Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a643030303a3a2f34302d3438203d3e20313339323939.roa
File:                     323630323a663932613a643030303a3a2f34302d3438203d3e20313339323939.roa (raw, json)
Hash identifier:          fUgvo/fjWCLZDV109wy0c9FOUclWkispFtMZPOjsvRw=
Subject key identifier:   0D:43:52:4A:6B:E3:28:2E:B9:AD:5D:43:89:AC:3B:60:11:CD:3B:B7
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       53C3E8E8C2930668AF486AABF43F08BC9F1E4174
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a643030303a3a2f34302d3438203d3e20313339323939.roa
Signing time:             Tue 02 Jun 2026 12:17:43 +0000
ROA not before:           Tue 02 Jun 2026 12:12:43 +0000
ROA not after:            Tue 01 Jun 2027 12:17:43 +0000
asID:                     139299
IP address blocks:        2602:f92a:d000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 01:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c3:e8:e8:c2:93:06:68:af:48:6a:ab:f4:3f:08:bc:9f:1e:41:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Jun  2 12:12:43 2026 GMT
            Not After : Jun  1 12:17:43 2027 GMT
        Subject: CN=0D43524A6BE3282EB9AD5D4389AC3B6011CD3BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2b:4d:b2:7c:dd:67:cb:e1:55:c8:ee:77:2b:
                    ce:1e:fe:07:53:12:92:68:41:6a:f2:61:3c:8a:8c:
                    d0:76:15:f0:4f:26:4c:07:a7:65:de:1d:48:60:43:
                    34:6b:01:0b:d5:2c:8e:2b:7b:32:67:25:20:ea:34:
                    5b:e8:ba:9d:19:0a:e2:23:cb:be:ca:f4:9a:b1:89:
                    74:b1:39:9a:0a:22:40:7a:68:81:28:4b:b9:d5:c9:
                    61:83:2c:0a:b0:c0:64:33:cb:45:ee:4f:b4:5c:29:
                    cc:fc:e2:12:4d:7e:32:af:09:2d:22:ea:2f:09:5d:
                    00:24:87:4f:35:b0:9b:ce:60:48:fa:89:5b:32:c0:
                    ef:64:2d:0a:48:ae:8b:c0:00:2c:94:0d:0a:bf:ff:
                    72:bb:0c:f6:e1:a6:1e:02:5e:bd:39:7b:15:66:93:
                    74:c7:f2:9f:72:17:40:10:59:ae:72:18:8e:0b:b8:
                    44:ee:d7:d6:df:17:2e:b8:ec:89:f6:68:4f:f9:be:
                    f6:3e:31:c1:6f:0d:ec:ba:8f:47:37:65:f7:fb:f9:
                    e5:06:7c:18:83:55:75:65:5c:15:93:ed:84:05:fe:
                    57:c0:68:82:b7:a7:36:88:c2:ee:2c:a7:c0:d3:78:
                    a2:8c:d3:81:4a:8f:c7:22:fa:db:c3:7a:d1:02:6c:
                    ba:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:43:52:4A:6B:E3:28:2E:B9:AD:5D:43:89:AC:3B:60:11:CD:3B:B7
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a643030303a3a2f34302d3438203d3e20313339323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:d000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:d6:e9:2d:5b:90:73:2b:4a:8a:44:bc:92:90:90:47:27:d3:
