Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa
File:                     323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa (raw, json)
Hash identifier:          guUiC73vuLzaoAJ2h+wTIZOnjGEjHAB4N8uRqyV9/e4=
Subject key identifier:   67:03:C2:76:8E:A6:16:82:D6:05:EE:89:BC:83:9D:4A:F3:12:C1:DC
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       6CFFA2881706FDCE29EB266777D5E4D205D3C3C7
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa
Signing time:             Tue 02 Jun 2026 12:17:45 +0000
ROA not before:           Tue 02 Jun 2026 12:12:45 +0000
ROA not after:            Tue 01 Jun 2027 12:17:45 +0000
asID:                     203236
IP address blocks:        2602:f92a:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 00:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ff:a2:88:17:06:fd:ce:29:eb:26:67:77:d5:e4:d2:05:d3:c3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Jun  2 12:12:45 2026 GMT
            Not After : Jun  1 12:17:45 2027 GMT
        Subject: CN=6703C2768EA61682D605EE89BC839D4AF312C1DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:f1:04:e3:83:f0:c0:20:58:e6:13:35:77:
                    44:46:74:eb:32:a4:d2:eb:b2:80:f1:9c:e7:a8:bb:
                    15:2c:05:26:8d:63:96:8b:f7:80:aa:21:73:92:ae:
                    ec:06:7f:5e:8f:c6:ad:bb:b1:91:14:44:f4:ff:3f:
                    ad:7b:46:f0:ac:ed:c2:bc:3a:7e:76:4d:39:4f:8f:
                    27:38:2b:0c:72:37:90:0d:23:0d:70:df:46:b9:38:
                    d3:bf:bf:4c:62:11:96:74:e3:0a:a7:b5:1c:3b:8d:
                    66:05:d6:10:f3:58:4a:cc:4c:e3:4d:ed:39:8f:bc:
                    0c:6f:b2:01:4c:f6:bb:61:81:35:5d:04:76:59:48:
                    08:c2:2c:81:99:dd:ac:fc:81:ef:9b:db:95:dc:0e:
                    b4:e7:ac:d6:64:d8:c4:c6:d4:6d:cc:ec:19:f4:cf:
                    e3:e1:18:d0:96:c1:e8:6e:4a:14:17:f8:0e:c7:42:
                    f2:d7:93:59:27:27:ba:5e:e8:cf:68:40:04:84:97:
                    4d:f8:bb:47:f8:6e:94:dc:6c:4e:d4:0f:e4:74:43:
                    a4:82:56:33:d3:14:b7:74:7d:29:4a:fe:93:53:47:
                    6f:8b:5b:52:9b:d0:5e:00:20:cb:1f:7e:d8:77:aa:
                    5c:98:9a:1c:35:30:c2:e5:7c:4c:00:63:4b:08:79:
                    a5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:03:C2:76:8E:A6:16:82:D6:05:EE:89:BC:83:9D:4A:F3:12:C1:DC
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:2e:03:01:cf:37:78:ae:d6:65:79:24:24:67:d1:d3:00:1e:
         39:ff:3e:e7:bf:8d:a9:dd:77:9a:c4:c7:5f:30:bd:68:b6:6c:
         a8:44:66:43:a2:38:bd:31:46:f8:b4:c6:d5:3c:f5:09:9f:f0:
         bd:c0:48:f4:ba:df:f2:1e:fd:df:37:37:d7:2d:3e:ce:28:eb:
         65:97:10:a9:9e:bc:35:fc:c3:ea:46:07:32:3e:9b:43:09:d7:
         fe:38:61:e9:d5:af:f0:b6:2c:c6:1f:04:55:0a:e3:ab:2e:a9:
         97:30:d2:46:35:1b:78:a9:b6:2c:a5:50:75:16:05:a1:bb:f2:
         9f:ee:44:88:77:49:21:47:35:f0:4f:23:70:4a:bd:88:a8:12:
         5c:89:00:be:51:dd:1f:1b:61:cd:64:86:4a:bc:b8:db:02:10:
         1f:aa:19:d1:f5:a0:d9:b1:57:75:64:cf:98:1d:11:5f:85:85:
         bd:5d:d5:e2:0a:ca:8e:56:ad:4d:ea:57:92:42:9c:29:70:a0:
         c9:8d:f3:76:f6:e9:fe:a5:a2:51:78:ab:69:86:f9:e0:d0:4d:
         05:18:0d:2c:8a:1f:64:04:9b:4b:0f:06:75:20:1b:9f:45:9d:
         cf:da:12:90:7c:34:4d:28:64:dd:6e:68:1d:ac:f0:d2:36:ce:
         01:5d:6d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:38 2026 by rpki-client