Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa
File:                     326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (raw, json)
Hash identifier:          VPCifaYotKDxeBBkkXW6HF/0neQ4fTWKc9o0aOWVmJ8=
Subject key identifier:   87:1E:A5:CD:AB:3F:8E:38:FE:09:74:BA:C6:61:23:E5:2B:66:D3:7A
Certificate issuer:       /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
Certificate serial:       3959A1EAD89F03C8A5F48048CF9818D034527488
Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa
Signing time:             Fri 05 Jun 2026 00:39:21 +0000
ROA not before:           Fri 05 Jun 2026 00:34:21 +0000
ROA not after:            Fri 04 Jun 2027 00:39:21 +0000
asID:                     50104
IP address blocks:        2a06:a005:d2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:59:a1:ea:d8:9f:03:c8:a5:f4:80:48:cf:98:18:d0:34:52:74:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
        Validity
            Not Before: Jun  5 00:34:21 2026 GMT
            Not After : Jun  4 00:39:21 2027 GMT
        Subject: CN=871EA5CDAB3F8E38FE0974BAC66123E52B66D37A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ed:c5:b0:eb:5d:3d:f0:88:c8:11:cf:60:43:
                    82:00:d6:3c:0f:b2:92:cf:2e:97:9e:41:84:52:f3:
                    d8:68:a0:60:a9:29:27:aa:10:cd:07:87:9a:26:fb:
                    70:6b:dc:4e:77:b7:1e:8f:bb:4a:0b:35:04:33:47:
                    23:94:15:47:46:31:fa:4a:7e:33:15:0e:eb:89:f3:
                    5c:43:32:71:46:a9:1b:51:4b:ec:c8:6d:8a:1d:f5:
                    73:0f:ab:98:ba:8f:20:be:9e:64:12:82:f5:98:bf:
                    cf:6f:bd:60:01:b7:3e:a1:ab:19:ca:b6:ad:73:32:
                    c5:8d:43:d8:b8:c1:6a:50:c3:02:d5:f8:44:c3:41:
                    dc:f5:09:d6:d7:db:fa:05:63:31:6b:c1:7e:6a:2a:
                    59:a4:de:9c:3c:d2:01:3a:f9:37:c3:ff:35:0a:5c:
                    84:0b:e4:bd:7c:13:d5:13:b7:2b:7b:3f:11:2e:63:
                    d9:e9:c0:32:b6:0a:38:02:ff:04:a6:29:f9:96:50:
                    b5:8a:b0:1f:ce:47:50:44:91:57:7b:db:52:2b:83:
                    9b:f6:41:48:be:df:b3:64:4c:f0:c5:44:9f:16:5b:
                    1d:6e:42:00:6d:66:c4:e5:26:e5:79:b5:b3:d6:ac:
                    2e:9b:bc:a2:f5:38:5a:6b:40:be:69:5c:44:d5:98:
                    b8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1E:A5:CD:AB:3F:8E:38:FE:09:74:BA:C6:61:23:E5:2B:66:D3:7A
            X509v3 Authority Key Identifier:
                keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d2d::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:25:61:e8:92:0d:c6:83:51:08:bc:58:56:c8:b3:58:2a:70:
         60:92:aa:0d:a7:5d:7e:03:58:18:2d:43:59:d6:41:26:fe:ee:
         31:50:67:ca:6b:01:b5:24:99:da:19:c0:5f:2b:82:09:4e:2a:
         b1:88:68:e9:3d:16:67:e6:e8:c8:73:de:6d:63:0b:38:91:75:
         40:97:e8:ad:dc:94:34:37:d5:4c:9c:35:7c:d8:c9:98:1e:15:
         48:d6:f2:98:9d:38:2d:a0:eb:8c:80:70:d1:74:96:5b:69:61:
         a5:3f:ff:81:c8:f6:f8:a4:15:9f:04:5f:a6:ac:04:5a:73:0c:
         4b:f4:cd:63:96:2e:bf:62:d3:f4:d0:d3:db:e7:cd:5c:b0:39:
         0d:0d:e4:38:df:ce:4e:a9:91:6d:00:c8:90:3f:e3:fc:36:42:
         ea:f1:06:76:a3:d8:a4:77:b6:ee:7b:83:9a:83:b5:84:7c:85:
         70:23:ce:07:97:84:d3:9a:ef:7a:2b:4c:58:ba:20:57:5a:94:
         c0:f7:4f:27:38:67:08:c2:e2:70:5d:12:96:3b:89:4b:ad:0d:
         c8:fe:08:54:7e:67:f6:d5:7b:9a:2e:08:cd:ec:b5:fd:be:0f:
         df:0c:6e:49:f1:b5:d0:58:87:e8:9d:b5:c3:e9:f7:3d:70:1f:
         76:28:07:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:05:17 2026 by rpki-client