Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a646561303a3a2f34342d3438203d3e20323133363035.roa
File:                     323630323a663932613a646561303a3a2f34342d3438203d3e20323133363035.roa (raw, json)
Hash identifier:          GcfxURCiiCDU72kXfhWgTEBB4sQJ1gir7D/k7kx8+Rc=
Subject key identifier:   6C:3C:CE:96:17:82:03:2D:02:54:C3:0E:96:7E:57:14:12:F5:3E:7A
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       03983BB3E9ED3800CCF88191E55AEF1C08C2E801
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a646561303a3a2f34342d3438203d3e20323133363035.roa
Signing time:             Tue 02 Jun 2026 12:17:56 +0000
ROA not before:           Tue 02 Jun 2026 12:12:56 +0000
ROA not after:            Tue 01 Jun 2027 12:17:56 +0000
asID:                     213605
IP address blocks:        2602:f92a:dea0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 00:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:98:3b:b3:e9:ed:38:00:cc:f8:81:91:e5:5a:ef:1c:08:c2:e8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Jun  2 12:12:56 2026 GMT
            Not After : Jun  1 12:17:56 2027 GMT
        Subject: CN=6C3CCE961782032D0254C30E967E571412F53E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:3c:38:23:9a:c2:f0:8e:3b:d4:8f:d3:b0:21:
                    12:c6:36:48:ff:14:79:f8:3f:22:19:21:64:f8:e6:
                    f7:03:bd:8e:19:d2:ed:a2:28:9b:f4:d5:cd:ab:3e:
                    1c:b2:23:f3:04:b3:59:82:8c:f5:33:23:e6:7c:a8:
                    2e:be:32:16:79:8a:e8:e0:42:99:d9:01:89:34:2d:
                    c5:25:ab:b9:48:fb:07:7f:e3:9e:b0:04:31:3a:b7:
                    6a:0a:6d:3b:ff:1b:46:b3:dd:8b:0f:ca:31:d6:ce:
                    e8:c8:59:cb:85:c4:d6:eb:13:4b:c2:84:73:c9:23:
                    27:fd:ef:ce:5f:26:50:a3:16:ac:59:73:94:a9:ce:
                    85:b0:cd:48:08:9c:2e:cd:55:2a:c9:46:0b:2f:39:
                    a1:30:0f:77:97:6c:ee:5d:38:c1:66:81:c3:dc:8e:
                    80:96:2a:e5:29:a7:f2:be:6f:a9:05:fc:83:91:0c:
                    49:52:e4:aa:a1:78:6c:a7:81:82:1f:f2:d9:c6:24:
                    bc:73:eb:57:2e:50:70:a4:76:24:be:e5:52:c6:36:
                    a1:ee:5b:a2:92:ab:24:46:04:45:73:d4:3a:d1:ac:
                    58:fc:fc:50:71:a4:38:7b:4e:c0:32:7c:39:25:76:
                    60:5c:90:74:8a:9b:9c:01:2c:ff:ea:91:f8:e5:56:
                    76:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3C:CE:96:17:82:03:2D:02:54:C3:0E:96:7E:57:14:12:F5:3E:7A
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a646561303a3a2f34342d3438203d3e20323133363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:dea0::/44

    Signature Algorithm: sha256WithRSAEncryption
         ca:7b:2a:cc:39:64:dc:dd:a9:0b:d1:53:b6:01:c2:f7:ca:9f:
         30:70:90:f7:fa:56:54:2c:07:c6:8d:79:3d:fd:c4:7f:99:b2:
         a3:0b:77:73:3f:62:d2:3b:fe:61:f9:8f:1a:34:a5:46:a3:8e:
         75:43:e0:1b:7b:9b:5b:32:76:4e:ae:4e:50:e8:ff:de:97:e1:
         6c:91:67:d2:eb:15:6e:bd:ba:ba:04:6a:b7:9e:8d:e4:37:29:
         14:51:1c:20:6f:3a:18:21:3b:06:07:8b:7e:eb:d3:cc:21:8a:
         de:ed:36:79:e6:ba:35:93:cb:f8:df:5d:e9:df:a1:c2:29:ff:
         0d:17:c7:5c:c7:d1:95:4d:21:74:9e:30:8e:e4:bb:d9:07:01:
         ef:28:33:d3:67:57:6d:2d:3b:a4:3e:2d:88:5c:c2:33:0f:ff:
         a5:1b:09:ca:8a:ca:1a:33:10:43:c7:69:24:e3:6a:03:39:77:
         d2:cf:5a:74:1f:0a:5f:7a:4d:2e:02:39:ac:e0:00:87:30:0c:
         d6:22:94:9a:fa:0a:ef:5c:5f:8c:b9:8c:ec:b9:9f:0c:22:d5:
         5b:8d:44:d4:20:14:b1:8d:85:1f:77:98:af:99:6f:05:b1:77:
         56:43:17:f8:4b:b0:fa:02:fc:10:e7:0f:e5:39:33:9a:ce:59:
         2e:e1:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:26 2026 by rpki-client