Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238343a3a2f33322d3332203d3e20323133383634.roa
File:                     326130363a313238343a3a2f33322d3332203d3e20323133383634.roa (raw, json)
Hash identifier:          xrv6j7aw+8nixJP8zrs56+MtVYbkdI/v0isIKTFfODA=
Subject key identifier:   2D:ED:5B:E2:AF:9D:61:69:5C:E3:96:9D:84:9A:A1:DC:B0:8A:19:BA
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       3BA2E035D48C215F7F85636C7306F1C62806C140
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238343a3a2f33322d3332203d3e20323133383634.roa
Signing time:             Tue 17 Jun 2025 09:42:54 +0000
ROA not before:           Tue 17 Jun 2025 09:37:54 +0000
ROA not after:            Tue 16 Jun 2026 09:42:54 +0000
asID:                     213864
IP address blocks:        2a06:1284::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 08:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a2:e0:35:d4:8c:21:5f:7f:85:63:6c:73:06:f1:c6:28:06:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Jun 17 09:37:54 2025 GMT
            Not After : Jun 16 09:42:54 2026 GMT
        Subject: CN=2DED5BE2AF9D61695CE3969D849AA1DCB08A19BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d9:6a:dd:dc:da:85:14:16:1a:8b:af:5d:0c:
                    79:54:ac:29:28:f4:f6:12:e8:30:58:a0:a4:0b:7a:
                    cb:76:01:4a:f7:52:51:05:2b:27:54:0d:25:76:2b:
                    2b:4e:ef:b0:11:e0:92:9b:55:0d:29:b2:6e:fa:44:
                    b8:09:88:b2:65:35:d9:82:1f:75:b2:86:bf:d6:44:
                    e1:65:3e:43:d8:05:0c:7a:ae:8b:26:df:b9:0a:10:
                    f1:a5:4b:b7:c4:c8:05:d0:3b:a9:88:2f:c0:be:00:
                    49:c6:f6:3c:e3:a5:c9:c8:1e:27:92:5e:20:f3:7a:
                    79:f4:67:c9:a8:a1:f6:e0:23:f5:97:82:00:f0:50:
                    1f:d9:d9:3c:10:64:08:41:60:44:10:85:66:55:79:
                    3f:55:a8:0e:94:37:4c:32:b9:1a:d0:c8:da:d3:86:
                    97:c9:2d:27:81:0b:89:4b:ec:9d:c5:8d:ff:ba:7d:
                    8f:af:9b:17:dd:b2:19:ab:2f:af:63:c1:eb:9a:58:
                    45:85:9e:2d:13:a8:2d:08:64:f5:6d:49:f1:dc:34:
                    5f:19:a9:4e:bf:b2:68:13:16:f4:9a:83:a9:51:54:
                    ae:6f:ff:26:8a:53:2e:66:35:58:26:f8:7d:4b:3a:
                    be:38:ac:95:f6:f6:6f:e6:b7:5f:62:5a:ff:66:12:
                    ee:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:ED:5B:E2:AF:9D:61:69:5C:E3:96:9D:84:9A:A1:DC:B0:8A:19:BA
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238343a3a2f33322d3332203d3e20323133383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1284::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:ab:6f:6e:00:ce:9f:0b:95:c1:26:03:49:dc:fe:79:f8:6f:
         18:c7:1e:1d:56:35:80:cb:65:76:da:17:3e:a2:d3:33:37:9a:
         46:5b:51:10:7b:f4:98:b9:33:eb:97:6c:52:1f:2e:6d:84:7d:
         ae:1d:1b:e8:83:92:8d:5c:0e:9d:f9:4d:aa:b6:b0:30:71:9e:
         70:c0:7f:ad:76:a0:9b:aa:e5:80:60:42:e0:a8:2e:93:b8:51:
         40:0a:d0:01:6f:63:9f:a4:d5:0d:6b:55:ca:e5:18:11:e2:b2:
         40:a7:56:07:4a:12:ed:14:a5:f4:5d:3f:fe:ab:10:f0:d3:cd:
         89:f8:69:cc:f6:ba:c8:dd:c2:c0:39:3b:e0:21:0f:0f:20:b9:
         2f:c0:1a:38:93:e0:9e:90:09:08:fb:d9:61:96:dd:38:b4:30:
         55:44:61:8e:22:17:7b:33:42:d8:56:c0:29:2a:6a:1a:95:3c:
         6d:90:0b:62:7f:d7:cc:08:39:d1:93:5b:cb:5e:b3:91:19:6d:
         38:b5:91:76:74:56:d8:34:5a:5a:aa:54:52:19:0f:4a:85:3c:
         9f:0d:42:aa:13:ec:80:7c:77:65:2a:ec:a9:1e:70:29:5b:f9:
         fb:3c:89:ed:e5:3d:ef:65:0a:a9:d9:eb:61:e6:ed:58:3f:71:
         24:0f:c4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:10:54 2025 by rpki-client