Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/3139392e34372e3134352e302f32342d3234203d3e20333936393933.roa
File:                     3139392e34372e3134352e302f32342d3234203d3e20333936393933.roa (raw, json)
Hash identifier:          GJL3Gs+zQJzFzHXAcwSYBTL/Q/hnKnsUn1XRZL2rAyY=
Subject key identifier:   7C:03:31:8B:E3:0E:EC:A8:1D:1E:AE:5D:F5:83:E5:DC:AC:B5:01:41
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       2F07367AC691BC09D3B471F9E87A3B5F769E2BE5
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/3139392e34372e3134352e302f32342d3234203d3e20333936393933.roa
Signing time:             Thu 23 Jul 2026 07:39:12 +0000
ROA not before:           Thu 23 Jul 2026 07:34:12 +0000
ROA not after:            Thu 22 Jul 2027 07:39:12 +0000
asID:                     396993
IP address blocks:        199.47.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:07:36:7a:c6:91:bc:09:d3:b4:71:f9:e8:7a:3b:5f:76:9e:2b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Jul 23 07:34:12 2026 GMT
            Not After : Jul 22 07:39:12 2027 GMT
        Subject: CN=7C03318BE30EECA81D1EAE5DF583E5DCACB50141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4a:af:49:51:50:ec:09:da:33:5d:eb:e9:20:
                    33:d9:8b:7f:f0:f9:ca:85:0f:e3:1c:57:41:2d:a9:
                    fe:0f:65:fe:8b:0a:2c:01:4f:63:8f:04:c9:8f:fc:
                    23:67:f1:3c:ba:d9:8d:e2:f4:09:c0:ae:d6:70:35:
                    dc:0a:c2:74:b8:dc:4d:cb:d4:53:52:3c:64:5f:1d:
                    9a:d5:8b:c5:c8:b6:43:71:61:49:c5:e6:c1:a6:1e:
                    30:35:dc:ce:ec:67:ad:59:54:e0:65:3a:a7:45:bc:
                    5d:ed:81:69:bc:bf:22:53:91:e2:34:21:71:06:4e:
                    c8:29:1c:eb:b5:2a:82:07:ee:c5:68:ac:be:3d:68:
                    ae:d1:0f:72:b2:02:1c:b3:6e:01:49:02:61:a2:5c:
                    56:ee:84:3d:e6:c9:2c:c4:79:55:ad:58:c1:34:ea:
                    c5:39:a6:ee:2f:6e:f7:62:63:88:d8:6a:3b:e1:54:
                    e5:22:73:6b:42:c6:eb:5e:f8:57:f3:2e:86:2a:ca:
                    09:29:5b:2f:02:6c:bf:60:fa:a0:32:5a:69:bf:36:
                    13:97:ba:c0:fc:10:aa:f4:91:9e:de:65:9c:58:79:
                    4f:6a:ae:44:13:cd:e8:e5:37:e3:df:a5:41:cf:2e:
                    3f:8d:30:eb:e5:38:2a:6d:fa:23:95:84:9b:96:18:
                    27:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:03:31:8B:E3:0E:EC:A8:1D:1E:AE:5D:F5:83:E5:DC:AC:B5:01:41
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/3139392e34372e3134352e302f32342d3234203d3e20333936393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:34:1c:9f:64:fe:b5:92:82:78:bc:33:76:d7:0e:ed:70:b8:
         f0:c7:95:da:e6:27:97:61:3e:71:f6:90:85:4c:15:52:ad:1f:
