Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/326130623a346530373a6166303a3a2f34342d3438203d3e20323035393431.roa
File:                     326130623a346530373a6166303a3a2f34342d3438203d3e20323035393431.roa (raw, json)
Hash identifier:          9FuIWN2ec49H8+soA+LiveYXJ3y0qS/R7Tx2QWopf0U=
Subject key identifier:   F5:B4:86:81:58:C0:16:E9:4A:1D:D0:14:09:AE:93:6A:E1:75:6D:34
Certificate issuer:       /CN=CF1D094BB231C3433115D5C53880889E2E701056
Certificate serial:       72CFC63BFD5D37115DC5784E7D90891B9657785E
Authority key identifier: CF:1D:09:4B:B2:31:C3:43:31:15:D5:C5:38:80:88:9E:2E:70:10:56
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/CF1D094BB231C3433115D5C53880889E2E701056.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/326130623a346530373a6166303a3a2f34342d3438203d3e20323035393431.roa
Signing time:             Thu 21 Aug 2025 11:41:42 +0000
ROA not before:           Thu 21 Aug 2025 11:36:42 +0000
ROA not after:            Thu 20 Aug 2026 11:41:42 +0000
asID:                     205941
IP address blocks:        2a0b:4e07:af0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/CF1D094BB231C3433115D5C53880889E2E701056.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/CF1D094BB231C3433115D5C53880889E2E701056.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/CF1D094BB231C3433115D5C53880889E2E701056.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:cf:c6:3b:fd:5d:37:11:5d:c5:78:4e:7d:90:89:1b:96:57:78:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF1D094BB231C3433115D5C53880889E2E701056
        Validity
            Not Before: Aug 21 11:36:42 2025 GMT
            Not After : Aug 20 11:41:42 2026 GMT
        Subject: CN=F5B4868158C016E94A1DD01409AE936AE1756D34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:80:dc:14:be:67:82:16:c3:72:49:3b:1e:c6:
                    a9:86:8c:63:6c:5d:cd:2f:dd:f7:fc:7c:d3:03:4a:
                    ee:e4:47:0c:92:d8:49:f5:b6:fc:15:0e:cc:c9:5d:
                    5d:5d:0a:d3:7a:9a:54:8d:b5:c2:60:a4:1f:8e:15:
                    5b:61:a1:a9:e8:82:c3:45:2b:3f:b2:f7:e0:cf:6d:
                    e2:8d:ce:60:7c:c6:da:38:70:14:77:60:6c:77:47:
                    76:0f:55:9d:33:b9:34:fc:97:85:31:d1:74:ab:3e:
                    43:7a:f1:a5:3a:79:ba:14:97:b9:66:51:a2:a6:b9:
                    2d:bf:f3:9e:7d:da:85:9d:93:20:1d:27:f7:18:20:
                    57:15:0c:12:55:90:7e:b6:1f:0c:35:d6:ed:61:bf:
                    58:91:65:87:9a:df:e8:37:32:61:3d:0a:b5:03:5c:
                    59:1a:9e:ca:db:eb:26:c0:a3:39:04:87:c7:54:db:
                    1b:b2:8c:19:51:b6:d9:ed:6f:75:60:48:c2:ec:56:
                    8a:a9:57:25:e4:07:7d:80:f3:d8:40:3b:46:02:82:
                    b4:48:2c:89:7c:8e:c9:b7:56:e2:c3:e9:c2:af:83:
                    ab:7a:fa:a5:ae:eb:2c:c9:61:d0:a5:ad:9f:aa:4f:
                    1d:37:c8:58:15:c8:4b:b3:ec:6d:0e:5c:47:74:98:
                    39:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B4:86:81:58:C0:16:E9:4A:1D:D0:14:09:AE:93:6A:E1:75:6D:34
            X509v3 Authority Key Identifier:
                keyid:CF:1D:09:4B:B2:31:C3:43:31:15:D5:C5:38:80:88:9E:2E:70:10:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/CF1D094BB231C3433115D5C53880889E2E701056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/CF1D094BB231C3433115D5C53880889E2E701056.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/326130623a346530373a6166303a3a2f34342d3438203d3e20323035393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:af0::/44

    Signature Algorithm: sha256WithRSAEncryption
         43:1a:b1:20:f5:70:38:e8:9f:72:3f:94:83:b0:e6:87:de:95:
         75:ad:c0:a3:67:2e:6a:60:01:90:8d:56:fe:d0:a8:b0:25:55:
         e8:9f:93:92:98:50:4d:bf:71:84:91:77:ac:13:9a:3c:90:99:
         4b:5d:20:61:67:c8:29:47:48:19:c4:4c:62:e1:63:d2:b3:f4:
         8b:97:12:b4:9a:bf:25:07:ea:6b:d9:df:1e:7b:cb:af:47:7e:
         8c:03:f5:f6:da:67:b4:e2:d9:83:ca:94:23:ee:36:3b:25:44:
         a0:18:41:02:bd:cd:07:de:3c:0b:4d:2b:91:2d:92:01:80:c6:
         bf:10:07:65:0b:94:23:b2:b0:ff:2f:51:ea:f4:04:ee:49:8b:
         08:e3:4b:4a:17:af:74:eb:6b:36:3c:d4:5a:15:a7:1d:05:cd:
         9a:16:8a:b5:ee:fd:f3:3c:62:37:5c:6d:35:fe:69:85:d7:0d:
         81:1e:6f:ac:e3:c5:f8:ae:56:e1:48:2f:24:84:dc:72:2e:2d:
         91:3f:aa:21:c9:0e:88:5a:f6:20:1f:da:62:f0:ba:94:13:7c:
         cd:37:fd:56:38:9f:a3:0d:58:36:53:e9:f8:23:85:61:d9:07:
         52:72:e3:5e:a0:14:4f:20:62:2d:f1:37:6a:6f:cd:90:38:66:
         ed:39:ea:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:00:29 2025 by rpki-client