Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a313331343a3a2f34382d3438203d3e20323034353138.roa
File:                     323630323a663932613a313331343a3a2f34382d3438203d3e20323034353138.roa (raw, json)
Hash identifier:          koHJDDDFT0xYjdI8D+a7kBimNIpjMm1+OQcUfCWMQEc=
Subject key identifier:   68:F8:F4:9E:C6:56:C6:41:EF:94:5D:4E:3B:C7:B4:E4:8E:5A:F6:94
Certificate issuer:       /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial:       3622B62406426A581A4D84BEA1AAC03F0BB0BE9C
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a313331343a3a2f34382d3438203d3e20323034353138.roa
Signing time:             Sat 01 Nov 2025 00:04:42 +0000
ROA not before:           Fri 31 Oct 2025 23:59:42 +0000
ROA not after:            Sat 31 Oct 2026 00:04:42 +0000
asID:                     204518
IP address blocks:        2602:f92a:1314::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 11:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:22:b6:24:06:42:6a:58:1a:4d:84:be:a1:aa:c0:3f:0b:b0:be:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
        Validity
            Not Before: Oct 31 23:59:42 2025 GMT
            Not After : Oct 31 00:04:42 2026 GMT
        Subject: CN=68F8F49EC656C641EF945D4E3BC7B4E48E5AF694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:91:d2:d8:0a:e3:96:5f:94:30:db:05:0a:81:
                    99:70:2e:8d:24:f2:87:22:f4:0f:1d:af:d1:67:11:
                    34:83:fc:16:82:34:06:c2:26:18:13:3f:0e:a6:2a:
                    ae:a8:d4:35:f8:7a:cf:51:53:5d:9d:f9:6b:b3:10:
                    4a:6b:b4:c7:73:6b:a4:56:8a:a6:80:12:97:f8:82:
                    b4:62:48:fe:ae:d9:da:69:42:fd:51:f1:ad:42:c6:
                    b3:76:9f:5d:2a:b2:e4:31:df:a4:0c:2d:e1:73:b2:
                    74:dd:e5:c2:73:d6:4e:6c:4b:fc:bb:76:a2:f4:a3:
                    05:e4:01:1a:c4:e4:43:6b:04:06:fb:71:e3:19:5f:
                    83:93:8c:1f:f1:fe:30:0c:62:b6:dd:43:9b:62:8e:
                    11:b1:9e:cd:f9:0e:48:38:c1:25:0c:b6:a6:16:be:
                    c3:65:e8:5f:eb:6d:e8:21:0c:91:2d:4e:7b:99:96:
                    f4:95:71:bd:23:11:d1:c5:33:f8:f1:15:fd:5f:c2:
                    84:36:4c:a7:0e:06:e7:1f:13:da:8e:3d:a0:94:5c:
                    32:d7:6b:44:0e:f3:3b:18:ea:4a:85:c0:3a:c9:03:
                    b7:61:08:68:67:cc:4a:90:38:9a:53:c9:41:46:74:
                    53:15:fd:42:b3:2a:7a:33:63:7a:3e:59:e2:18:1c:
                    b8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F8:F4:9E:C6:56:C6:41:EF:94:5D:4E:3B:C7:B4:E4:8E:5A:F6:94
            X509v3 Authority Key Identifier:
                keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a313331343a3a2f34382d3438203d3e20323034353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:1314::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:a7:f5:01:43:b2:6f:63:d1:d1:b8:56:73:b9:f0:98:28:35:
