Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a663030303a3a2f34302d3438203d3e20313430393135.roa
File:                     323630323a663932613a663030303a3a2f34302d3438203d3e20313430393135.roa (raw, json)
Hash identifier:          9EdQPaj37HOP93q2YQO19ga8p/2MIgq9Ti3xl9fFO04=
Subject key identifier:   FE:89:9F:2C:97:8D:8E:D5:20:98:5B:CC:E5:45:12:97:E4:19:51:90
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       14B5B65753EF56F57A1D3AE30F9B420F9E714EDF
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a663030303a3a2f34302d3438203d3e20313430393135.roa
Signing time:             Tue 02 Jun 2026 12:17:48 +0000
ROA not before:           Tue 02 Jun 2026 12:12:48 +0000
ROA not after:            Tue 01 Jun 2027 12:17:48 +0000
asID:                     140915
IP address blocks:        2602:f92a:f000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 00:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b5:b6:57:53:ef:56:f5:7a:1d:3a:e3:0f:9b:42:0f:9e:71:4e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Jun  2 12:12:48 2026 GMT
            Not After : Jun  1 12:17:48 2027 GMT
        Subject: CN=FE899F2C978D8ED520985BCCE5451297E4195190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:72:b7:23:82:f5:44:43:20:d3:0c:7e:4f:c0:
                    91:d8:67:d0:6e:25:34:b9:9c:a9:2a:fc:8d:ee:8b:
                    07:a8:cd:d4:ec:1a:97:44:a5:19:12:d6:87:fe:be:
                    f4:09:a0:ad:1d:66:40:36:6f:62:2b:d5:25:9e:5a:
                    2b:d1:98:38:bb:b5:ea:51:3d:7a:e4:10:79:88:26:
                    41:95:ef:4b:dd:75:4f:6d:8d:62:be:68:41:13:23:
                    45:24:08:49:e5:96:af:7c:94:70:d7:87:82:f5:04:
                    df:87:c8:69:91:11:db:90:d2:ab:40:05:c6:5a:cc:
                    9a:ba:c1:0d:67:f4:eb:68:ed:8c:b4:72:f3:71:5c:
                    a7:3c:aa:d6:55:04:f1:4c:d4:bf:8c:26:9c:1b:7f:
                    3d:15:e4:36:40:6c:b6:61:de:18:46:ea:1d:50:a1:
                    4a:24:38:4b:d9:dd:49:3e:42:f2:cc:8a:f7:e3:fe:
                    01:42:88:a0:9f:f1:fb:6e:d7:0d:de:67:87:9e:be:
                    d2:cf:da:0f:8b:7c:d0:e9:fe:18:ab:ab:93:ba:ba:
                    0c:61:f0:b4:12:0c:d4:a2:83:6b:6a:2d:c0:d8:aa:
                    a1:d1:73:f0:cf:a3:e4:46:a1:5d:24:70:84:b8:62:
                    e7:9f:87:f9:50:bf:27:cc:3b:7d:71:00:b2:83:c2:
                    63:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:89:9F:2C:97:8D:8E:D5:20:98:5B:CC:E5:45:12:97:E4:19:51:90
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a663030303a3a2f34302d3438203d3e20313430393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:23:0e:bc:ef:ce:64:52:4b:47:18:b9:d7:ce:fe:77:2d:52:
         c4:46:0b:46:bf:cf:80:c6:aa:75:1a:af:43:44:6b:6b:f8:ba:
         13:d9:ae:f8:7d:48:06:91:85:0c:cd:34:dd:97:f5:71:20:13:
         c5:1d:0e:99:82:07:55:21:99:80:25:0a:15:a1:3f:ca:8d:fc:
         18:30:92:8a:f7:90:28:de:82:11:e0:c1:db:a4:4b:8a:97:45:
         61:c4:5a:be:b4:5a:c0:80:1e:46:42:f8:a1:e8:c6:9a:2b:a4:
         74:20:d1:6b:75:d5:1b:2d:ae:7a:c0:a2:3f:3d:71:d0:4c:e5:
         bf:ab:91:0c:2f:15:8e:50:28:08:cd:40:d5:4a:39:88:b5:0f:
         11:f3:d9:e2:61:e7:01:55:c5:cd:df:61:e2:27:7e:6a:1a:b7:
         b1:13:ac:c0:6b:28:b2:ed:61:7c:5e:aa:4f:ad:01:b5:5e:69:
         aa:32:b4:cd:72:87:c5:02:ce:7d:86:fc:96:7f:21:a4:17:16:
         e9:23:0f:e1:55:ef:bc:30:25:db:79:5c:ba:ef:27:2b:cb:79:
         57:2d:1c:a2:17:e5:23:03:fd:a4:00:7d:c7:19:98:bc:c2:bc:
         16:85:f4:c5:78:e2:1f:5f:c1:71:f8:83:49:8d:1c:0a:67:6a:
         7e:9c:ac:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:38 2026 by rpki-client