Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436383a3a2f34382d3438203d3e20313533333736.roa
File:                     323630323a663932613a613436383a3a2f34382d3438203d3e20313533333736.roa (raw, json)
Hash identifier:          hote8g/hXG/tFY8uNdLdTweBz/k58Z5+HVhKHFDFgSs=
Subject key identifier:   5D:CF:B6:CE:1C:3A:9F:28:9D:77:6B:F0:87:27:CF:57:C4:54:6C:C1
Certificate issuer:       /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial:       44BBA3AD1DDA2D5D2A44E4FBB2E74EFB67603FC0
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436383a3a2f34382d3438203d3e20313533333736.roa
Signing time:             Mon 11 May 2026 03:15:25 +0000
ROA not before:           Mon 11 May 2026 03:10:25 +0000
ROA not after:            Mon 10 May 2027 03:15:25 +0000
asID:                     153376
IP address blocks:        2602:f92a:a468::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 04:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:bb:a3:ad:1d:da:2d:5d:2a:44:e4:fb:b2:e7:4e:fb:67:60:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
        Validity
            Not Before: May 11 03:10:25 2026 GMT
            Not After : May 10 03:15:25 2027 GMT
        Subject: CN=5DCFB6CE1C3A9F289D776BF08727CF57C4546CC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:42:ca:03:04:8a:3f:33:f9:b6:ee:f9:ac:a3:
                    05:2a:3e:2d:6a:a0:c1:a6:a9:c8:ba:bf:fd:9d:de:
                    d8:8e:8b:74:41:08:c2:a8:6f:b6:62:ab:fd:17:67:
                    3f:e3:5f:5e:50:6c:81:75:aa:37:f9:07:93:44:ab:
                    4e:c0:47:47:ed:46:73:a3:9b:66:5a:c7:ae:d4:0c:
                    95:2b:3f:ec:61:4f:61:73:43:45:d0:7f:2e:55:9c:
                    9b:79:c6:3b:02:11:d1:69:07:56:ee:0e:2d:ab:e5:
                    7c:ba:f6:aa:c1:6a:95:2a:6b:d9:6f:24:b3:ba:e8:
                    e0:be:f7:78:b7:89:26:db:fb:9c:75:88:d2:f7:00:
                    a2:a2:93:f0:77:11:02:18:64:da:25:10:49:17:cd:
                    a1:93:97:3e:cf:3e:c9:93:e3:16:c1:16:8c:71:7e:
                    f1:86:21:3e:d6:2a:4d:7f:fc:2a:57:13:47:e9:1a:
                    eb:09:c7:db:bf:ff:48:f7:1a:1a:ca:f5:89:a6:da:
                    1f:54:f3:3b:94:49:fa:6f:66:56:1e:40:c3:a3:f8:
                    35:7e:64:dd:9c:f7:4d:67:05:ee:f5:05:4f:5c:d3:
                    58:f6:48:6e:1d:73:6e:bf:a9:75:cd:aa:ba:9c:66:
                    9f:60:22:88:b4:75:d2:ee:d5:af:f6:90:be:f0:fe:
                    d0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CF:B6:CE:1C:3A:9F:28:9D:77:6B:F0:87:27:CF:57:C4:54:6C:C1
            X509v3 Authority Key Identifier:
                keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436383a3a2f34382d3438203d3e20313533333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a468::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:b2:9d:3a:c5:7e:51:9b:76:b3:f9:4e:42:51:10:d2:b6:87:
         81:4b:49:20:fc:de:1c:0b:65:ac:93:b2:2e:aa:03:b6:ad:68:
         4e:93:ad:3b:f6:d8:09:1d:a3:3d:0e:ff:63:39:85:cf:3a:6d:
         c5:24:32:6a:8a:1c:cd:48:32:48:45:17:f9:08:31:e7:7c:97:
         4d:c7:3c:02:ba:d4:06:5e:39:32:60:3b:ef:ea:01:36:6f:f4:
         18:b5:ac:b9:4c:4d:9d:b7:4f:93:68:79:77:06:37:72:58:6f:
         6f:85:ea:13:32:ac:28:62:18:22:69:7e:67:89:0e:fe:52:5d:
         86:7c:89:c7:f1:b6:58:59:eb:33:48:44:2c:97:5b:e5:d9:0f:
         60:94:e9:be:e7:39:2a:a5:78:27:7c:c1:9c:8d:6b:13:b0:8d:
         34:62:26:3b:39:d5:a7:9a:37:26:68:dc:0d:9a:2a:04:81:20:
         a7:57:a6:15:f5:bb:84:ee:9e:3c:59:5f:64:6a:2c:94:d1:a1:
         f7:78:ec:e7:1f:8b:69:bc:be:36:91:7b:26:28:27:05:68:19:
         36:df:c5:22:d3:ef:0e:df:30:47:12:f4:c4:bf:30:f2:72:10:
         07:0e:0e:66:c6:70:9e:97:95:2e:57:cf:a6:93:4f:83:4b:67:
         ea:e6:00:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:44 2026 by rpki-client