Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a3a2f33322d3438203d3e203438373030.roa
File:                     326130363a313238333a3a2f33322d3438203d3e203438373030.roa (raw, json)
Hash identifier:          fxjXoOkAlWKdih3/cBUfNd379GhR70eDfe3wIOO06B8=
Subject key identifier:   96:68:67:E4:CC:1B:64:FC:31:3B:93:68:CD:EE:C8:E0:2C:EE:B8:A7
Certificate issuer:       /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Certificate serial:       39CD9F7FF457A313420E0E563A5D38E9D3D2D4C7
Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a3a2f33322d3438203d3e203438373030.roa
Signing time:             Fri 05 Jun 2026 16:35:05 +0000
ROA not before:           Fri 05 Jun 2026 16:30:05 +0000
ROA not after:            Fri 04 Jun 2027 16:35:05 +0000
asID:                     48700
IP address blocks:        2a06:1283::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:cd:9f:7f:f4:57:a3:13:42:0e:0e:56:3a:5d:38:e9:d3:d2:d4:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
        Validity
            Not Before: Jun  5 16:30:05 2026 GMT
            Not After : Jun  4 16:35:05 2027 GMT
        Subject: CN=966867E4CC1B64FC313B9368CDEEC8E02CEEB8A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:b1:a4:79:36:c7:57:3d:4d:2b:e6:b8:11:
                    7e:3a:44:53:51:20:c9:d5:7f:70:be:5d:a8:97:d1:
                    07:82:17:37:6b:2d:db:21:11:57:23:a7:72:9a:84:
                    7b:74:14:0a:c5:e9:4a:90:d4:bf:f2:d0:ce:6a:9d:
                    bb:37:3d:09:3f:6b:b9:83:b0:89:91:6e:af:9d:d3:
                    92:38:e0:1b:e9:28:61:c5:41:6e:9b:b2:31:c5:f7:
                    30:1c:0b:04:ef:c9:da:c4:d0:9e:65:6d:72:9f:97:
                    12:81:74:f8:ce:54:dc:2c:fb:1b:5b:2f:2d:10:fc:
                    52:f8:f4:60:76:a7:45:63:f5:dc:1d:6e:c6:50:b8:
                    d3:5e:8a:2e:35:5a:b5:a7:df:a3:b2:53:4f:18:5b:
                    88:35:2d:82:15:77:11:ae:53:7e:74:f2:5a:ea:71:
                    e8:44:2c:46:86:14:90:ae:2e:54:a3:e6:c2:74:46:
                    80:f4:7c:8b:ac:4a:51:e2:29:fc:b1:e1:49:17:19:
                    37:1f:0a:a3:bb:21:c4:12:a4:f3:fb:f5:29:54:7c:
                    aa:bc:cb:82:4a:c8:95:bf:85:a9:f5:3c:a1:42:77:
                    09:6b:29:b7:5b:0b:f5:e2:39:7d:4f:fe:5d:e6:cd:
                    20:de:41:da:21:2d:ca:15:0f:5c:54:e0:3e:9d:eb:
                    10:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:68:67:E4:CC:1B:64:FC:31:3B:93:68:CD:EE:C8:E0:2C:EE:B8:A7
            X509v3 Authority Key Identifier:
                keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a3a2f33322d3438203d3e203438373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:19:a2:d7:67:09:e4:e7:83:30:b8:9e:0e:e3:45:ec:25:2b:
         af:db:92:b0:40:19:1a:a1:94:1a:ed:c7:c8:b7:12:d9:74:f2:
         0e:8a:ad:f7:68:03:d0:21:19:1b:53:d4:58:ce:6e:92:1c:b2:
         45:ca:75:2a:82:32:b2:76:42:00:9b:ea:6c:56:68:e6:5d:69:
         23:2f:10:43:cd:df:5b:c3:ce:5f:a9:97:da:95:8b:b4:4f:7f:
         b6:9f:4f:93:b1:db:18:ad:c8:87:00:54:b3:7e:0b:9c:5d:99:
         70:8f:c3:b7:b0:96:1f:72:38:0c:7d:8c:3b:49:67:b9:53:ac:
         cf:84:8d:30:ce:a6:c0:7a:18:8f:c4:96:4c:4e:ba:a1:a6:f6:
         12:b8:90:b5:21:1d:e2:bf:85:09:6d:4f:3f:2a:ca:e7:d8:b1:
         d0:e0:b7:61:32:17:49:e1:b2:6b:af:28:d8:17:1c:c9:22:52:
         26:20:06:4c:99:e6:f7:68:21:ca:13:e1:8e:bf:77:4b:a3:62:
         37:96:b9:36:e1:48:b7:98:ad:e5:af:32:3f:86:a5:bf:a1:c1:
         4d:b1:a3:8d:d8:49:7a:6b:a1:bb:50:91:f9:4c:c6:64:7c:43:
         43:0d:82:b5:ea:cc:02:89:4f:2b:c8:c0:9b:2b:eb:32:45:a1:
         bd:fe:5c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:14:41 2026 by rpki-client