Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613437303a3a2f34382d3438203d3e20323038373534.roa
File:                     323630323a663932613a613437303a3a2f34382d3438203d3e20323038373534.roa (raw, json)
Hash identifier:          vr8Z8zerFeHLwPG1Sj5JmKhD36wh/wZg2B1HvzcqjWk=
Subject key identifier:   CA:94:49:66:82:1A:34:25:86:89:0C:A6:53:E2:D1:CC:F5:C8:35:A6
Certificate issuer:       /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial:       2F85D107E9172C475871542D1C0CB0D6C3BF6F41
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613437303a3a2f34382d3438203d3e20323038373534.roa
Signing time:             Fri 24 Oct 2025 17:12:20 +0000
ROA not before:           Fri 24 Oct 2025 17:07:20 +0000
ROA not after:            Fri 23 Oct 2026 17:12:20 +0000
asID:                     208754
IP address blocks:        2602:f92a:a470::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Oct 2025 05:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:85:d1:07:e9:17:2c:47:58:71:54:2d:1c:0c:b0:d6:c3:bf:6f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
        Validity
            Not Before: Oct 24 17:07:20 2025 GMT
            Not After : Oct 23 17:12:20 2026 GMT
        Subject: CN=CA944966821A342586890CA653E2D1CCF5C835A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:7c:06:33:7a:27:4b:33:b4:48:81:16:42:
                    ba:11:53:b2:c7:66:c0:e1:11:2e:6c:0c:b9:99:b0:
                    30:5c:87:b2:ad:38:a2:41:29:11:27:cf:74:ab:a9:
                    05:e7:10:70:6e:d2:f0:be:cf:5e:16:7d:6c:0d:7d:
                    18:28:de:4e:8d:69:ca:92:8a:4c:6f:3d:ef:2a:64:
                    fa:f9:ec:18:1a:b1:c6:22:ba:ee:26:0c:92:b9:9a:
                    cd:0d:3a:0b:8c:db:e6:97:00:d2:69:34:ac:a4:85:
                    4d:d2:c9:21:21:37:b4:3d:b3:d6:a8:ae:bd:f7:c8:
                    49:40:e2:1a:a2:dd:e4:0d:8f:8b:57:d6:72:a0:69:
                    b7:4b:24:48:25:65:18:e5:98:13:df:e0:c6:6a:7e:
                    8c:92:73:c0:03:6f:50:f3:98:7d:30:ff:f3:7a:ea:
                    70:a3:3f:15:6d:cc:88:96:43:0b:d0:06:a2:87:69:
                    d4:3a:51:0f:ee:02:44:e1:8b:ba:dd:5e:22:6f:bc:
                    df:0e:06:3f:a2:fc:c2:04:30:ff:a2:df:40:54:28:
                    da:38:f6:ca:1b:13:3b:16:cf:dd:8c:87:7f:91:a2:
                    de:33:f5:ae:a2:d8:85:90:30:b3:28:3b:88:97:d0:
                    47:aa:72:57:75:ff:75:43:8a:94:2f:ec:cb:75:47:
                    56:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:94:49:66:82:1A:34:25:86:89:0C:A6:53:E2:D1:CC:F5:C8:35:A6
            X509v3 Authority Key Identifier:
                keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613437303a3a2f34382d3438203d3e20323038373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a470::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:53:8f:35:ee:03:88:bb:72:c1:64:57:60:2b:9c:38:cc:92:
         bb:de:5f:a0:30:5f:67:1d:dd:f0:04:cf:23:45:d6:9e:c8:b1:
         c9:24:55:70:96:ba:3d:74:3b:42:b8:b8:a6:ee:82:1e:3b:3b:
         0e:6c:3b:2d:5e:f0:5d:fa:4f:a5:4a:16:a1:8d:5e:a2:58:56:
         61:ac:17:8a:6b:f9:fc:0d:06:d6:2d:fc:56:ee:96:5a:fc:d5:
         f2:71:87:d6:2a:1a:81:df:3c:57:0f:0a:fc:19:8b:d0:28:e6:
         8d:db:81:a6:da:f4:3c:d1:7e:4b:25:d7:c6:ff:0d:31:c3:cc:
         12:67:3b:66:4c:cf:32:68:c0:1e:98:cc:9c:2a:28:d8:b3:c7:
         77:b9:d9:55:b2:a3:83:a8:8f:96:af:7c:27:0e:7b:fd:60:b9:
         17:a0:04:e9:da:a7:39:4d:d2:0a:bc:6e:14:7c:07:e8:5e:c4:
         86:e7:42:30:a7:fb:cc:ee:8f:bf:4e:c5:30:e8:57:34:a3:cf:
         9e:6a:4d:da:10:e2:1a:c7:01:78:60:e5:85:a9:f5:71:a4:35:
         72:91:5f:78:03:bc:26:55:40:31:d4:4d:6f:e3:7d:eb:ca:f5:
         86:ef:0c:23:88:ad:60:6b:a8:19:7b:28:59:45:82:17:3d:0a:
         cb:30:81:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:32:17 2025 by rpki-client