Route Origin Authorization

$ rpki-client -vvf rpki-repo.canops.org/repo/CanOps-PASS/0/323630323a663633333a3a2f34382d3438203d3e203332353931.roa
File:                     323630323a663633333a3a2f34382d3438203d3e203332353931.roa (raw, json)
Hash identifier:          nygGspUjWISDJvN3+yYoWERgYa1de//Gz0U2CTubz18=
Subject key identifier:   A1:7C:4C:EB:29:0F:E8:A8:7B:E3:5E:25:1F:41:AF:BE:FD:C8:34:8C
Certificate issuer:       /CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932
Certificate serial:       2151DF34E489663D17F35C61A2FE498A2194CA62
Authority key identifier: 0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer
Subject info access:      rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/323630323a663633333a3a2f34382d3438203d3e203332353931.roa
Signing time:             Sun 15 Jun 2025 09:16:22 +0000
ROA not before:           Sun 15 Jun 2025 09:11:22 +0000
ROA not after:            Sun 14 Jun 2026 09:16:22 +0000
asID:                     32591
IP address blocks:        2602:f633::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl
                          rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 17:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:51:df:34:e4:89:66:3d:17:f3:5c:61:a2:fe:49:8a:21:94:ca:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932
        Validity
            Not Before: Jun 15 09:11:22 2025 GMT
            Not After : Jun 14 09:16:22 2026 GMT
        Subject: CN=A17C4CEB290FE8A87BE35E251F41AFBEFDC8348C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b0:ef:09:40:73:2f:aa:55:0b:3c:37:b6:72:
                    61:fe:d1:08:50:14:8b:a1:d1:03:e7:58:99:bb:7f:
                    ca:b3:c3:26:0e:c4:02:8a:1c:45:83:52:14:4b:66:
                    ae:74:c3:bf:ca:a3:94:76:41:47:34:73:1e:47:26:
                    09:7a:a3:de:cf:5c:d8:f8:83:14:c3:6f:96:4d:01:
                    84:d3:ad:1c:68:9b:d2:5a:d8:23:71:dc:5a:71:4e:
                    d6:df:a4:62:29:b5:30:9b:81:29:5c:83:dd:11:82:
                    6e:2b:23:39:a2:79:bc:bd:1d:a0:ca:97:f9:28:39:
                    24:96:fd:8d:c8:65:cb:04:25:09:c6:92:6f:8d:5a:
                    43:a0:37:98:87:24:00:7e:4c:35:77:96:85:b9:86:
                    50:aa:a8:ab:af:c4:91:5c:1c:0f:67:63:51:06:9f:
                    45:5a:23:1c:05:d7:8e:2d:9b:7a:e8:04:cd:87:3d:
                    40:f5:0e:e9:cb:b8:76:ca:e1:21:f2:36:f4:b2:de:
                    31:3a:5b:12:dc:02:53:53:db:46:02:2e:03:2d:35:
                    1a:c7:48:c1:d1:7d:7f:62:61:c5:63:7b:e7:f1:32:
                    46:74:65:42:19:7c:d0:2a:19:f1:cf:58:03:4f:db:
                    67:e5:3c:3b:67:e1:49:5e:83:c8:b0:74:07:2e:32:
                    03:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7C:4C:EB:29:0F:E8:A8:7B:E3:5E:25:1F:41:AF:BE:FD:C8:34:8C
            X509v3 Authority Key Identifier:
                keyid:0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/323630323a663633333a3a2f34382d3438203d3e203332353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f633::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:2b:06:f0:e3:7f:d1:79:c5:ce:26:96:2a:69:48:48:ae:48:
         66:bd:ee:8b:79:de:93:5c:46:8e:4b:73:14:07:d7:ca:92:e5:
         dc:d3:84:dc:b8:20:65:70:95:5f:56:e3:2b:e3:68:4f:6e:d2:
         57:6b:33:9a:5a:be:c1:03:72:b2:92:24:58:5d:82:97:d9:24:
         b5:04:83:28:37:33:f6:f3:2f:59:3d:e1:8e:df:84:77:84:2d:
         78:0a:17:b8:7b:b1:d0:73:c9:0c:fc:61:6a:4e:5a:db:18:e5:
         8d:26:c3:29:c0:da:0a:fe:a9:96:4c:3e:2c:b9:6c:5b:f0:fb:
         d3:e6:b9:36:26:d0:fa:9f:ce:90:18:31:91:b3:cf:4f:53:9d:
         8f:26:a8:13:d8:c9:41:5a:80:ab:c3:bf:72:00:3f:ef:86:a5:
         e7:14:9b:9e:f4:03:2e:7a:8d:94:18:10:37:8c:67:16:6d:7f:
         f6:91:5b:44:f8:df:df:b1:fb:62:2e:08:1a:2d:c4:b9:2a:3c:
         c7:89:7e:8b:b0:8d:4f:5d:fb:04:09:67:ca:ec:5c:0f:e0:85:
         7f:84:2c:48:64:d0:af:65:60:0c:f4:72:f9:74:4a:e1:1d:03:
         ae:62:49:74:1d:86:35:56:75:ae:11:df:72:ff:58:8d:17:1b:
         63:6a:69:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 23:21:19 2025 by rpki-client