Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/326130363a313238353a616435353a3a2f34382d3438203d3e203331383938.roa
File:                     326130363a313238353a616435353a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier:          gEq1PyQ0/WyvK1nTs6bKynEeXPOPYcgFZMOk1v3GFlk=
Subject key identifier:   5B:2F:C1:60:34:CE:0C:D8:C7:C4:F1:39:B1:E1:82:90:58:0C:AE:1F
Certificate issuer:       /CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8
Certificate serial:       484ECDF5F1D5BE4EDB764CD0AC326619F05DF292
Authority key identifier: 54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/326130363a313238353a616435353a3a2f34382d3438203d3e203331383938.roa
Signing time:             Sun 22 Feb 2026 00:57:54 +0000
ROA not before:           Sun 22 Feb 2026 00:52:54 +0000
ROA not after:            Sun 21 Feb 2027 00:57:54 +0000
asID:                     31898
IP address blocks:        2a06:1285:ad55::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Feb 2026 18:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:4e:cd:f5:f1:d5:be:4e:db:76:4c:d0:ac:32:66:19:f0:5d:f2:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8
        Validity
            Not Before: Feb 22 00:52:54 2026 GMT
            Not After : Feb 21 00:57:54 2027 GMT
        Subject: CN=5B2FC16034CE0CD8C7C4F139B1E18290580CAE1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:cb:c1:73:40:cd:0e:f2:e2:71:10:ff:3c:
                    7f:dd:c8:bc:4a:5e:75:6a:1f:2b:fa:9f:58:72:7f:
                    fb:51:45:66:c3:11:95:80:2e:8f:fb:bc:68:f9:4f:
                    bd:9f:75:d2:07:75:20:a3:9e:3a:4e:32:c6:49:32:
                    e1:60:9d:f6:08:9d:de:1d:58:75:49:eb:fd:d0:7b:
                    52:0b:a8:3f:9a:76:25:35:ce:df:c6:8e:33:90:ae:
                    50:49:70:e8:e1:44:d3:69:43:c4:a4:2f:a4:73:3d:
                    c4:6c:f7:e1:19:a0:7f:9a:1b:45:d9:ca:29:47:e7:
                    ba:49:c2:e9:6b:73:c8:02:d8:8c:93:f7:f1:80:68:
                    13:e7:14:6c:ac:02:be:13:f0:77:d8:01:f1:6f:74:
                    fe:6e:bc:99:ab:dc:ed:48:7a:b5:d8:58:64:ca:b5:
                    2c:d2:b1:69:d8:69:f2:03:c8:72:21:1e:46:a4:e4:
                    8f:b3:c6:3d:58:1a:b6:63:9c:cc:e9:a6:5b:44:7f:
                    0e:be:a2:45:f4:95:0d:1b:5f:c8:58:74:3b:67:b6:
                    97:c5:47:1a:24:ba:ff:1d:f0:cc:02:06:4e:86:fb:
                    fd:f6:4c:93:b9:00:6e:26:e4:ba:33:bf:ea:2a:9e:
                    d4:bb:e0:32:12:b5:31:a1:b6:b3:52:0b:35:01:39:
                    5a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2F:C1:60:34:CE:0C:D8:C7:C4:F1:39:B1:E1:82:90:58:0C:AE:1F
            X509v3 Authority Key Identifier:
                keyid:54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/326130363a313238353a616435353a3a2f34382d3438203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1285:ad55::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:84:82:3e:26:59:6b:aa:e5:3f:53:e5:49:49:f0:3d:68:b4:
         d4:b9:b5:99:16:e4:9f:09:65:f2:b0:d1:f1:6c:19:4e:c9:b0:
         cb:44:cb:6a:ce:f4:85:c4:b1:a4:b0:a8:bc:61:e2:ac:76:9e:
         ef:ef:22:12:c8:7b:0a:f3:fd:bd:d8:d5:39:81:5f:b0:08:eb:
         6b:72:a0:9d:3c:4d:4c:28:2b:52:e7:e2:8b:99:45:40:bd:85:
         d7:7e:f8:3e:bc:82:40:3e:21:07:8b:2b:79:73:c7:ee:16:1e:
         4e:ae:b9:f5:e4:2a:33:19:72:08:98:26:aa:21:a0:9d:31:90:
         f9:30:94:11:1d:92:a2:7f:1b:94:cc:ec:e1:57:df:e8:3f:a6:
         42:7b:b2:88:1a:08:c8:a1:fa:74:84:0c:01:b0:c5:e2:df:a9:
         78:00:4c:6f:6b:5a:75:32:4b:eb:6d:62:9e:90:19:cb:27:3a:
         4c:f1:ad:15:17:33:93:f5:db:45:1a:35:9a:96:6f:f6:db:d4:
         91:c4:50:04:81:f8:5a:f1:1b:db:cf:aa:65:bf:d0:51:17:e8:
         c5:1c:85:b3:98:4c:65:6d:3d:3f:02:35:b3:be:95:33:fa:03:
         01:a4:93:43:c5:c2:c8:65:bc:12:05:54:bd:94:1f:75:68:18:
         bf:f0:04:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:41:18 2026 by rpki-client