Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437663a3a2f34382d3438203d3e20343031383335.roa
File:                     323630323a663932613a613437663a3a2f34382d3438203d3e20343031383335.roa (raw, json)
Hash identifier:          KAd3DYcQ62HE288VhXP2pRBuwqya/mdluI65S9u4zeQ=
Subject key identifier:   09:7B:23:FA:40:A3:58:B4:CF:D4:0D:3A:F7:23:B6:2B:B8:D9:1D:A4
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       6EF912A5FEF2BAF0CD611F7EA399213F00C5E854
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437663a3a2f34382d3438203d3e20343031383335.roa
Signing time:             Tue 02 Jun 2026 12:17:56 +0000
ROA not before:           Tue 02 Jun 2026 12:12:56 +0000
ROA not after:            Tue 01 Jun 2027 12:17:56 +0000
asID:                     401835
IP address blocks:        2602:f92a:a47f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 00:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f9:12:a5:fe:f2:ba:f0:cd:61:1f:7e:a3:99:21:3f:00:c5:e8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Jun  2 12:12:56 2026 GMT
            Not After : Jun  1 12:17:56 2027 GMT
        Subject: CN=097B23FA40A358B4CFD40D3AF723B62BB8D91DA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c4:78:83:02:3b:0f:df:fe:07:77:a6:bd:1a:
                    30:ce:87:23:f5:08:a1:d7:80:2f:11:e4:b8:8d:62:
                    31:6a:ba:a2:d5:81:47:af:e1:b5:1b:9c:16:f7:d9:
                    3c:bd:a1:51:50:4c:4d:ff:fe:be:a7:14:e4:82:67:
                    32:87:1e:bd:f1:1d:55:07:87:f4:6c:73:d6:19:2d:
                    5d:08:a9:be:60:a9:d1:00:5b:ab:de:0b:38:9d:58:
                    ca:02:12:6c:63:50:7c:e4:4f:33:b3:46:e4:ce:4f:
                    b5:63:56:13:01:22:b8:ec:21:3c:84:de:ba:89:b6:
                    3a:5b:3f:a4:9e:bd:d6:77:d4:62:a2:16:53:b5:84:
                    64:f2:b9:3b:be:7a:3a:51:2f:1a:92:90:17:b9:7b:
                    e1:70:8a:02:8b:62:f7:78:ae:4a:0a:c4:2a:e4:d9:
                    cc:46:de:c4:1c:ad:29:72:46:ab:ce:74:46:c1:2f:
                    d1:ec:56:a2:ea:2c:e5:77:87:ba:8c:16:bd:3d:42:
                    60:5d:6a:99:d3:be:3d:41:27:d7:a7:b2:81:26:ed:
                    68:52:c8:f8:ce:85:43:9f:92:76:09:cb:8d:83:7f:
                    87:58:eb:5f:b3:60:c0:b8:5f:48:b7:47:40:fb:37:
                    3f:7a:71:fb:6c:c6:86:d3:bf:9f:bc:14:6c:24:2c:
                    9f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7B:23:FA:40:A3:58:B4:CF:D4:0D:3A:F7:23:B6:2B:B8:D9:1D:A4
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437663a3a2f34382d3438203d3e20343031383335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a47f::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:7a:2c:89:03:83:8e:28:6a:2d:a7:ee:90:f3:d6:b3:cc:90:
         6a:59:42:cc:61:64:88:ab:91:9e:d0:db:91:8e:70:4f:cc:ca:
         87:c6:36:c9:49:78:f8:02:aa:3b:a7:30:82:97:9d:76:fe:d9:
         33:60:82:7a:0f:a2:76:48:0f:8f:97:cd:bc:3d:53:ed:2d:1a:
         22:2b:8e:51:c1:9c:a0:f4:18:51:ce:2c:c9:45:75:48:b6:08:
         a7:5a:5e:7d:d2:26:a3:03:5c:a5:42:93:bb:1d:47:30:33:8b:
         f0:4a:eb:6a:93:98:27:45:5a:a3:16:f8:28:df:e0:18:bf:73:
         f2:b7:90:76:81:c3:c8:25:63:88:cf:1c:d3:82:93:12:f6:7a:
         46:42:68:c7:e2:66:26:12:23:ef:3e:a0:0d:a5:2c:dc:75:ee:
         bf:b8:8d:4a:2c:da:bf:f3:b8:19:21:75:9b:4b:7f:74:2a:03:
         35:04:1d:0e:1c:93:d4:e5:ce:dc:a4:91:ba:a4:92:0a:8c:f0:
         58:69:f0:4b:e4:98:b1:ca:3e:fb:ef:2f:31:96:56:57:9d:a9:
         82:e5:44:2e:7d:e6:7c:15:f3:80:0b:c4:c5:0b:85:f9:b8:43:
         f6:cb:ef:a4:cf:01:7f:9b:3b:a2:cb:dd:72:19:19:70:f0:ce:
         7f:e5:2c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:39 2026 by rpki-client