Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a663130303a3a2f34342d3438203d3e20323134333434.roa
File:                     326130363a613030343a663130303a3a2f34342d3438203d3e20323134333434.roa (raw, json)
Hash identifier:          ukEukH98qa55+nHTcDyFZyqm8562MtPrS7Qu8JdsjfE=
Subject key identifier:   06:FE:E8:C8:4D:F0:B1:26:54:D5:00:76:22:42:04:FE:75:14:32:B2
Certificate issuer:       /CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129
Certificate serial:       175012E4169AEE42D4CE3D8E62A8A701A765853F
Authority key identifier: 3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a663130303a3a2f34342d3438203d3e20323134333434.roa
Signing time:             Fri 21 Aug 2026 05:59:11 +0000
ROA not before:           Fri 21 Aug 2026 05:54:11 +0000
ROA not after:            Fri 20 Aug 2027 05:59:11 +0000
asID:                     214344
IP address blocks:        2a06:a004:f100::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:50:12:e4:16:9a:ee:42:d4:ce:3d:8e:62:a8:a7:01:a7:65:85:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129
        Validity
            Not Before: Aug 21 05:54:11 2026 GMT
            Not After : Aug 20 05:59:11 2027 GMT
        Subject: CN=06FEE8C84DF0B12654D50076224204FE751432B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b8:0e:e8:cb:85:58:9a:00:21:9b:4d:b9:27:
                    68:32:e1:c5:e7:a7:c6:48:eb:50:93:05:17:99:f5:
                    95:8c:6b:2a:8e:17:5f:3e:da:46:eb:43:22:86:c2:
                    8e:16:49:b6:e2:5e:ab:06:7b:13:92:d4:57:e7:8d:
                    20:5d:c7:07:fa:10:6d:81:33:91:17:5d:75:f1:a9:
                    c0:7b:02:6b:d6:c6:4d:40:cc:12:8b:81:11:55:7c:
                    63:c2:6b:36:d7:67:75:53:04:03:f6:a0:77:b8:30:
                    4e:e8:fa:ce:2c:80:b4:49:08:70:24:d5:44:24:c4:
                    a8:f0:b1:7a:81:85:80:75:af:ec:dd:ab:43:45:62:
                    cc:33:5c:c5:aa:6a:00:5b:c2:ac:2b:e4:9e:dd:6c:
                    37:39:38:c4:03:2c:58:ac:f3:df:ca:82:e0:66:3f:
                    d8:ce:12:11:f1:3e:2e:77:da:0c:3d:17:0b:7a:6f:
                    40:bd:b9:2f:d0:73:6a:34:91:9b:0e:00:2b:cd:ea:
                    85:09:ae:56:47:57:ac:37:80:7f:f0:a6:57:6b:85:
                    9a:67:00:cf:16:8b:82:a4:23:d0:2e:2c:e6:86:cc:
                    6c:0a:23:4a:39:74:0c:69:0e:82:6f:34:cc:ce:c7:
                    04:3f:01:06:50:4a:0f:11:04:67:b2:ed:67:42:53:
                    e9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FE:E8:C8:4D:F0:B1:26:54:D5:00:76:22:42:04:FE:75:14:32:B2
            X509v3 Authority Key Identifier:
                keyid:3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a663130303a3a2f34342d3438203d3e20323134333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a004:f100::/44

