Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437393a3a2f34382d3438203d3e20323037353239.roa
File:                     323630323a663932613a613437393a3a2f34382d3438203d3e20323037353239.roa (raw, json)
Hash identifier:          dieZ6n87a7eL1CEIwbU9KCBoXbHxV4npgm9NjJ3cK8Y=
Subject key identifier:   A7:10:A8:36:8B:AD:49:CE:C0:DD:10:BA:8C:3C:D8:2D:7A:87:2F:8C
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       4F7F8D16EE4151217F913C3571904D2E2598DD14
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437393a3a2f34382d3438203d3e20323037353239.roa
Signing time:             Tue 02 Jun 2026 12:17:53 +0000
ROA not before:           Tue 02 Jun 2026 12:12:53 +0000
ROA not after:            Tue 01 Jun 2027 12:17:53 +0000
asID:                     207529
IP address blocks:        2602:f92a:a479::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 00:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7f:8d:16:ee:41:51:21:7f:91:3c:35:71:90:4d:2e:25:98:dd:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Jun  2 12:12:53 2026 GMT
            Not After : Jun  1 12:17:53 2027 GMT
        Subject: CN=A710A8368BAD49CEC0DD10BA8C3CD82D7A872F8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:1a:90:1a:6d:ea:45:b9:9e:56:92:03:46:
                    b2:35:9e:6b:54:18:2e:54:6a:7b:2b:d7:bf:86:3e:
                    0e:58:9f:5e:8f:fa:8e:c1:24:81:e8:83:60:df:32:
                    fc:65:3c:30:a4:46:58:96:60:88:99:f1:03:b7:2d:
                    2d:58:d2:86:8c:d8:30:65:02:90:5b:f0:c8:80:b0:
                    65:3d:00:83:d3:1a:0c:83:ff:ad:f1:d9:62:dd:8a:
                    eb:82:3b:51:b4:a8:b4:48:73:68:98:17:8c:8f:a4:
                    f3:bc:13:2e:3a:dd:f4:79:dc:02:55:e2:b1:fb:95:
                    71:45:75:76:52:d0:34:ef:57:60:e9:96:6d:87:4c:
                    c8:07:be:60:22:e1:f1:d4:a7:fb:5b:66:ef:b5:8c:
                    61:7e:44:a7:53:96:6d:d6:93:e9:95:53:c5:26:cb:
                    ac:20:51:e7:8f:04:ab:fb:d3:a8:36:f7:4d:30:55:
                    e9:92:a7:fa:24:d7:a8:2f:51:43:95:e3:f1:03:f4:
                    9a:40:5a:a5:78:48:43:35:e8:7b:5c:96:e7:36:da:
                    f7:84:dc:11:f2:01:83:c2:18:4e:ea:8c:8e:76:c2:
                    19:cd:79:87:2a:0c:60:62:97:89:1b:d3:ea:6d:ad:
                    1e:60:1f:35:0d:b2:74:60:26:8f:79:1a:c3:f4:ca:
                    ca:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:10:A8:36:8B:AD:49:CE:C0:DD:10:BA:8C:3C:D8:2D:7A:87:2F:8C
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437393a3a2f34382d3438203d3e20323037353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a479::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:64:5e:5f:b9:05:e4:d5:62:0d:3d:9a:c1:9e:2c:4b:10:68:
         9e:b9:ab:89:ea:b0:72:7f:dd:97:b2:ad:a6:9e:ef:f0:26:5b:
         12:33:48:f0:de:dc:60:8e:62:66:c0:e3:bf:db:5d:07:5f:69:
         3f:69:36:07:be:20:30:37:8a:63:77:f2:18:1d:97:d7:2d:c0:
         87:05:f1:db:60:b4:88:7c:f8:68:f7:68:53:23:22:68:4d:fa:
         58:5a:d7:a4:04:7a:f7:15:0e:22:33:42:84:0f:43:a7:e6:d1:
         18:3f:d3:22:66:61:82:58:3c:74:8c:91:e5:fb:6c:bb:d1:61:
         f6:eb:ab:d0:5b:b5:20:19:86:67:d4:5b:bf:1e:93:dd:1e:15:
         5e:14:70:56:b4:49:c0:ff:a7:66:a4:7f:1c:09:75:b4:09:80:
         97:a9:c1:0c:b8:d2:81:74:b8:e8:9b:48:de:bd:74:ea:f0:25:
         97:4e:2e:0e:5e:15:55:bd:74:3a:f3:5e:6b:e2:3a:12:1a:d3:
         ea:87:78:2b:e2:55:e3:0d:07:47:9e:d7:a0:9e:c1:f5:7b:06:
         ed:a5:79:87:0a:e2:0f:29:60:dd:b1:46:27:33:26:c1:b2:c1:
         fa:f0:c8:9d:18:66:da:d3:2d:81:8b:6e:c4:a9:f0:28:7f:e0:
         5f:0e:b4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:39 2026 by rpki-client