Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/326130613a363034373a34303a3a2f34342d3438203d3e20313938373536.roa
File:                     326130613a363034373a34303a3a2f34342d3438203d3e20313938373536.roa (raw, json)
Hash identifier:          BA3vM2VgPYOsIX+PudxwSNMb518FPZN+NGUtH0MHRuk=
Subject key identifier:   67:97:DA:47:85:8D:2B:DD:24:6A:FD:92:10:8C:98:B8:80:D1:E5:DB
Certificate issuer:       /CN=15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358
Certificate serial:       18702FC999417A3923CF279AB7A98D7CF1465A5E
Authority key identifier: 15:C5:EB:6C:15:A7:32:AD:C3:1B:15:CF:7A:9F:0F:E4:3C:3B:23:58
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/326130613a363034373a34303a3a2f34342d3438203d3e20313938373536.roa
Signing time:             Fri 17 Apr 2026 11:51:24 +0000
ROA not before:           Fri 17 Apr 2026 11:46:24 +0000
ROA not after:            Fri 16 Apr 2027 11:51:24 +0000
asID:                     198756
IP address blocks:        2a0a:6047:40::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:70:2f:c9:99:41:7a:39:23:cf:27:9a:b7:a9:8d:7c:f1:46:5a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358
        Validity
            Not Before: Apr 17 11:46:24 2026 GMT
            Not After : Apr 16 11:51:24 2027 GMT
        Subject: CN=6797DA47858D2BDD246AFD92108C98B880D1E5DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:ab:35:b1:1a:00:59:d4:0b:10:e4:61:fb:
                    7f:50:b9:6a:5c:30:b6:ba:ed:1c:2b:e4:32:9d:9f:
                    c6:3a:99:95:8d:65:9e:10:7b:34:ef:83:39:a2:0a:
                    81:bc:62:19:a0:ef:4f:71:f2:cf:6d:ed:c3:69:88:
                    6b:23:b6:c5:5e:c0:4c:2f:5d:83:54:01:b2:cc:e7:
                    11:84:69:17:9f:2c:dc:a7:ce:b4:62:90:ba:00:1c:
                    0f:6d:96:5d:07:d6:b1:54:3c:93:a3:78:4b:8a:32:
                    c2:50:5e:e4:93:1f:d7:96:dc:30:b1:b4:69:70:25:
                    ba:9f:52:57:c6:7f:17:36:e3:0d:0c:30:cb:a2:57:
                    58:3f:cd:ab:1c:fe:7d:e4:37:27:71:de:38:4e:bb:
                    47:b9:11:cb:8e:d0:b7:12:79:8e:30:a4:e3:e2:d4:
                    0b:60:fd:87:28:3b:90:9b:78:a7:98:ad:b5:ef:17:
                    16:33:3f:73:51:de:ae:9b:10:72:8d:3f:00:f8:c8:
                    2d:a4:8d:5c:fc:83:33:49:20:44:dc:44:bc:b2:9e:
                    53:04:02:08:65:b9:c7:43:ce:c5:8c:e5:34:c8:7c:
                    1b:d5:92:47:07:58:4f:ba:9f:5d:c7:cf:1f:36:d9:
                    ba:b9:d0:cd:8f:e6:8b:d0:c1:33:a2:f9:d3:bb:6b:
                    fe:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:97:DA:47:85:8D:2B:DD:24:6A:FD:92:10:8C:98:B8:80:D1:E5:DB
            X509v3 Authority Key Identifier:
                keyid:15:C5:EB:6C:15:A7:32:AD:C3:1B:15:CF:7A:9F:0F:E4:3C:3B:23:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/326130613a363034373a34303a3a2f34342d3438203d3e20313938373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6047:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         8f:35:45:4e:94:b3:75:d3:94:a4:25:86:7e:23:84:d9:58:11:
         dc:35:39:e3:35:3c:ba:ba:42:40:cc:36:d0:2e:04:51:82:2f:
         f3:4a:14:a0:bd:e1:3e:13:0a:fe:ca:d2:e1:68:a6:9e:fa:dc:
         bb:ef:bc:dd:d1:1d:79:99:f2:19:6f:e5:76:aa:ce:c4:4f:00:
         d6:6d:17:c7:0a:4e:c5:3a:9c:90:d7:99:71:f0:89:6f:47:cc:
         a2:76:28:93:2f:7b:b4:59:cd:03:03:55:81:0d:17:04:bc:1d:
         39:12:04:d4:fd:bf:13:ed:56:70:83:25:97:44:4a:df:06:4a:
         53:6c:cd:9b:f9:01:85:db:a2:b4:33:95:fa:58:f2:bb:01:4f:
         00:79:74:8e:c9:61:59:1f:c1:3c:4d:de:35:5c:2b:aa:91:e0:
         27:9c:81:36:c3:42:8c:9f:7c:f3:18:e0:f6:e2:f8:53:fe:f8:
         55:e0:eb:3b:5c:e4:24:27:3f:57:ef:3e:ba:80:bd:a0:b6:dc:
         c7:e7:b2:72:10:00:f5:61:b5:e8:47:10:e4:2b:e1:d4:80:c2:
         5e:9d:b6:13:fa:72:4d:60:cc:5e:7c:fc:91:80:cc:20:37:85:
         ed:96:d9:38:6a:7d:fb:0a:14:71:1a:ef:c1:0c:d3:98:5e:69:
         3f:42:4c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:58 2026 by rpki-client