Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a653130303a3a2f34342d3438203d3e20313430393135.roa
File:                     323630323a663932613a653130303a3a2f34342d3438203d3e20313430393135.roa (raw, json)
Hash identifier:          Rxe81doYcLhSmYGob0lUEF9nPndgWbRjKPZDlpeWJTQ=
Subject key identifier:   FE:73:96:78:2F:32:2F:7D:F9:A7:04:D0:51:3F:54:4A:56:D2:E5:8A
Certificate issuer:       /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial:       15417BB715A7B509EDB9D6B57DB24C0F0105E86A
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a653130303a3a2f34342d3438203d3e20313430393135.roa
Signing time:             Fri 24 Oct 2025 17:07:49 +0000
ROA not before:           Fri 24 Oct 2025 17:02:49 +0000
ROA not after:            Fri 23 Oct 2026 17:07:49 +0000
asID:                     140915
IP address blocks:        2602:f92a:e100::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Oct 2025 05:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:41:7b:b7:15:a7:b5:09:ed:b9:d6:b5:7d:b2:4c:0f:01:05:e8:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
        Validity
            Not Before: Oct 24 17:02:49 2025 GMT
            Not After : Oct 23 17:07:49 2026 GMT
        Subject: CN=FE7396782F322F7DF9A704D0513F544A56D2E58A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:ce:5e:21:71:a2:66:7b:2c:f8:ab:22:f7:
                    57:91:8a:fe:1a:39:44:08:33:a2:44:fe:a3:2b:1b:
                    86:b8:ce:52:38:c2:1a:59:e2:b7:22:34:70:02:79:
                    84:43:a5:3a:84:b5:35:71:cb:d7:06:89:1a:7e:bc:
                    8d:39:6a:cb:a1:42:51:ce:f7:23:5a:e3:35:c7:bc:
                    24:28:00:1d:5c:e1:7d:47:19:ad:12:4a:26:a9:31:
                    74:f6:5b:3e:e8:88:25:83:15:3d:41:ce:c0:0a:09:
                    ec:34:90:85:0d:d1:5e:c4:aa:47:da:53:ef:ed:a2:
                    2f:4d:4d:db:1a:64:4e:5a:ef:e3:ea:b9:f6:77:f7:
                    cf:50:de:a1:5f:52:11:4f:97:30:52:4c:e5:b9:c8:
                    bd:aa:d8:4d:94:3d:0b:a2:3b:70:17:52:f9:a4:99:
                    6a:96:19:6c:34:eb:16:9c:9d:07:89:17:a1:02:e1:
                    80:b5:7e:6a:7b:06:b6:ad:5f:b8:b1:aa:16:9c:f0:
                    cb:c3:35:ad:95:68:a2:07:ac:8c:56:a0:ea:53:df:
                    91:3f:70:9f:56:56:d8:e1:0f:f5:67:9c:04:9f:9d:
                    71:76:78:36:08:f5:79:1f:de:ee:d4:91:f4:0c:95:
                    6c:05:e5:98:91:83:29:6a:b6:9f:6a:47:98:4d:7a:
                    da:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:73:96:78:2F:32:2F:7D:F9:A7:04:D0:51:3F:54:4A:56:D2:E5:8A
            X509v3 Authority Key Identifier:
                keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a653130303a3a2f34342d3438203d3e20313430393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:e100::/44

    Signature Algorithm: sha256WithRSAEncryption
         23:30:a3:99:93:b9:81:68:3d:2b:63:85:d3:a3:64:93:9f:a6:
         69:a2:7b:3c:f8:28:30:aa:1f:22:90:e4:16:63:2e:fe:71:a4:
         88:f3:a9:dc:fe:b1:c6:2a:8d:69:49:fb:0b:24:59:89:8c:6b:
         37:78:1a:bf:6e:53:5a:7e:59:43:13:7c:73:19:98:ca:ec:81:
         5a:d0:1b:34:1a:bc:ae:5a:a0:a2:88:98:16:f6:0e:8b:52:c2:
         72:6c:a0:a8:db:df:84:42:f8:8d:61:4a:f8:96:90:1b:d4:6b:
         96:db:d7:c1:f3:dd:2a:82:d3:e6:9c:ac:4a:40:d8:87:f1:72:
         af:f4:35:85:07:bd:5d:ed:d9:2d:5c:97:73:3a:18:5a:77:60:
         40:af:a7:bc:4d:c2:97:fd:1f:98:63:1c:2d:89:13:5f:8a:e0:
         9f:ae:6f:db:2e:f7:ee:61:2b:4b:39:bd:2f:11:8b:ff:d3:19:
         ac:ba:5a:5f:2b:eb:2d:e1:64:b3:48:28:58:64:8c:8d:48:09:
         79:65:57:0f:d9:53:c5:31:eb:8d:14:b7:7b:25:36:8d:78:b5:
         c5:01:a0:de:aa:f9:4c:6b:a1:0a:64:11:22:f8:e8:6c:7e:fb:
         38:a2:e5:57:f8:05:0b:9d:f2:73:7f:35:4c:c1:cf:2a:2a:84:
         12:e8:2e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:30:43 2025 by rpki-client