Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66633a3a2f34382d3438203d3e20343031383132.roa
File:                     323630323a663939323a66633a3a2f34382d3438203d3e20343031383132.roa (raw, json)
Hash identifier:          PZcVyL8vIuz1TfPEqhA5pOHyLmlUeeqRgiDSdJ3aNe0=
Subject key identifier:   F5:A2:81:3E:61:7B:5E:B2:EE:61:FB:9C:A5:32:A5:26:F6:E9:51:D4
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       48DADB35A4E13C0782EC611AC404C236BAAD10DB
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66633a3a2f34382d3438203d3e20343031383132.roa
Signing time:             Wed 15 Jul 2026 03:27:35 +0000
ROA not before:           Wed 15 Jul 2026 03:22:35 +0000
ROA not after:            Wed 14 Jul 2027 03:27:35 +0000
asID:                     401812
IP address blocks:        2602:f992:fc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:da:db:35:a4:e1:3c:07:82:ec:61:1a:c4:04:c2:36:ba:ad:10:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Jul 15 03:22:35 2026 GMT
            Not After : Jul 14 03:27:35 2027 GMT
        Subject: CN=F5A2813E617B5EB2EE61FB9CA532A526F6E951D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:26:49:a2:fa:78:41:65:e7:59:9b:27:23:77:
                    41:21:4b:f8:4c:76:ec:5c:fa:fd:28:7a:62:18:c7:
                    49:16:6e:f8:97:c6:5d:78:46:db:81:85:4d:ff:f3:
                    0f:fa:ea:39:bc:34:99:bd:98:10:33:ff:13:a7:f1:
                    ad:82:24:4e:cd:ae:60:82:90:79:cf:c9:cf:b3:74:
                    d3:bb:5e:cf:22:02:46:c8:84:3a:44:3a:eb:ba:ff:
                    07:56:42:10:23:57:df:65:87:03:d5:bf:dd:d0:1c:
                    24:13:81:52:aa:76:f0:cc:78:70:f1:82:01:87:4d:
                    05:39:23:d6:e7:77:c7:99:05:c6:ed:6a:39:50:a0:
                    42:03:2a:89:95:fa:7b:3c:64:7f:fc:6a:0f:21:50:
                    cd:e6:cb:c8:98:20:6b:c6:da:c2:82:1b:cd:a0:94:
                    70:f1:7e:37:1a:db:26:af:71:fe:d1:8f:bb:6f:9e:
                    bc:0a:87:ef:9b:49:b3:73:7d:fa:79:dd:4e:cb:cc:
                    44:37:a6:ed:67:16:6a:18:6e:d3:75:a8:89:7b:63:
                    f8:64:5e:8d:8f:95:f4:8e:dc:3a:cb:1c:a6:9b:fa:
                    d1:ed:cc:48:ac:96:95:50:b3:c6:3f:d7:45:0b:4b:
                    aa:ca:f3:e0:3d:08:17:68:b3:34:22:8b:06:16:2f:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A2:81:3E:61:7B:5E:B2:EE:61:FB:9C:A5:32:A5:26:F6:E9:51:D4
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66633a3a2f34382d3438203d3e20343031383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f992:fc::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:7b:14:af:8e:04:65:0f:3d:98:02:16:29:cc:d9:e8:f4:d4:
         7c:07:98:4e:0d:3c:57:82:fb:a8:f5:81:86:be:7e:4e:47:ac:
         05:ee:6f:fc:b6:3c:23:a1:db:db:07:66:fa:20:d4:7a:75:c9:
         91:2d:28:84:aa:3f:f0:42:55:00:3e:9f:b2:a5:ee:75:0c:bf:
         36:34:b8:0a:24:bb:38:36:df:2d:ae:99:c5:ee:da:36:82:38:
         1d:c6:c5:bc:cc:14:aa:ed:6b:07:2f:a1:6f:d5:d9:ed:51:28:
         45:48:0f:a4:31:cd:c4:10:91:78:bd:d4:93:86:3b:06:d4:1a:
         2c:77:e1:bf:c0:ce:2c:4d:1b:e7:14:c4:f5:3a:83:d2:9e:ef:
         34:11:c6:d1:05:5c:0c:04:5a:51:be:a6:e8:6d:77:d6:85:0b:
         65:30:13:77:63:2e:85:a8:d6:b6:37:07:75:8a:e3:ef:29:f0:
         f7:3f:0c:a9:8f:de:38:73:06:27:e9:1e:12:8c:9f:94:d5:6d:
         f2:75:44:8c:7f:89:81:36:ba:98:b0:69:89:10:96:ab:35:ce:
         19:d3:a8:0a:35:14:8c:12:a8:e5:74:f9:02:b2:4c:23:8f:0b:
         11:a6:ab:19:7e:c6:cb:dc:db:ea:94:35:c1:da:25:92:f8:b3:
         13:c9:76:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:26:16 2026 by rpki-client