Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/326130623a346530373a326231303a3a2f34342d3434203d3e20323139333331.roa
File:                     326130623a346530373a326231303a3a2f34342d3434203d3e20323139333331.roa (raw, json)
Hash identifier:          6pqnMmr7+bNaS8ZFVOFF0jbH70Kf/THIum4De2bpy9w=
Subject key identifier:   7C:D5:B9:89:69:E1:08:48:81:B5:50:B7:14:98:3A:2C:E0:D1:3D:29
Certificate issuer:       /CN=379234C5E71F2624C3A35F324BC6732473DEF7D4
Certificate serial:       05E09D176B3314566BB86461B47534D517D259D3
Authority key identifier: 37:92:34:C5:E7:1F:26:24:C3:A3:5F:32:4B:C6:73:24:73:DE:F7:D4
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/326130623a346530373a326231303a3a2f34342d3434203d3e20323139333331.roa
Signing time:             Wed 02 Sep 2026 21:35:56 +0000
ROA not before:           Wed 02 Sep 2026 21:30:56 +0000
ROA not after:            Wed 01 Sep 2027 21:35:56 +0000
asID:                     219331
IP address blocks:        2a0b:4e07:2b10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 11:28:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e0:9d:17:6b:33:14:56:6b:b8:64:61:b4:75:34:d5:17:d2:59:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379234C5E71F2624C3A35F324BC6732473DEF7D4
        Validity
            Not Before: Sep  2 21:30:56 2026 GMT
            Not After : Sep  1 21:35:56 2027 GMT
        Subject: CN=7CD5B98969E1084881B550B714983A2CE0D13D29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:ef:5e:0a:99:c3:37:fb:84:96:ed:4d:b5:
                    3f:c5:8d:96:b7:6b:4a:f4:7d:0b:5b:7f:01:87:d1:
                    ab:a8:63:0d:9d:2f:d3:15:10:29:ff:b5:93:4e:61:
                    2e:9d:64:0e:48:21:5b:7c:2b:96:d2:e3:82:a4:86:
                    ed:4b:be:64:3f:e3:e4:6c:53:9a:59:3f:c0:b0:a6:
                    5e:2c:c5:9a:93:5d:5d:ae:84:54:cc:b5:38:c0:fc:
                    c7:4d:3e:17:c3:a6:e8:50:43:82:cd:5e:8f:ef:d2:
                    fd:e3:c5:40:46:6b:b8:95:83:b5:73:d4:e7:01:6d:
                    0d:a6:96:43:f4:de:05:4f:49:7d:99:bb:e0:d2:51:
                    7d:f0:49:7d:8d:ea:21:05:54:91:94:05:c8:9f:23:
                    02:0e:f9:74:2c:5f:3b:df:25:0d:f2:39:aa:e7:a6:
                    a0:be:88:a3:b1:27:00:41:a5:60:3e:cd:03:5b:9a:
                    66:2e:f3:1c:5e:45:84:64:ec:ba:28:94:d2:7b:42:
                    c9:41:c7:03:16:75:23:41:aa:ab:d2:ae:fe:7e:d7:
                    14:10:ae:b8:0a:0a:7c:43:0f:28:4d:15:6f:e6:4a:
                    35:30:9a:ce:dc:ae:a1:b4:9b:dd:9f:48:ee:7b:34:
                    53:25:c3:cd:26:c4:bc:39:37:a4:fe:d5:69:8c:57:
                    f8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D5:B9:89:69:E1:08:48:81:B5:50:B7:14:98:3A:2C:E0:D1:3D:29
            X509v3 Authority Key Identifier:
                keyid:37:92:34:C5:E7:1F:26:24:C3:A3:5F:32:4B:C6:73:24:73:DE:F7:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/326130623a346530373a326231303a3a2f34342d3434203d3e20323139333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:2b10::/44

    Signature Algorithm: sha256WithRSAEncryption
         5f:e9:f6:eb:98:15:c9:e2:d6:ed:36:7f:07:47:3d:a1:ff:70:
         e5:aa:85:3c:c6:e0:02:76:ba:f7:7c:ab:cb:ec:c8:23:15:e2:
         21:90:39:45:3c:fb:3e:24:68:47:54:9f:f1:2c:12:c5:5f:92:
         b5:64:71:83:ea:c9:39:00:1f:00:f8:f2:67:a8:fb:c0:80:7e:
         66:6d:0a:89:73:2c:2b:dc:f6:c6:97:9e:8d:6a:0a:4f:96:6b:
         e1:47:9d:89:96:e7:aa:f7:a0:67:42:73:ab:87:75:8d:ad:7f:
         df:4f:48:b8:fd:42:6d:a4:f5:78:1d:4c:5e:16:ab:fd:89:dd:
         0e:df:e8:79:d6:f2:c8:08:1f:bb:ce:ed:73:56:e9:58:d5:26:
         74:58:6b:0d:ed:a8:fe:51:f8:a7:6f:2f:1b:3e:bf:a9:a6:14:
         2f:0a:1c:f6:d3:de:7b:9f:bd:03:87:43:a8:db:1a:ec:ee:47:
         de:26:1b:bd:ac:92:7d:b7:70:ae:ce:c0:8e:17:08:41:1a:ab:
         f5:be:3f:8c:a6:2a:59:42:1a:c3:b8:ca:c9:55:a0:3f:7b:96:
         b6:a1:20:8c:5e:49:31:5a:0b:93:11:da:18:7c:f9:ff:3f:81:
         97:b9:36:db:29:90:7a:43:0c:ba:37:f8:1a:21:10:b1:ef:35:
         c2:30:d3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:45 2026 by rpki-client