Route Origin Authorization

$ rpki-client -vvf rsync.prefixlogic.com/repo/prefixlogic/0/323630323a663833643a63373a3a2f34382d3438203d3e2034323030343031333832.roa
File:                     323630323a663833643a63373a3a2f34382d3438203d3e2034323030343031333832.roa (raw, json)
Hash identifier:          3Unb7capOZ9ftRdUHP/4EChY6eIxYB58R3JPKBrkaow=
Subject key identifier:   EB:52:4F:4F:BF:C8:A4:78:5D:CF:3F:14:07:BC:93:3A:3B:FF:56:78
Certificate issuer:       /CN=ADAAE86C6188FA967BD17012C29A186590025DFA
Certificate serial:       4CC73799F8675AAE4318E1BB0C0845A0C0F5B468
Authority key identifier: AD:AA:E8:6C:61:88:FA:96:7B:D1:70:12:C2:9A:18:65:90:02:5D:FA
Authority info access:    rsync://rpki-pp.com/repo/GOOFL/0/ADAAE86C6188FA967BD17012C29A186590025DFA.cer
Subject info access:      rsync://rsync.prefixlogic.com/repo/prefixlogic/0/323630323a663833643a63373a3a2f34382d3438203d3e2034323030343031333832.roa
Signing time:             Sun 24 May 2026 00:44:20 +0000
ROA not before:           Sun 24 May 2026 00:39:20 +0000
ROA not after:            Sun 23 May 2027 00:44:20 +0000
asID:                     4200401382
IP address blocks:        2602:f83d:c7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.prefixlogic.com/repo/prefixlogic/0/ADAAE86C6188FA967BD17012C29A186590025DFA.crl
                          rsync://rsync.prefixlogic.com/repo/prefixlogic/0/ADAAE86C6188FA967BD17012C29A186590025DFA.mft
                          rsync://rpki-pp.com/repo/GOOFL/0/ADAAE86C6188FA967BD17012C29A186590025DFA.cer
                          rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
                          rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/7c9b1947-b813-43b3-9152-c4ccbff1cde7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/7c9b1947-b813-43b3-9152-c4ccbff1cde7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c7:37:99:f8:67:5a:ae:43:18:e1:bb:0c:08:45:a0:c0:f5:b4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAAE86C6188FA967BD17012C29A186590025DFA
        Validity
            Not Before: May 24 00:39:20 2026 GMT
            Not After : May 23 00:44:20 2027 GMT
        Subject: CN=EB524F4FBFC8A4785DCF3F1407BC933A3BFF5678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:98:0d:01:f7:75:c3:3c:00:88:04:3e:7d:ba:
                    ee:64:07:8f:47:c0:ea:91:64:33:2a:e1:42:64:db:
                    5d:09:b1:16:e8:fa:cb:74:16:5f:15:82:35:c9:a6:
                    33:59:1a:88:3e:89:42:0c:80:f7:5a:60:90:e3:60:
                    36:6b:83:8b:29:03:fb:fc:69:c7:d3:30:17:b1:66:
                    54:11:8d:5f:69:14:24:b8:d2:ba:62:74:13:de:ce:
                    9b:e4:92:85:d9:a4:d2:c0:e0:f9:67:4b:4d:ff:f4:
                    f1:09:33:6f:af:b0:37:b1:fb:35:dd:67:22:d9:0b:
                    b0:b4:d7:bd:8f:fb:27:22:27:60:c9:8e:e1:bc:2a:
                    11:4c:68:92:1d:0d:c6:c7:11:d4:ae:49:e2:03:20:
                    7f:59:ef:68:f6:47:99:b7:6a:15:18:8f:c4:82:ac:
                    1d:b4:15:de:ee:ea:e4:a4:80:53:ee:e3:82:50:fd:
                    d0:9c:b8:5e:9c:0e:18:df:b2:7b:70:e9:42:7b:8f:
                    f0:39:97:14:e2:1f:fe:14:2e:2e:6b:ea:0f:3d:7b:
                    03:e1:82:22:72:74:0c:15:c3:5c:dc:06:de:85:85:
                    51:bb:a7:49:53:b3:63:12:1f:75:26:32:11:b9:a9:
                    64:54:7f:43:4d:5b:a3:94:14:3a:18:db:4f:ac:7e:
                    ad:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:52:4F:4F:BF:C8:A4:78:5D:CF:3F:14:07:BC:93:3A:3B:FF:56:78
            X509v3 Authority Key Identifier:
                keyid:AD:AA:E8:6C:61:88:FA:96:7B:D1:70:12:C2:9A:18:65:90:02:5D:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.prefixlogic.com/repo/prefixlogic/0/ADAAE86C6188FA967BD17012C29A186590025DFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-pp.com/repo/GOOFL/0/ADAAE86C6188FA967BD17012C29A186590025DFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.prefixlogic.com/repo/prefixlogic/0/323630323a663833643a63373a3a2f34382d3438203d3e2034323030343031333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83d:c7::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:79:3d:0d:27:b1:07:58:0a:3a:3a:1c:00:22:d4:7e:8d:88:
         74:ed:2d:4e:44:77:8b:8f:14:d1:57:74:25:dd:2f:5f:4d:06:
         95:72:2c:c9:c9:68:b8:90:f5:47:0e:96:83:df:b9:a5:d1:04:
         e8:66:3c:9e:62:85:e7:f3:43:a1:b0:c5:72:1e:5d:62:f0:a0:
         d7:c1:ba:a9:db:80:7b:b0:93:97:d3:8e:a3:b5:8d:e6:5c:43:
         99:9e:28:d2:e1:56:ca:2b:0a:a7:05:13:03:79:92:e0:28:ba:
         9d:b2:e4:2a:d1:f6:1f:24:84:d4:99:c4:df:45:08:89:16:85:
         36:48:0b:98:9e:f7:da:27:69:7b:e7:8e:6d:1d:c5:6d:9d:75:
         0d:80:eb:13:74:07:6b:d6:2e:51:f5:01:cb:97:1d:56:56:ab:
         cd:33:31:73:a5:63:bf:1a:b9:b2:fa:85:55:e3:a2:9c:c6:4d:
         c8:24:cd:8b:ae:9b:09:f4:0f:fc:55:a6:a4:0b:55:4c:d8:7d:
         26:d9:10:31:a7:57:a1:26:8f:2b:05:37:c2:54:9b:c7:3d:43:
         bf:36:47:38:79:06:1f:2c:02:fa:89:70:aa:61:10:66:d4:4e:
         90:ac:5d:4d:85:c9:49:54:f3:3a:64:f2:17:8e:6a:93:8f:22:
         30:d7:14:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 09:26:22 2026 by rpki-client