Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a663030303a3a2f34302d3438203d3e20313430393135.roa
File:                     323630323a663932613a663030303a3a2f34302d3438203d3e20313430393135.roa (raw, json)
Hash identifier:          0MEIUBup3qv1i1SPiI38Hu99JxS/lmJ93WOTGaX/FWA=
Subject key identifier:   B0:AC:AB:53:1F:E1:72:99:B5:7C:4C:15:63:10:55:34:0C:35:57:B9
Certificate issuer:       /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial:       4DB69C97DED1A12A131E76DDAAF6EAFE8D637F91
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a663030303a3a2f34302d3438203d3e20313430393135.roa
Signing time:             Fri 24 Oct 2025 17:08:06 +0000
ROA not before:           Fri 24 Oct 2025 17:03:06 +0000
ROA not after:            Fri 23 Oct 2026 17:08:06 +0000
asID:                     140915
IP address blocks:        2602:f92a:f000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Oct 2025 05:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b6:9c:97:de:d1:a1:2a:13:1e:76:dd:aa:f6:ea:fe:8d:63:7f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
        Validity
            Not Before: Oct 24 17:03:06 2025 GMT
            Not After : Oct 23 17:08:06 2026 GMT
        Subject: CN=B0ACAB531FE17299B57C4C15631055340C3557B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:11:67:b1:15:64:f8:37:d8:4f:2c:9f:93:a4:
                    53:bb:51:2c:03:49:0f:52:cf:ad:d3:6b:08:0e:78:
                    f1:fe:39:e4:99:13:6a:ef:17:29:3a:33:56:3b:7a:
                    9d:e7:6a:a0:98:c4:6f:24:2d:f5:85:1b:26:81:43:
                    f2:38:96:f8:ad:ff:a2:4b:fb:bc:8f:c2:46:47:10:
                    8a:91:15:d9:7d:7b:8e:4e:04:ca:84:6f:0d:74:47:
                    ba:d3:d5:42:26:4d:77:7e:f6:5c:ca:97:ef:a1:bc:
                    98:36:bf:5a:fa:e4:b9:fd:ce:59:eb:ee:3d:89:8a:
                    f0:f8:49:ee:0f:ed:97:49:df:a9:5b:05:46:38:29:
                    12:0a:55:97:36:27:50:6f:39:3c:1d:d4:9d:8d:e7:
                    35:36:54:40:52:98:14:6b:66:0b:1f:2c:02:9a:8f:
                    1a:ae:f7:69:4a:0a:87:89:c1:6d:46:50:39:41:6c:
                    19:11:b7:64:8a:f6:bb:0e:71:84:3b:7f:30:77:39:
                    c8:c5:3f:e3:87:f0:8b:7b:28:7d:83:61:13:33:4a:
                    07:02:42:d5:82:f5:8e:04:94:71:32:29:e9:cb:a1:
                    2f:6f:ed:fc:71:a6:4f:d4:a2:ea:a1:d3:1c:98:30:
                    05:ba:32:43:58:09:a2:a5:47:ab:d8:28:17:2c:f5:
                    fb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AC:AB:53:1F:E1:72:99:B5:7C:4C:15:63:10:55:34:0C:35:57:B9
            X509v3 Authority Key Identifier:
                keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a663030303a3a2f34302d3438203d3e20313430393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:85:ca:46:cb:ac:cd:77:16:92:30:b1:bb:b8:77:bd:c6:a0:
         2e:77:30:12:c1:68:2e:b3:74:63:52:e4:f5:5c:a9:73:b1:81:
         ed:b5:7e:a0:99:a2:e2:2a:d0:0b:50:92:af:c1:5c:b6:cd:14:
         5d:2c:de:dc:f6:f4:6d:78:b9:9c:c1:b2:51:5d:6b:1b:4d:3f:
         4b:a2:fb:71:f2:e0:54:92:b1:1b:0e:66:55:34:15:28:8d:2a:
         93:d9:dc:8e:2c:30:de:89:2b:29:19:5e:97:fe:23:c7:c3:17:
         b1:8e:3d:41:58:de:f8:0f:86:0f:01:a0:ea:98:90:4e:67:4b:
         63:9b:ab:7b:8b:87:93:e3:2b:8a:57:35:9d:e4:f9:fb:18:c0:
         0b:05:0e:15:0e:1f:03:5a:4d:07:96:a7:31:e6:71:e2:25:46:
         6e:90:7b:84:76:ae:7c:b4:4d:d8:b7:67:60:b1:a4:51:0b:d8:
         c6:c6:14:5a:87:47:f8:bb:15:e8:b3:5a:63:a1:19:2f:9e:2a:
         7c:1f:6c:7e:ef:80:41:99:8d:ed:61:a1:6f:2a:19:3a:2e:3a:
         c3:d1:29:5f:1c:39:d1:29:83:06:6a:14:8f:64:1f:7f:fc:db:
         82:04:97:8c:11:86:72:41:74:9a:01:0f:e2:38:8b:ca:92:b8:
         40:df:43:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:30:43 2025 by rpki-client