Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa
File:                     326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (raw, json)
Hash identifier:          h+i5iNq2HhuYpHClFvwdiV/aTyG+CJ60spe5U0eVWQY=
Subject key identifier:   EE:B7:BE:3E:75:32:0A:2F:5F:3B:DD:96:DC:B2:C4:A3:5B:EE:ED:AC
Certificate issuer:       /CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Certificate serial:       48CD114A9E79B28946C102A49EA25D1E6CC6BFDF
Authority key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa
Signing time:             Fri 05 Jun 2026 00:19:23 +0000
ROA not before:           Fri 05 Jun 2026 00:14:23 +0000
ROA not after:            Fri 04 Jun 2027 00:19:23 +0000
asID:                     203069
IP address blocks:        2a05:dfc5:2f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:cd:11:4a:9e:79:b2:89:46:c1:02:a4:9e:a2:5d:1e:6c:c6:bf:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
        Validity
            Not Before: Jun  5 00:14:23 2026 GMT
            Not After : Jun  4 00:19:23 2027 GMT
        Subject: CN=EEB7BE3E75320A2F5F3BDD96DCB2C4A35BEEEDAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:72:01:5d:62:59:ae:14:98:30:48:94:66:8a:
                    17:c6:7d:fa:93:1f:39:bd:d5:07:5f:60:87:5b:0a:
                    37:82:e3:d7:5a:f1:b3:f9:56:52:fc:68:71:ec:2b:
                    ff:b8:09:bb:f3:12:1a:0d:33:2f:e3:87:8d:c9:f0:
                    cf:d4:d8:2a:9c:38:c9:63:89:fb:27:f1:79:bc:d4:
                    1d:4c:ac:b1:84:8f:de:b4:8e:c8:bc:da:f1:a4:94:
                    b0:f7:dc:01:8e:92:f3:6c:fa:9f:18:5e:65:4d:63:
                    6c:87:49:af:e0:cf:29:b2:3e:46:f2:a5:ba:63:30:
                    d9:22:3e:d5:d4:c7:5a:78:c4:e4:bc:c3:2f:aa:35:
                    b1:58:3d:0e:77:94:41:3d:c9:df:e6:3b:eb:41:bf:
                    09:66:ab:43:52:e1:12:cb:51:7e:70:9e:88:c6:3b:
                    a0:5f:d3:7c:77:a9:d8:01:24:c5:bf:bf:a1:23:30:
                    1a:90:da:52:bd:87:b4:65:ce:b3:f9:fc:76:f2:19:
                    b0:1d:e7:81:da:80:02:1f:49:73:51:d0:72:2d:cd:
                    b1:7b:fe:0d:db:bc:cd:3d:0b:41:74:6a:11:cb:59:
                    d5:ac:d3:8b:9a:26:43:6a:3a:b7:a7:cc:a4:0f:be:
                    fc:f0:d9:6c:b9:5a:ec:be:c3:cd:30:6b:74:a0:7c:
                    d3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B7:BE:3E:75:32:0A:2F:5F:3B:DD:96:DC:B2:C4:A3:5B:EE:ED:AC
            X509v3 Authority Key Identifier:
                keyid:B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc5:2f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8d:c0:71:e1:6a:53:7a:fe:a2:0f:51:57:21:a7:90:01:e9:71:
         27:21:5a:86:d1:7a:e1:bc:30:4c:74:bc:91:68:aa:58:cc:05:
         ac:c6:63:5a:2d:b8:ad:07:03:75:2e:ec:7d:6a:f3:c6:3e:82:
         e9:3c:61:43:7e:5f:89:11:34:c8:f3:00:46:42:c9:61:66:25:
         ae:4e:0a:51:f6:8c:6d:4a:fb:16:12:d7:d7:9b:55:75:9d:16:
         57:ea:c1:01:ad:c3:7f:c5:dc:cf:47:94:21:af:4f:3d:8a:25:
         43:8e:dc:45:61:09:7e:06:80:c6:08:ef:62:f0:14:eb:6d:43:
         43:46:86:2d:83:cb:0d:27:dc:ac:ab:41:bc:1b:1d:c7:ed:e7:
         c4:87:42:31:da:d1:d4:78:99:5d:c7:b7:f0:91:7e:2a:89:2d:
         ff:f1:24:68:92:97:92:b1:cf:3b:67:21:97:82:4b:a9:5e:69:
         00:d1:73:d5:8e:e3:8c:5d:7f:44:44:16:8a:a5:27:85:a4:b8:
         8e:fb:43:29:4a:68:20:11:8c:de:99:f2:c3:2e:eb:e1:d6:46:
         8c:19:de:5d:76:52:a2:95:b3:43:28:92:f8:c9:6e:c9:5c:17:
         b0:f1:82:83:c7:ba:2b:e0:96:e0:57:57:7c:41:67:f2:10:37:
         32:7f:bf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:32:01 2026 by rpki-client