         a1:44:f5:54:96:66:ec:d8:b7:2f:a0:10:9d:2a:7a:6e:69:1a:
         21:d0:84:09:f6:f9:15:75:15:59:8c:b2:1d:44:5a:f5:76:72:
         f5:93:0a:05:ee:80:bf:36:ea:25:00:98:40:b6:0c:dc:02:64:
         8c:70:e7:cb:25:8a:03:e6:7d:1e:9b:7c:ee:75:82:46:1a:1c:
         bc:34:80:7b:d4:fe:8d:1d:33:fa:12:02:55:7b:03:56:95:26:
         98:5e:b9:2a:85:17:87:13:d5:30:4d:39:55:03:89:87:c3:7c:
         ac:11:db:2f:10:de:e8:d3:c7:5c:c9:05:46:1b:60:75:a5:37:
         2a:eb:65:21:a2:09:20:fb:e0:6e:d7:38:d9:43:e2:d0:f2:67:
         cc:2a:a9:cf:29:52:5c:06:90:9e:79:2a:ff:2b:dc:f7:fc:3e:
         48:aa:91:f5:9e:83:12:a0:49:66:01:43:aa:f7:78:4d:b7:f1:
         83:5f:0b:46:e3:b6:47:a8:5f:00:e3:e4:13:cc:cf:df:46:6e:
         4d:23:6c:ff:f8:2e:29:88:7d:49:5b:6e:3b:1b:05:69:03:34:
         a1:17:ee:ec
-----BEGIN CERTIFICATE-----
MIIFzzCCBLegAwIBAgIULwc2esaRvAnTtHH56Ho7X3aeK+UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0NDI0YjBlZjk0MGFlMjgzYTM5OWJmNDBiODg4YjQy
NGVkMDMyMmUwY2UwMmRhZDYwHhcNMjYwNzIzMDczNDEyWhcNMjcwNzIyMDczOTEy
WjAzMTEwLwYDVQQDEyg3QzAzMzE4QkUzMEVFQ0E4MUQxRUFFNURGNTgzRTVEQ0FD
QjUwMTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUqvSVFQ7Ana
M13r6SAz2Yt/8PnKhQ/jHFdBLan+D2X+iwosAU9jjwTJj/wjZ/E8utmN4vQJwK7W
cDXcCsJ0uNxNy9RTUjxkXx2a1YvFyLZDcWFJxebBph4wNdzO7GetWVTgZTqnRbxd
7YFpvL8iU5HiNCFxBk7IKRzrtSqCB+7FaKy+PWiu0Q9ysgIcs24BSQJholxW7oQ9
5sksxHlVrVjBNOrFOabuL273YmOI2Go74VTlInNrQsbrXvhX8y6GKsoJKVsvAmy/
YPqgMlppvzYTl7rA/BCq9JGe3mWcWHlPaq5EE83o5Tfj36VBzy4/jTDr5Tgqbfoj
lYSblhgnJQIDAQABo4ICzzCCAsswHQYDVR0OBBYEFHwDMYvjDuyoHR6uXfWD5dys
tQFBMB8GA1UdIwQYMBaAFLsmLS0Gpbv0/yImXHtPVR/wN0M9MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2
LWRiZmM0NTkzYzFhOC82L0JCMjYyRDJEMDZBNUJCRjRGRjIyMjY1QzdCNEY1NTFG
RjAzNzQzM0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYt
NGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTM4ZGUyZC01MTJhLTQ2OTItOGM1My1k
MmQ5YTZjZWI1NDkvN2M0NDI0YjBlZjk0MGFlMjgzYTM5OWJmNDBiODg4YjQyNGVk
MDMyMmUwY2UwMmRhZDYuY2VyMIGvBggrBgEFBQcBCwSBojCBnzCBnAYIKwYBBQUH
MAuGgY9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2LWRiZmM0NTkzYzFhOC82LzMxMzkzOTJl
MzQzNzJlMzEzNDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM2MzkzOTMz
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAxy+RMA0GCSqGSIb3DQEBCwUAA4IBAQARNByfZP61koJ4vDN2
1w7tcLjwx5Xa5ieXYT5x9pCFTBVSrR+hRPVUlmbs2LcvoBCdKnpuaRoh0IQJ9vkV
dRVZjLIdRFr1dnL1kwoF7oC/NuolAJhAtgzcAmSMcOfLJYoD5n0em3zudYJGGhy8
NIB71P6NHTP6EgJVewNWlSaYXrkqhReHE9UwTTlVA4mHw3ysEdsvEN7o08dcyQVG
G2B1pTcq62Uhogkg++Bu1zjZQ+LQ8mfMKqnPKVJcBpCeeSr/K9z3/D5IqpH1noMS
oElmAUOq93hNt/GDXwtG47ZHqF8A4+QTzM/fRm5NI2z/+C4piH1JW247GwVpAzSh
F+7s
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:55:37 2026 by rpki-client