         b1:39:fc:9e:5f:7c:13:17:88:bd:a3:53:e9:4d:26:a7:42:a8:
         09:0e:19:1e:e8:39:b5:91:05:cb:33:c4:76:9b:07:98:9b:55:
         2c:1e:69:10:f4:98:79:de:63:5f:01:c1:ed:b6:28:ff:46:d5:
         c5:ff:59:71:20:30:4d:68:0a:7c:bf:c9:3e:58:5c:b0:a6:e0:
         e7:cf:8a:36:5e:28:d2:32:75:85:57:ef:67:04:41:0f:5c:e5:
         95:e6:82:f2:d5:10:00:86:62:32:ac:cc:97:11:83:fa:67:9d:
         20:dc:62:24:8c:30:93:4f:14:78:0d:67:92:8f:4d:65:1d:f1:
         3a:24:f2:87:23:ee:49:49:6a:83:ee:19:08:9c:06:ee:93:35:
         2a:10:b4:7a:81:58:38:fd:e6:b1:74:56:ca:41:5f:ee:31:5b:
         04:cc:9c:c2:50:d2:1a:e8:47:4c:fa:b7:05:ec:bd:7f:15:9a:
         45:1c:fe:96:46:ce:e6:95:cf:5e:77:04:7d:c2:0b:b2:a1:fe:
         7d:dc:45:ce:a2:42:ea:da:e2:fe:49:41:e5:03:4f:4f:5d:ac:
         ce:4e:93:f9:f6:4b:0d:8c:ab:fd:86:54:98:67:3c:39:df:8a:
         f5:50:90:cf
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIUNiK2JAZCalgaTYS+oarAPwuwvpwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2
MjAxNzZmMTBlMjAxMGQyMmQwHhcNMjUxMDMxMjM1OTQyWhcNMjYxMDMxMDAwNDQy
WjAzMTEwLwYDVQQDEyg2OEY4RjQ5RUM2NTZDNjQxRUY5NDVENEUzQkM3QjRFNDhF
NUFGNjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5HS2Arjll+U
MNsFCoGZcC6NJPKHIvQPHa/RZxE0g/wWgjQGwiYYEz8OpiquqNQ1+HrPUVNdnflr
sxBKa7THc2ukVoqmgBKX+IK0Ykj+rtnaaUL9UfGtQsazdp9dKrLkMd+kDC3hc7J0
3eXCc9ZObEv8u3ai9KMF5AEaxORDawQG+3HjGV+Dk4wf8f4wDGK23UObYo4RsZ7N
+Q5IOMElDLamFr7DZehf623oIQyRLU57mZb0lXG9IxHRxTP48RX9X8KENkynDgbn
HxPajj2glFwy12tEDvM7GOpKhcA6yQO3YQhoZ8xKkDiaU8lBRnRTFf1Csyp6M2N6
PlniGBy4WQIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFGj49J7GVsZB75RdTjvHtOSO
WvaUMB8GA1UdIwQYMBaAFN75z21P+EIkA6C2XhOatTxgi5ISMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4
LWYzNDVmNTJiYzI1ZC8xL0RFRjlDRjZENEZGODQyMjQwM0EwQjY1RTEzOUFCNTND
NjA4QjkyMTIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt
NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k
OWJkYmFiYTQyMTAvYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2MjAx
NzZmMTBlMjAxMGQyMmQuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH
MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4LWYzNDVmNTJiYzI1ZC8xLzMyMzYzMDMy
M2E2NjM5MzI2MTNhMzEzMzMxMzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMw
MzQzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAmAvkqExQwDQYJKoZIhvcNAQELBQADggEBAE+n
9QFDsm9j0dG4VnO58JgoNbE5/J5ffBMXiL2jU+lNJqdCqAkOGR7oObWRBcszxHab
B5ibVSweaRD0mHneY18Bwe22KP9G1cX/WXEgME1oCny/yT5YXLCm4OfPijZeKNIy
dYVX72cEQQ9c5ZXmgvLVEACGYjKszJcRg/pnnSDcYiSMMJNPFHgNZ5KPTWUd8Tok
8ocj7klJaoPuGQicBu6TNSoQtHqBWDj95rF0VspBX+4xWwTMnMJQ0hroR0z6twXs
vX8VmkUc/pZGzuaVz153BH3CC7Kh/n3cRc6iQura4v5JQeUDT09drM5Ok/n2Sw2M
q/2GVJhnPDnfivVQkM8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:20:12 2025 by rpki-client