    Signature Algorithm: sha256WithRSAEncryption
         33:2c:10:c2:c8:bb:df:95:05:a0:04:19:0a:f2:59:cf:4a:e7:
         98:60:d3:92:17:bc:23:56:16:e1:54:ab:07:67:63:11:2e:1b:
         ea:84:f7:7a:4c:cf:38:c6:3a:5f:19:15:97:b1:1d:5d:f7:3c:
         9a:71:4f:ad:ea:02:6f:9c:e5:e5:cf:5f:7b:21:a7:8a:ef:3e:
         80:de:c5:0d:05:d5:0f:00:33:35:e7:15:e8:ac:52:08:88:5b:
         d4:d8:c7:01:7e:9e:f3:75:d0:ab:cc:09:40:c1:68:e4:f5:74:
         e2:39:51:e1:fe:24:04:1d:17:be:24:61:75:56:83:d5:c9:d9:
         11:4d:cf:a0:71:55:bd:12:47:f1:df:23:b3:37:65:1b:f3:1f:
         89:f9:41:7e:38:f4:47:93:12:5e:cb:4e:4c:e3:f9:2c:d1:39:
         08:32:b0:16:ad:5f:d1:99:10:eb:73:f3:42:bb:3b:60:34:5c:
         38:4b:92:03:00:5c:83:8a:3f:15:6e:37:0c:97:a1:9c:6b:7d:
         5b:b8:b9:d8:a0:e0:ef:5a:7b:9d:44:da:b1:f2:ae:5b:d6:dd:
         83:23:58:ff:b6:ae:22:ed:71:cd:33:93:b0:c0:c0:10:c4:63:
         90:f5:60:42:54:9e:65:22:38:6c:97:90:85:55:56:a0:b6:ea:
         79:99:8e:51
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUF1AS5Baa7kLUzj2OYqinAadlhT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2
N0ZFQzEyOTAeFw0yNjA4MjEwNTU0MTFaFw0yNzA4MjAwNTU5MTFaMDMxMTAvBgNV
BAMTKDA2RkVFOEM4NERGMEIxMjY1NEQ1MDA3NjIyNDIwNEZFNzUxNDMyQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuuA7oy4VYmgAhm025J2gy4cXn
p8ZI61CTBReZ9ZWMayqOF18+2kbrQyKGwo4WSbbiXqsGexOS1FfnjSBdxwf6EG2B
M5EXXXXxqcB7AmvWxk1AzBKLgRFVfGPCazbXZ3VTBAP2oHe4ME7o+s4sgLRJCHAk
1UQkxKjwsXqBhYB1r+zdq0NFYswzXMWqagBbwqwr5J7dbDc5OMQDLFis89/KguBm
P9jOEhHxPi532gw9Fwt6b0C9uS/Qc2o0kZsOACvN6oUJrlZHV6w3gH/wpldrhZpn
AM8Wi4KkI9AuLOaGzGwKI0o5dAxpDoJvNMzOxwQ/AQZQSg8RBGey7WdCU+mrAgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQUBv7oyE3wsSZU1QB2IkIE/nUUMrIwHwYDVR0j
BBgwFoAUPnnFJkq1AAr8TWDeVot1rWf+wSkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYtOTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1
MjMyLzEvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZFQzEyOS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZF
QzEyOS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYt
OTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1MjMyLzEvMzI2MTMwMzYzYTYxMzAzMDM0
M2E2NjMxMzAzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzEzNDMzMzQzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHBCoGoATxADANBgkqhkiG9w0BAQsFAAOCAQEAMywQwsi735UFoAQZ
CvJZz0rnmGDTkhe8I1YW4VSrB2djES4b6oT3ekzPOMY6XxkVl7EdXfc8mnFPreoC
b5zl5c9feyGniu8+gN7FDQXVDwAzNecV6KxSCIhb1NjHAX6e83XQq8wJQMFo5PV0
4jlR4f4kBB0XviRhdVaD1cnZEU3PoHFVvRJH8d8jszdlG/MfiflBfjj0R5MSXstO
TOP5LNE5CDKwFq1f0ZkQ63PzQrs7YDRcOEuSAwBcg4o/FW43DJehnGt9W7i52KDg
71p7nUTasfKuW9bdgyNY/7auIu1xzTOTsMDAEMRjkPVgQlSeZSI4bJeQhVVWoLbq
eZmOUQ==
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:53:19 2026 by rpki-client