Route Origin Authorization

$ rpki-client -vvvf rsync.proxy-arp.network/repo/bgp43-free-v6/0/AS218545.roa
File:                     AS218545.roa (raw, json)
Hash identifier:          SLLvLa0q+rnrKwKXxPcxN0BnySyIjpc5omxlBU8nCAU=
Subject key identifier:   7F:80:2A:68:E0:32:8A:4C:4A:4B:35:C7:DD:D5:EB:03:4D:05:CF:A2
Certificate issuer:       /CN=7DF46129BDFBC044E933E4223A148A299404E5FE
Certificate serial:       40E8F0EEFC6DA7AE7E86994C0DC2D6AA48038482
Authority key identifier: 7D:F4:61:29:BD:FB:C0:44:E9:33:E4:22:3A:14:8A:29:94:04:E5:FE
Authority info access:    rsync://rsync.proxy-arp.network/repo/bgp43-u7/3/7DF46129BDFBC044E933E4223A148A299404E5FE.cer
Subject info access:      rsync://rsync.proxy-arp.network/repo/bgp43-free-v6/0/AS218545.roa
Signing time:             Fri 13 Nov 2026 13:46:29 +0000
ROA not before:           Fri 13 Nov 2026 13:41:29 +0000
ROA not after:            Fri 12 Nov 2027 13:46:29 +0000
asID:                     218545
IP address blocks:        2a0b:4e07:5181::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.proxy-arp.network/repo/bgp43-free-v6/0/7DF46129BDFBC044E933E4223A148A299404E5FE.crl
                          rsync://rsync.proxy-arp.network/repo/bgp43-free-v6/0/7DF46129BDFBC044E933E4223A148A299404E5FE.mft
                          rsync://rsync.proxy-arp.network/repo/bgp43-u7/3/7DF46129BDFBC044E933E4223A148A299404E5FE.cer
                          rsync://rsync.proxy-arp.network/repo/bgp43-u7/3/57C4BC98201FEEFD6892394642DD684EE5729821.crl
                          rsync://rsync.proxy-arp.network/repo/bgp43-u7/3/57C4BC98201FEEFD6892394642DD684EE5729821.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/57C4BC98201FEEFD6892394642DD684EE5729821.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 09:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e8:f0:ee:fc:6d:a7:ae:7e:86:99:4c:0d:c2:d6:aa:48:03:84:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DF46129BDFBC044E933E4223A148A299404E5FE
        Validity
            Not Before: Nov 13 13:41:29 2026 GMT
            Not After : Nov 12 13:46:29 2027 GMT
        Subject: CN=7F802A68E0328A4C4A4B35C7DDD5EB034D05CFA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:1e:1b:96:df:92:7f:89:8e:9a:ab:c1:d5:
                    d6:49:91:76:67:9b:8b:50:36:90:32:83:08:dd:98:
                    70:75:ab:06:fc:be:fb:4d:4e:95:7c:36:42:53:bf:
                    7b:67:8e:1e:dd:95:60:2b:e8:3e:79:91:7b:11:70:
                    3e:1f:be:48:51:f2:66:b9:f8:2d:5e:70:41:06:8f:
                    21:3a:19:bc:c3:b8:55:d0:ac:38:de:c3:d3:e1:f2:
                    0e:d3:50:6f:c7:3c:6d:04:20:41:cc:c0:4d:c1:ef:
                    a4:c8:9f:27:2a:9c:0b:aa:26:8f:9f:df:21:41:a0:
                    f5:37:18:50:a0:7f:08:c1:09:db:bb:57:88:8e:52:
                    b9:37:71:ca:38:ff:84:43:b9:1d:89:18:9f:89:81:
                    10:40:02:d6:85:b6:75:bd:64:f4:2d:5f:61:d1:dc:
                    01:3e:2e:d0:88:2f:16:53:48:6b:a2:a8:8b:48:05:
                    ee:5c:fd:ee:1f:51:de:a7:8b:ff:af:f9:49:e5:53:
                    1f:30:9b:ae:99:9c:b5:63:3a:8d:5e:55:1b:ab:4a:
                    56:e5:b1:c0:aa:72:15:50:3b:3f:69:b3:67:1f:e7:
                    0b:a1:04:a5:69:72:ff:2f:3e:af:66:13:cc:38:27:
                    7b:1e:f7:9a:8c:84:a7:0c:65:2f:5f:f2:3e:54:f8:
                    6b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:80:2A:68:E0:32:8A:4C:4A:4B:35:C7:DD:D5:EB:03:4D:05:CF:A2
