Route Origin Authorization

$ rpki-client -vvvf rsync.proxy-arp.network/repo/bgp43-u31-p6e8df63c4c/2/326130623a346530373a3237303a3a2f34342d3434203d3e203131393637.roa
File:                     326130623a346530373a3237303a3a2f34342d3434203d3e203131393637.roa (raw, json)
Hash identifier:          /EWBKV1VdgrS08ThmQoilXG4e4gqTOB0aQqnJsWA1gU=
Subject key identifier:   D1:DF:D4:F7:AC:DD:D4:24:AF:23:C1:4D:09:5E:E8:BE:34:5B:CA:7C
Certificate issuer:       /CN=F29518F0861C6F343369FDEC84F16D00667B5421
Certificate serial:       0F170F4421FD94D5CBCE0E26617721C8562A57C6
Authority key identifier: F2:95:18:F0:86:1C:6F:34:33:69:FD:EC:84:F1:6D:00:66:7B:54:21
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/F29518F0861C6F343369FDEC84F16D00667B5421.cer
Subject info access:      rsync://rsync.proxy-arp.network/repo/bgp43-u31-p6e8df63c4c/2/326130623a346530373a3237303a3a2f34342d3434203d3e203131393637.roa
Signing time:             Thu 29 Oct 2026 09:48:09 +0000
ROA not before:           Thu 29 Oct 2026 09:43:09 +0000
ROA not after:            Thu 28 Oct 2027 09:48:09 +0000
asID:                     11967
IP address blocks:        2a0b:4e07:270::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rsync.proxy-arp.network/repo/bgp43-u31-p6e8df63c4c/2/F29518F0861C6F343369FDEC84F16D00667B5421.crl
                          rsync://rsync.proxy-arp.network/repo/bgp43-u31-p6e8df63c4c/2/F29518F0861C6F343369FDEC84F16D00667B5421.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/F29518F0861C6F343369FDEC84F16D00667B5421.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:17:0f:44:21:fd:94:d5:cb:ce:0e:26:61:77:21:c8:56:2a:57:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F29518F0861C6F343369FDEC84F16D00667B5421
        Validity
            Not Before: Oct 29 09:43:09 2026 GMT
            Not After : Oct 28 09:48:09 2027 GMT
        Subject: CN=D1DFD4F7ACDDD424AF23C14D095EE8BE345BCA7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:62:8f:ff:18:93:37:92:41:e8:14:8c:9e:
                    a2:8e:01:7b:f2:7c:ac:52:fe:9a:72:68:be:8b:60:
                    8a:9e:37:eb:e3:8b:70:6f:3c:34:89:e8:02:75:a3:
                    a9:e1:00:b3:37:38:3c:8b:5f:b1:19:7a:7f:03:10:
                    83:e8:de:bd:02:d1:52:dd:e9:a9:85:8d:72:2f:e2:
                    47:bc:55:a9:06:a6:72:43:0c:a9:e8:18:4f:8e:6b:
                    41:fe:0e:b6:48:0e:f0:16:84:5b:be:57:1a:53:22:
                    bc:51:fc:0c:9f:5f:e7:b8:f9:e5:97:f5:22:8e:58:
                    47:6b:e1:02:a8:2d:6c:84:55:dd:c1:0d:f5:3f:78:
                    1c:d4:59:11:63:4c:c6:b7:7e:10:59:19:c2:7e:b8:
                    d3:ad:dd:df:2f:f6:db:80:28:ea:41:41:d2:22:ec:
                    a0:fe:18:03:59:39:00:55:dd:28:01:cd:ab:1c:ab:
                    19:37:18:1a:2e:94:08:88:dc:d2:a2:0e:b7:13:96:
                    f4:3e:75:aa:7a:79:67:c4:83:7d:4e:e9:d7:0c:9d:
                    c3:ce:87:b6:5d:9a:d8:0a:53:41:e0:a3:9c:86:ad:
                    2c:f9:cf:2a:3f:2d:5b:e2:33:b2:09:ab:fd:86:a0:
                    09:f0:bf:99:81:2a:a3:3a:23:cf:f5:c1:f3:6e:32:
                    ae:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DF:D4:F7:AC:DD:D4:24:AF:23:C1:4D:09:5E:E8:BE:34:5B:CA:7C
            X509v3 Authority Key Identifier:
