Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/36362e3133322e3233312e302f32342d3234203d3e20323135323438.roa
File:                     36362e3133322e3233312e302f32342d3234203d3e20323135323438.roa (raw, json)
Hash identifier:          5Alfw2RxDLORSt7f6co7srS5kWEXyah49ASR9Ssoj9c=
Subject key identifier:   41:E3:B3:2B:FA:AF:F0:0C:05:59:40:EC:25:DE:64:82:68:54:29:05
Certificate issuer:       /CN=6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c
Certificate serial:       570AA34B7523E34CA03ED5B30063B00D5ECAF89C
Authority key identifier: 7A:FA:22:3B:62:38:B0:CC:63:74:F7:FE:89:94:36:4F:BF:8F:54:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/36362e3133322e3233312e302f32342d3234203d3e20323135323438.roa
Signing time:             Sat 03 Oct 2026 08:27:07 +0000
ROA not before:           Sat 03 Oct 2026 08:22:07 +0000
ROA not after:            Sat 02 Oct 2027 08:27:07 +0000
asID:                     215248
IP address blocks:        66.132.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/46553ad0-fc19-4f28-8ee2-b5cffd430300.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/46553ad0-fc19-4f28-8ee2-b5cffd430300.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 13:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:0a:a3:4b:75:23:e3:4c:a0:3e:d5:b3:00:63:b0:0d:5e:ca:f8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c
        Validity
            Not Before: Oct  3 08:22:07 2026 GMT
            Not After : Oct  2 08:27:07 2027 GMT
        Subject: CN=41E3B32BFAAFF00C055940EC25DE648268542905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:81:5c:7c:ab:4f:4e:5e:72:0e:a0:d7:09:c4:
                    94:7b:5c:04:89:9a:a2:ed:93:6c:a3:46:24:5b:d1:
                    c3:80:4e:1c:73:42:d5:99:62:72:fb:31:1f:28:27:
                    ae:16:28:dc:46:20:a7:1d:38:c3:a8:9e:ca:47:e8:
                    d4:29:02:21:05:c3:49:d6:10:b8:cf:90:d8:0c:20:
                    f9:36:5d:e9:97:ec:40:6f:9d:53:66:9b:2b:81:2e:
                    24:f9:0f:c2:8e:a5:e9:8b:6b:0d:f7:75:85:44:f4:
                    2c:b5:6c:ca:d4:2f:9a:24:a1:ec:22:a0:91:25:e1:
                    ee:a5:28:6f:93:95:0e:c3:1e:59:ee:d5:8d:ba:cd:
                    5b:6d:d9:02:50:86:4c:f1:53:a4:40:e5:ff:9c:95:
                    52:72:19:8e:5c:0f:bc:79:c1:6d:50:18:ae:93:6a:
                    1a:d8:3f:27:51:f8:72:fe:13:02:61:c3:f6:8d:4c:
                    b9:ca:53:6a:1f:b4:79:d3:91:b4:36:84:69:66:9f:
                    cf:77:0a:40:af:16:aa:7f:bf:9c:4b:b8:80:16:fd:
                    83:f1:e6:65:5b:a6:a8:42:a2:44:04:d2:4e:76:07:
                    74:76:8e:82:3c:09:64:0a:53:50:e5:fb:3f:1c:4e:
                    25:1a:a4:72:2a:81:30:d3:f3:b2:e2:cc:36:be:22:
                    d6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E3:B3:2B:FA:AF:F0:0C:05:59:40:EC:25:DE:64:82:68:54:29:05
            X509v3 Authority Key Identifier:
                keyid:7A:FA:22:3B:62:38:B0:CC:63:74:F7:FE:89:94:36:4F:BF:8F:54:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/7AFA223B6238B0CC6374F7FE8994364FBF8F54DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/46553ad0-fc19-4f28-8ee2-b5cffd430300/6e1bbb7e7fef9ebbe2cf0cad47646e6ad7bd9552c30cee0b9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/2/36362e3133322e3233312e302f32342d3234203d3e20323135323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.132.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:bc:19:7a:81:dc:f1:97:a3:e7:a0:c9:0b:18:44:5b:27:3c:
         7a:88:2e:46:ee:49:60:71:4d:43:8d:6b:1f:77:41:51:a3:27:
         9d:61:74:b6:98:4a:e0:cd:ac:0b:d1:df:6c:e6:9d:59:c9:4a:
         3d:2b:a1:a8:8c:5a:79:d8:fe:5a:63:23:ad:78:b6:11:5d:de:
         bb:99:b2:6b:ea:b6:74:57:87:89:81:ca:ea:1b:b1:be:30:e9:
         79:ac:45:f6:bf:62:65:69:ac:a9:3e:34:87:6a:3b:a6:21:b3:
         7b:ce:4e:eb:79:b4:f8:4c:19:ff:64:f5:9d:47:a2:ff:41:de:
         02:6b:49:19:77:a7:b6:d6:7f:4a:5d:ca:86:db:fa:c6:71:b4:
         4d:89:16:3e:f2:65:97:0b:c9:f3:a4:c2:ff:f1:c8:e5:a8:17:
         dd:71:9e:60:a1:54:f9:0b:f5:71:45:81:71:a9:40:f9:17:39:
         04:02:ce:89:b8:38:b7:56:e1:b8:72:8c:1c:d4:52:e8:fd:b4:
         62:35:9a:c7:3e:ed:5f:39:4d:40:0a:aa:0d:bc:a8:87:63:0e:
         ab:70:45:d8:1e:38:86:48:94:98:18:a2:a6:1b:80:01:61:0e:
         bf:01:f4:89:a1:19:5d:9c:dd:1d:df:4d:ed:f1:d7:7a:a6:22:
         1b:1d:3c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:48:37 2026 by rpki-client