         32:c3:ed:a5:81:a8:a3:d4:87:88:87:2d:b8:12:63:07:e3:6f:
         3d:4f:65:cc:bb:e8:c2:ff:90:1b:4c:67:27:eb:fc:92:36:06:
         a6:f9:21:fa:b4:dc:cf:90:0f:3d:3d:bd:14:7f:44:9b:e1:49:
         d0:72:b1:21:d3:ef:ca:1f:a8:05:45:5c:39:24:5f:e3:aa:ef:
         06:8c:78:d7:76:71:dd:44:91:d8:b8:7b:e8:b2:5a:d8:99:0e:
         45:74:c6:21:cc:eb:e9:11:86:49:eb:12:fa:5a:4b:8b:bd:4d:
         58:0a:f9:47:b8:c0:1b:8f:48:e3:21:59:d4:e5:37:57:d4:fe:
         fd:90:4b:6a:c4:82:1a:c7:66:5d:8d:b1:14:40:0f:44:39:20:
         80:40:61:e6:3f:0c:10:41:d0:2a:19:b2:4d:a7:f5:31:51:65:
         c7:a4:27:47:7f:05:57:bd:f6:65:d9:7c:4f:c2:23:91:06:1c:
         18:34:d0:1c:7a:d2:86:90:34:51:39:9c:27:86:aa:cd:ec:15:
         ff:dd:72:31:ae:cc:47:08:91:b8:a2:15:4c:da:5c:0d:d0:c6:
         05:9b:88:24:71:89:99:1e:c0:03:bc:03:e0:9c:9c:dd:b1:83:
         a7:1b:a7:a5
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIUU8Po6MKTBmivSGqr9D8IvJ8eQXQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4
ZWViNWQ4YTU5YTI2NDUwYzgwHhcNMjYwNjAyMTIxMjQzWhcNMjcwNjAxMTIxNzQz
WjAzMTEwLwYDVQQDEygwRDQzNTI0QTZCRTMyODJFQjlBRDVENDM4OUFDM0I2MDEx
Q0QzQkI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ytNsnzdZ8vh
VcjudyvOHv4HUxKSaEFq8mE8iozQdhXwTyZMB6dl3h1IYEM0awEL1SyOK3syZyUg
6jRb6LqdGQriI8u+yvSasYl0sTmaCiJAemiBKEu51clhgywKsMBkM8tF7k+0XCnM
/OISTX4yrwktIuovCV0AJIdPNbCbzmBI+olbMsDvZC0KSK6LwAAslA0Kv/9yuwz2
4aYeAl69OXsVZpN0x/KfchdAEFmuchiOC7hE7tfW3xcuuOyJ9mhP+b72PjHBbw3s
uo9HN2X3+/nlBnwYg1V1ZVwVk+2EBf5XwGiCt6c2iMLuLKfA03iijNOBSo/HIvrb
w3rRAmy68wIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFA1DUkpr4yguua1dQ4msO2AR
zTu3MB8GA1UdIwQYMBaAFFXhyAso6CnX1ZO66g1LLQhnpnbgMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5
LTAwNzdiODBiNGYwZS8xLzU1RTFDODBCMjhFODI5RDdENTkzQkFFQTBENEIyRDA4
NjdBNjc2RTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt
NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k
OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjNlZTA0NjMzNTBjNDAzNGEwODhjNzk4ZWVi
NWQ4YTU5YTI2NDUwYzguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH
MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy
M2E2NjM5MzI2MTNhNjQzMDMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMTMz
MzkzMjM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAmAvkq0DANBgkqhkiG9w0BAQsFAAOCAQEAatbp
LVuQcytKikS8kpCQRyfTMsPtpYGoo9SHiIctuBJjB+NvPU9lzLvowv+QG0xnJ+v8
kjYGpvkh+rTcz5APPT29FH9Em+FJ0HKxIdPvyh+oBUVcOSRf46rvBox413Zx3USR
2Lh76LJa2JkORXTGIczr6RGGSesS+lpLi71NWAr5R7jAG49I4yFZ1OU3V9T+/ZBL
asSCGsdmXY2xFEAPRDkggEBh5j8MEEHQKhmyTaf1MVFlx6QnR38FV732Zdl8T8Ij
kQYcGDTQHHrShpA0UTmcJ4aqzewV/91yMa7MRwiRuKIVTNpcDdDGBZuIJHGJmR7A
A7wD4Jyc3bGDpxunpQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:39 2026 by rpki-client