            X509v3 Authority Key Identifier:
                keyid:7D:F4:61:29:BD:FB:C0:44:E9:33:E4:22:3A:14:8A:29:94:04:E5:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.proxy-arp.network/repo/bgp43-free-v6/0/7DF46129BDFBC044E933E4223A148A299404E5FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.proxy-arp.network/repo/bgp43-u7/3/7DF46129BDFBC044E933E4223A148A299404E5FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.proxy-arp.network/repo/bgp43-free-v6/0/AS218545.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:5181::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:7a:b4:9c:04:11:4e:72:52:f5:4d:a5:93:95:e8:2d:00:48:
         bd:85:a9:b2:ee:a8:e8:4b:8e:c0:d1:00:61:32:40:c6:8b:d5:
         c9:3c:0e:55:45:05:37:81:d3:b2:3b:d5:c1:de:be:3e:8e:2d:
         38:8d:dd:84:e4:79:4e:ff:bd:f5:db:83:ff:5e:e8:07:5c:8d:
         be:b4:bf:a7:a7:9f:aa:6e:07:c1:bf:e7:55:26:a9:53:c6:fe:
         c5:c3:02:c8:de:05:24:db:f9:74:65:72:17:48:14:83:d4:bd:
         6d:35:be:6d:b5:8a:8a:de:07:21:f9:8a:b6:2d:29:1f:8c:95:
         f6:46:fb:58:46:5e:e8:62:2d:a6:de:d0:6e:7c:73:41:70:ce:
         01:fb:7d:f6:28:a1:8c:95:b1:19:28:3e:d0:07:d3:c2:f4:69:
         8d:5a:c9:3b:03:1c:72:72:bc:a0:89:ae:70:19:c0:3f:53:0b:
         8f:d1:6f:2e:dc:02:1e:85:8c:58:57:5b:d2:96:14:ec:6c:d8:
         47:db:4d:55:de:b0:db:79:9b:87:f5:4a:5e:d7:33:aa:93:a4:
         42:f9:52:54:25:2b:28:c8:a9:b4:25:e7:da:5e:9c:1f:74:89:
         10:3b:90:c9:7a:ee:fa:47:08:83:19:c0:b6:51:61:21:70:d1:
         56:16:9d:55
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUQOjw7vxtp65+hplMDcLWqkgDhIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0RGNDYxMjlCREZCQzA0NEU5MzNFNDIyM0ExNDhBMjk5
NDA0RTVGRTAeFw0yNjExMTMxMzQxMjlaFw0yNzExMTIxMzQ2MjlaMDMxMTAvBgNV
BAMTKDdGODAyQTY4RTAzMjhBNEM0QTRCMzVDN0RERDVFQjAzNEQwNUNGQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiYx4blt+Sf4mOmqvB1dZJkXZn
m4tQNpAygwjdmHB1qwb8vvtNTpV8NkJTv3tnjh7dlWAr6D55kXsRcD4fvkhR8ma5
+C1ecEEGjyE6GbzDuFXQrDjew9Ph8g7TUG/HPG0EIEHMwE3B76TInycqnAuqJo+f
3yFBoPU3GFCgfwjBCdu7V4iOUrk3cco4/4RDuR2JGJ+JgRBAAtaFtnW9ZPQtX2HR
3AE+LtCILxZTSGuiqItIBe5c/e4fUd6ni/+v+UnlUx8wm66ZnLVjOo1eVRurSlbl
scCqchVQOz9ps2cf5wuhBKVpcv8vPq9mE8w4J3se95qMhKcMZS9f8j5U+Gv/AgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUf4AqaOAyikxKSzXH3dXrA00Fz6IwHwYDVR0j
BBgwFoAUffRhKb37wETpM+QiOhSKKZQE5f4wDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnN5bmMucHJveHktYXJwLm5ldHdvcmsvcmVw
by9iZ3A0My1mcmVlLXY2LzAvN0RGNDYxMjlCREZCQzA0NEU5MzNFNDIyM0ExNDhB
Mjk5NDA0RTVGRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3lu
YzovL3JzeW5jLnByb3h5LWFycC5uZXR3b3JrL3JlcG8vYmdwNDMtdTcvMy83REY0
NjEyOUJERkJDMDQ0RTkzM0U0MjIzQTE0OEEyOTk0MDRFNUZFLmNlcjBdBggrBgEF
BQcBCwRRME8wTQYIKwYBBQUHMAuGQXJzeW5jOi8vcnN5bmMucHJveHktYXJwLm5l
dHdvcmsvcmVwby9iZ3A0My1mcmVlLXY2LzAvQVMyMTg1NDUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq
C04HUYEwDQYJKoZIhvcNAQELBQADggEBALx6tJwEEU5yUvVNpZOV6C0ASL2FqbLu
qOhLjsDRAGEyQMaL1ck8DlVFBTeB07I71cHevj6OLTiN3YTkeU7/vfXbg/9e6Adc
jb60v6enn6puB8G/51UmqVPG/sXDAsjeBSTb+XRlchdIFIPUvW01vm21ioreByH5
irYtKR+MlfZG+1hGXuhiLabe0G58c0FwzgH7ffYooYyVsRkoPtAH08L0aY1ayTsD
HHJyvKCJrnAZwD9TC4/Rby7cAh6FjFhXW9KWFOxs2EfbTVXesNt5m4f1Sl7XM6qT
pEL5UlQlKyjIqbQl59penB90iRA7kMl67vpHCIMZwLZRYSFw0VYWnVU=
-----END CERTIFICATE-----
Generated at Sat Nov 14 23:38:52 2026 by rpki-client