Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437633a3a2f34382d3438203d3e20313938303235.roa
File:                     323630323a663932613a613437633a3a2f34382d3438203d3e20313938303235.roa (raw, json)
Hash identifier:          k2EnExkGUSVpjhquEcPJCmK8XBWbojotBW7RC9QKGvU=
Subject key identifier:   98:80:D8:80:45:10:6D:36:26:F8:E1:92:E5:14:EB:1C:A5:A1:82:DB
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       241D81D0D932E1934F5F398BA479F2D337745D56
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437633a3a2f34382d3438203d3e20313938303235.roa
Signing time:             Tue 02 Jun 2026 12:17:53 +0000
ROA not before:           Tue 02 Jun 2026 12:12:53 +0000
ROA not after:            Tue 01 Jun 2027 12:17:53 +0000
asID:                     198025
IP address blocks:        2602:f92a:a47c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 01:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1d:81:d0:d9:32:e1:93:4f:5f:39:8b:a4:79:f2:d3:37:74:5d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Jun  2 12:12:53 2026 GMT
            Not After : Jun  1 12:17:53 2027 GMT
        Subject: CN=9880D88045106D3626F8E192E514EB1CA5A182DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:f8:84:7c:7e:8d:0f:18:d1:ef:d2:0a:24:
                    68:96:36:7a:03:bf:6a:af:97:56:fe:73:b8:97:b4:
                    69:fe:42:a5:5a:ac:2f:83:b7:eb:1c:a0:b9:20:81:
                    7c:86:4e:ee:ca:c3:f0:14:31:fe:0a:c0:ff:45:88:
                    7c:36:e4:9b:4e:d5:46:27:2d:e3:2a:4a:25:ec:be:
                    51:b3:fe:72:e2:68:be:5c:d6:ea:d2:d2:c4:84:10:
                    7e:e8:a1:53:52:19:59:c8:1c:11:3b:3a:7f:7b:af:
                    ab:f0:1d:7f:80:c4:9e:67:55:74:14:27:6a:52:7d:
                    3b:ae:a5:7c:96:f0:64:6d:7a:8f:1c:f5:53:8d:db:
                    2a:19:d8:2e:45:0f:ee:ef:79:e8:9e:37:7a:1a:44:
                    6e:2b:2a:ad:6e:1c:43:0b:41:ca:11:d1:26:74:9a:
                    02:63:b4:66:2f:0f:79:2b:ab:bc:5d:73:7a:a2:36:
                    cf:01:00:ec:ad:3c:af:8d:f1:5a:63:44:72:89:c5:
                    46:d7:bc:80:34:6c:64:2b:ea:e2:08:77:5d:9a:f3:
                    50:9e:f1:bd:2b:16:0e:8e:ba:dc:76:91:0f:da:5b:
                    03:7b:03:7e:43:b7:8e:ef:79:09:74:1d:11:21:9f:
                    9d:91:74:d7:4e:30:0a:48:be:8a:f5:7f:d0:b3:ab:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:80:D8:80:45:10:6D:36:26:F8:E1:92:E5:14:EB:1C:A5:A1:82:DB
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437633a3a2f34382d3438203d3e20313938303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a47c::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:d4:7f:e1:fb:76:cd:53:dc:ec:7c:2f:91:39:81:ea:e9:44:
         c8:62:39:25:3f:0c:96:47:85:d3:0c:48:60:76:da:d9:66:10:
         83:ab:ab:25:1d:1e:2d:f6:e5:29:6b:58:1b:f1:68:1c:ba:8a:
         3b:a5:ac:95:a7:e8:a6:c5:c7:0a:cf:65:c0:ed:1c:9f:6b:f9:
         30:0d:02:29:38:47:12:55:97:e9:66:00:1d:73:52:4c:4b:3c:
         8b:e5:9f:88:28:2f:25:1c:9b:8b:d4:87:6a:35:61:20:9b:be:
         d2:73:93:c9:49:b4:79:c3:44:a9:ae:e9:78:d9:42:1c:86:f9:
         1c:e9:c7:20:19:65:76:27:b7:4c:e9:29:a5:f8:66:e9:69:7c:
         ec:a2:d8:c2:b5:32:78:ac:03:c7:e8:55:33:b7:80:b6:84:b2:
         ad:f9:2e:da:a9:d4:68:11:73:4b:2d:fd:91:6d:7a:55:35:36:
         02:87:56:d1:c2:ee:63:96:ef:66:ba:52:ce:c7:8b:26:49:ac:
         34:32:00:87:92:54:d1:8c:56:5a:ea:a2:54:f8:37:f7:31:1c:
         e7:90:ec:23:1e:70:b1:c3:fd:dd:39:4e:97:5d:90:6b:32:c4:
         b1:90:8d:c0:61:e6:7b:ee:15:64:a2:1f:c8:1e:50:32:fb:67:
         e0:ae:57:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:38 2026 by rpki-client