                keyid:F2:95:18:F0:86:1C:6F:34:33:69:FD:EC:84:F1:6D:00:66:7B:54:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.proxy-arp.network/repo/bgp43-u31-p6e8df63c4c/2/F29518F0861C6F343369FDEC84F16D00667B5421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/F29518F0861C6F343369FDEC84F16D00667B5421.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.proxy-arp.network/repo/bgp43-u31-p6e8df63c4c/2/326130623a346530373a3237303a3a2f34342d3434203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:270::/44

    Signature Algorithm: sha256WithRSAEncryption
         20:f5:15:d8:bb:62:5e:ee:b1:0c:2c:e2:bf:ff:3d:c3:e8:e4:
         26:aa:fe:1c:8d:c7:3f:6e:ed:36:03:73:a5:22:c7:f0:7e:cb:
         2a:54:a9:08:b8:6e:11:51:1a:e0:c0:17:de:0e:9b:e5:07:7f:
         ba:cf:dc:ec:24:56:81:6e:48:ed:07:6d:f6:60:c7:de:38:69:
         0f:09:6e:6b:20:21:ec:b8:2a:9e:22:60:e4:7f:9a:f4:98:81:
         f9:6d:6a:1d:1f:26:f3:79:d6:f9:a4:2c:d4:04:de:5a:07:62:
         cc:07:84:d9:91:ba:3c:8d:f6:58:91:f6:0a:eb:2c:94:08:7e:
         d9:fd:fd:f6:33:b2:d2:ef:39:79:ed:1d:82:c5:00:48:e0:de:
         29:82:a0:74:bf:1d:bf:ea:c9:fa:2f:e8:53:94:fd:57:cd:22:
         94:8a:f0:58:02:00:b4:ef:d8:b6:0b:66:be:9b:35:df:e2:b2:
         cf:75:b5:6e:2b:1a:04:00:1c:61:52:c8:26:3e:31:7b:b2:c7:
         29:70:71:fe:4c:6e:44:a0:37:68:2a:48:a4:90:f9:9f:f5:89:
         92:51:42:12:23:5e:42:b1:4b:82:98:6a:68:ad:3e:7d:ba:ec:
         08:a5:d3:c7:66:49:a6:89:90:a8:c1:3f:dd:67:54:25:c9:5f:
         65:9f:4f:ee
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgIUDxcPRCH9lNXLzg4mYXchyFYqV8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI5NTE4RjA4NjFDNkYzNDMzNjlGREVDODRGMTZEMDA2
NjdCNTQyMTAeFw0yNjEwMjkwOTQzMDlaFw0yNzEwMjgwOTQ4MDlaMDMxMTAvBgNV
BAMTKEQxREZENEY3QUNEREQ0MjRBRjIzQzE0RDA5NUVFOEJFMzQ1QkNBN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpkWKP/xiTN5JB6BSMnqKOAXvy
fKxS/ppyaL6LYIqeN+vji3BvPDSJ6AJ1o6nhALM3ODyLX7EZen8DEIPo3r0C0VLd
6amFjXIv4ke8VakGpnJDDKnoGE+Oa0H+DrZIDvAWhFu+VxpTIrxR/AyfX+e4+eWX
9SKOWEdr4QKoLWyEVd3BDfU/eBzUWRFjTMa3fhBZGcJ+uNOt3d8v9tuAKOpBQdIi
7KD+GANZOQBV3SgBzascqxk3GBoulAiI3NKiDrcTlvQ+dap6eWfEg31O6dcMncPO
h7ZdmtgKU0Hgo5yGrSz5zyo/LVviM7IJq/2GoAnwv5mBKqM6I8/1wfNuMq7JAgMB
AAGjggJDMIICPzAdBgNVHQ4EFgQU0d/U96zd1CSvI8FNCV7ovjRbynwwHwYDVR0j
BBgwFoAU8pUY8IYcbzQzaf3shPFtAGZ7VCEwDgYDVR0PAQH/BAQDAgeAMHoGA1Ud
HwRzMHEwb6BtoGuGaXJzeW5jOi8vcnN5bmMucHJveHktYXJwLm5ldHdvcmsvcmVw
by9iZ3A0My11MzEtcDZlOGRmNjNjNGMvMi9GMjk1MThGMDg2MUM2RjM0MzM2OUZE
RUM4NEYxNkQwMDY2N0I1NDIxLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsG
AQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFh
NDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS9GMjk1MThGMDg2MUM2RjM0
MzM2OUZERUM4NEYxNkQwMDY2N0I1NDIxLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYww
gYkGCCsGAQUFBzALhn1yc3luYzovL3JzeW5jLnByb3h5LWFycC5uZXR3b3JrL3Jl
cG8vYmdwNDMtdTMxLXA2ZThkZjYzYzRjLzIvMzI2MTMwNjIzYTM0NjUzMDM3M2Ez
MjM3MzAzYTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMxMzkzNjM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcEKgtOBwJwMA0GCSqGSIb3DQEBCwUAA4IBAQAg9RXYu2Je7rEMLOK//z3D6OQm
qv4cjcc/bu02A3OlIsfwfssqVKkIuG4RURrgwBfeDpvlB3+6z9zsJFaBbkjtB232
YMfeOGkPCW5rICHsuCqeImDkf5r0mIH5bWodHybzedb5pCzUBN5aB2LMB4TZkbo8
jfZYkfYK6yyUCH7Z/f32M7LS7zl57R2CxQBI4N4pgqB0vx2/6sn6L+hTlP1XzSKU
ivBYAgC079i2C2a+mzXf4rLPdbVuKxoEABxhUsgmPjF7sscpcHH+TG5EoDdoKkik
kPmf9YmSUUISI15CsUuCmGporT59uuwIpdPHZkmmiZCowT/dZ1QlyV9ln0/u
-----END CERTIFICATE-----
Generated at Sat Oct 31 08:37:29 2026 by rpki-client