Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/3139392e34372e3134342e302f32342d3234203d3e20333936393933.roa
File:                     3139392e34372e3134342e302f32342d3234203d3e20333936393933.roa (raw, json)
Hash identifier:          tgGjD/1Kd8rjeYz/qnrNlSGlU7K0se9BoiBomh8T2YY=
Subject key identifier:   CE:66:EF:F0:8E:00:25:22:B3:62:F7:5F:37:2A:C3:43:2C:DE:10:41
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       505E2D116DBD5E64FD6ED60AEA99C209F4A59092
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/3139392e34372e3134342e302f32342d3234203d3e20333936393933.roa
Signing time:             Thu 23 Jul 2026 07:39:12 +0000
ROA not before:           Thu 23 Jul 2026 07:34:12 +0000
ROA not after:            Thu 22 Jul 2027 07:39:12 +0000
asID:                     396993
IP address blocks:        199.47.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5e:2d:11:6d:bd:5e:64:fd:6e:d6:0a:ea:99:c2:09:f4:a5:90:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Jul 23 07:34:12 2026 GMT
            Not After : Jul 22 07:39:12 2027 GMT
        Subject: CN=CE66EFF08E002522B362F75F372AC3432CDE1041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e1:92:5a:63:b9:46:51:9e:de:91:bc:e1:e8:
                    cc:ca:a8:60:fa:1a:63:b1:39:af:0a:0e:1c:35:48:
                    be:75:ce:43:34:09:36:ed:2f:c5:8a:b6:34:7e:fd:
                    9f:3a:2a:f1:db:f0:5c:39:a7:8d:40:99:d0:97:a9:
                    a0:d4:0e:8b:0f:fb:b8:ac:79:14:88:64:99:1e:21:
                    21:1b:16:a7:19:db:9e:46:31:97:60:ee:c2:54:85:
                    63:4e:be:17:12:5e:67:32:af:11:eb:33:35:d4:b3:
                    eb:48:f2:d3:3c:34:3d:21:1e:d0:bf:22:98:dc:77:
                    48:18:00:36:0f:8e:ef:02:af:a6:2d:d9:ca:7a:85:
                    60:cc:5d:d9:8a:b8:b9:73:a2:18:d1:70:69:29:fe:
                    f1:33:01:03:7c:6c:c9:7b:45:33:51:02:e6:a1:7f:
                    fa:e9:f4:8c:65:4e:ee:d6:0e:f7:70:9b:97:02:ef:
                    df:03:85:2e:5d:2c:19:f7:08:b3:6a:2c:ab:09:6d:
                    65:44:c2:e0:b1:7e:31:89:77:04:f5:f3:d6:11:8c:
                    6c:47:3d:0d:0a:b7:67:c6:67:bf:11:e9:eb:cb:cd:
                    33:d3:53:2c:ff:0e:71:fc:0d:b3:f0:fd:69:0e:50:
                    44:db:a9:2f:b8:20:aa:ec:95:d8:b5:78:6b:4b:7d:
                    6b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:66:EF:F0:8E:00:25:22:B3:62:F7:5F:37:2A:C3:43:2C:DE:10:41
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/3139392e34372e3134342e302f32342d3234203d3e20333936393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:cd:b8:7d:80:ad:31:7e:31:47:7f:a5:e4:2e:28:ac:80:d0:
         a9:37:d5:87:60:c8:6c:07:b3:e4:bf:19:92:e4:36:9a:34:3b:
         b8:d4:1d:70:73:dc:43:14:aa:6b:b3:a6:fc:05:bf:56:cc:cf:
         99:2b:13:5a:4b:9f:fd:0f:f0:93:8e:ee:c6:5b:9e:38:a7:aa:
         15:e5:ab:5f:87:96:a4:3a:2a:a0:0a:6b:f7:16:87:94:5a:af:
         bf:53:d0:b0:09:10:3f:f9:1a:07:a9:cd:a7:f8:2f:d1:dd:e2:
         7b:ca:60:85:8e:9c:9a:8b:a8:2c:f5:c1:4b:0a:97:5f:e5:6f:
         25:ef:b5:12:ff:84:8e:f8:18:69:e0:cf:57:9e:c1:34:c9:3b:
         34:fe:15:d1:15:2f:be:c5:5a:64:1c:7a:db:09:49:81:c5:f4:
         c1:1e:b6:8e:52:0e:fe:5c:d2:df:f6:a1:e0:69:0a:f8:8b:96:
         16:60:ee:46:a5:ef:71:52:13:1f:f5:7b:b9:39:4a:80:e4:d7:
         13:37:56:20:14:06:2e:9a:12:34:9f:37:11:1f:aa:c7:0f:05:
         8e:9c:2a:27:d4:ac:68:41:7f:ab:f3:3b:83:99:71:56:92:c7:
         1a:c6:09:a2:6a:f8:dc:c5:df:9c:e0:ba:7a:49:fe:cf:a0:2e:
         71:09:53:26
-----BEGIN CERTIFICATE-----
MIIFzzCCBLegAwIBAgIUUF4tEW29XmT9btYK6pnCCfSlkJIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0NDI0YjBlZjk0MGFlMjgzYTM5OWJmNDBiODg4YjQy
NGVkMDMyMmUwY2UwMmRhZDYwHhcNMjYwNzIzMDczNDEyWhcNMjcwNzIyMDczOTEy
WjAzMTEwLwYDVQQDEyhDRTY2RUZGMDhFMDAyNTIyQjM2MkY3NUYzNzJBQzM0MzJD
REUxMDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+GSWmO5RlGe
3pG84ejMyqhg+hpjsTmvCg4cNUi+dc5DNAk27S/FirY0fv2fOirx2/BcOaeNQJnQ
l6mg1A6LD/u4rHkUiGSZHiEhGxanGdueRjGXYO7CVIVjTr4XEl5nMq8R6zM11LPr
SPLTPDQ9IR7QvyKY3HdIGAA2D47vAq+mLdnKeoVgzF3Ziri5c6IY0XBpKf7xMwED
fGzJe0UzUQLmoX/66fSMZU7u1g73cJuXAu/fA4UuXSwZ9wizaiyrCW1lRMLgsX4x
iXcE9fPWEYxsRz0NCrdnxme/Eenry80z01Ms/w5x/A2z8P1pDlBE26kvuCCq7JXY
tXhrS31rqQIDAQABo4ICzzCCAsswHQYDVR0OBBYEFM5m7/COACUis2L3Xzcqw0Ms
3hBBMB8GA1UdIwQYMBaAFLsmLS0Gpbv0/yImXHtPVR/wN0M9MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2
LWRiZmM0NTkzYzFhOC82L0JCMjYyRDJEMDZBNUJCRjRGRjIyMjY1QzdCNEY1NTFG
RjAzNzQzM0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYt
NGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTM4ZGUyZC01MTJhLTQ2OTItOGM1My1k
MmQ5YTZjZWI1NDkvN2M0NDI0YjBlZjk0MGFlMjgzYTM5OWJmNDBiODg4YjQyNGVk
MDMyMmUwY2UwMmRhZDYuY2VyMIGvBggrBgEFBQcBCwSBojCBnzCBnAYIKwYBBQUH
MAuGgY9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2LWRiZmM0NTkzYzFhOC82LzMxMzkzOTJl
MzQzNzJlMzEzNDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM2MzkzOTMz
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAxy+QMA0GCSqGSIb3DQEBCwUAA4IBAQANzbh9gK0xfjFHf6Xk
LiisgNCpN9WHYMhsB7PkvxmS5DaaNDu41B1wc9xDFKprs6b8Bb9WzM+ZKxNaS5/9
D/CTju7GW544p6oV5atfh5akOiqgCmv3FoeUWq+/U9CwCRA/+RoHqc2n+C/R3eJ7
ymCFjpyai6gs9cFLCpdf5W8l77US/4SO+Bhp4M9XnsE0yTs0/hXRFS++xVpkHHrb
CUmBxfTBHraOUg7+XNLf9qHgaQr4i5YWYO5Gpe9xUhMf9Xu5OUqA5NcTN1YgFAYu
mhI0nzcRH6rHDwWOnCon1KxoQX+r8zuDmXFWkscaxgmiavjcxd+c4Lp6Sf7PoC5x
CVMm
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:55:15 2026 by rpki-client