:
         73:53:96:2c:21:27:a8:24:6e:99:17:55:1a:83:8e:95:a4:3e:
         c7:d1:32:8e:07:06:f5:72:c6:da:c5:fa:ad:8f:52:14:07:2f:
         f4:fa:5d:c9:bb:d4:6f:71:c0:93:32:46:f7:be:61:ae:82:ce:
         aa:4b:ec:6c:7d:e9:83:12:f8:a7:d0:3b:a1:3b:b7:61:a8:77:
         9a:35:e0:00:00:e4:a0:15:35:c6:a5:9c:e8:7f:15:31:9c:09:
         f2:73:b6:41:ee:b0:17:36:14:d5:62:d3:ee:ec:58:ef:59:6f:
         8e:23:c3:f9:b2:ce:07:83:2b:6d:58:e1:7f:f4:74:52:18:98:
         18:0e:32:a6:5c:c1:d1:e9:22:5c:11:7e:74:05:5a:4f:34:d2:
         5c:25:a9:3a:dc:11:21:20:9e:a2:8c:7d:26:a5:82:bf:cd:9a:
         6b:ed:a0:bb:60:5d:2e:f6:3f:67:2b:6e:bc:18:2b:64:01:b0:
         88:76:87:03:d7:3e:05:e8:47:86:42:34:4a:a3:01:be:36:96:
         1e:69:b6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:37 2026 by rpki-client