Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623130303a3a2f34302d3438203d3e20323136303532.roa
File:                     326130363a313238333a623130303a3a2f34302d3438203d3e20323136303532.roa (raw, json)
Hash identifier:          d69E3J3xvg3RivmC9D5ILw7m6ukrHKCLsQZF0XxFHEo=
Subject key identifier:   50:59:8E:6A:4E:5B:B0:79:4B:BB:27:82:D3:35:94:63:37:BD:BC:81
Certificate issuer:       /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Certificate serial:       299A7484EB68303EFD93B98AB1CC4D3BD3267C4D
Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623130303a3a2f34302d3438203d3e20323136303532.roa
Signing time:             Fri 05 Jun 2026 16:35:05 +0000
ROA not before:           Fri 05 Jun 2026 16:30:05 +0000
ROA not after:            Fri 04 Jun 2027 16:35:05 +0000
asID:                     216052
IP address blocks:        2a06:1283:b100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9a:74:84:eb:68:30:3e:fd:93:b9:8a:b1:cc:4d:3b:d3:26:7c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
        Validity
            Not Before: Jun  5 16:30:05 2026 GMT
            Not After : Jun  4 16:35:05 2027 GMT
        Subject: CN=50598E6A4E5BB0794BBB2782D335946337BDBC81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:9e:a2:56:9a:1a:d6:a7:c1:d9:0b:ab:c2:
                    2d:f7:d0:ae:61:20:1c:08:e2:6b:d3:c9:0f:c0:17:
                    f7:53:bb:06:4c:38:69:13:7b:19:a1:93:1f:67:a7:
                    88:02:61:e3:b6:8d:fe:32:57:36:03:2c:32:d4:24:
                    8b:93:32:46:fb:e2:4c:79:8c:01:9f:80:ba:13:48:
                    0c:5d:7d:c4:68:30:5b:69:62:5e:37:e3:d9:d3:5d:
                    9d:da:3b:8a:7b:29:4d:8a:5c:f0:84:db:84:cf:1f:
                    db:7c:58:22:51:9b:90:25:b4:c8:b5:c5:f0:3a:67:
                    02:d0:38:e6:4d:9c:9d:fe:d3:f3:39:cf:8d:8b:50:
                    35:31:16:07:f8:99:88:d5:b6:04:15:bb:33:e6:e0:
                    06:11:5f:f2:61:6f:03:0d:47:07:69:a2:65:fb:8c:
                    aa:97:f3:f3:11:a2:74:3a:20:2e:62:a7:ed:8e:8c:
                    5d:ef:5e:79:0c:34:88:35:13:27:92:93:7d:da:19:
                    44:f4:c2:00:e0:8a:97:be:03:11:db:29:6c:40:f4:
                    83:ef:cb:95:86:35:b2:c8:f8:0b:ac:57:51:6b:07:
                    f0:d9:83:92:bb:c5:a3:38:30:2f:ef:a6:4c:b7:30:
                    d0:f8:70:e0:b5:0e:8b:9c:75:97:38:a3:2e:d8:84:
                    c2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:59:8E:6A:4E:5B:B0:79:4B:BB:27:82:D3:35:94:63:37:BD:BC:81
            X509v3 Authority Key Identifier:
                keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623130303a3a2f34302d3438203d3e20323136303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:b100::/40

    Signature Algorithm: sha256WithRSAEncryption
         04:61:a0:53:f2:69:ed:9a:fc:07:5e:07:8f:77:6d:f0:a7:c9:
         26:29:a4:ee:56:f5:8c:65:2e:ec:18:92:f5:7d:65:4e:95:e2:
         58:b2:14:57:65:b3:b4:3a:b5:5b:8a:8e:7f:8b:54:29:c2:68:
         26:37:e2:5b:c3:36:62:c0:7c:0a:cf:ec:c6:1f:7d:09:0b:d5:
         f9:a4:5e:a7:93:fc:99:ad:d4:c9:30:e7:35:62:ad:51:92:ea:
         07:1d:3b:59:80:e9:14:45:ed:46:03:e8:e2:d7:8f:cf:18:82:
         ac:ff:69:fe:74:a3:51:72:71:c2:65:7a:d5:03:7c:7a:9b:59:
         62:64:9f:5e:12:9c:ac:6e:fe:34:d8:fa:f0:60:36:b0:71:51:
         0a:c3:3f:41:17:c1:0a:34:3e:2a:3f:8e:00:8e:98:55:97:eb:
         b5:1d:03:35:19:74:0a:e6:f8:41:cd:8b:4f:72:b2:a9:75:5f:
         e4:d9:55:b8:d1:98:96:11:15:c7:fb:bf:08:3a:76:0b:c6:c3:
         60:0e:d9:1a:87:18:a4:98:8c:fd:fa:36:ff:98:a8:2a:17:6e:
         1d:f3:dd:ee:40:11:79:60:d2:e4:9d:f0:cd:62:d1:e8:b7:40:
         b7:a2:5f:01:05:6d:8e:67:49:ad:fe:b5:50:74:de:1d:fb:0f:
         d2:65:30:88
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUKZp0hOtoMD79k7mKscxNO9MmfE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0
RjI5QzNGQjAeFw0yNjA2MDUxNjMwMDVaFw0yNzA2MDQxNjM1MDVaMDMxMTAvBgNV
BAMTKDUwNTk4RTZBNEU1QkIwNzk0QkJCMjc4MkQzMzU5NDYzMzdCREJDODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rp6iVpoa1qfB2Qurwi330K5h
IBwI4mvTyQ/AF/dTuwZMOGkTexmhkx9np4gCYeO2jf4yVzYDLDLUJIuTMkb74kx5
jAGfgLoTSAxdfcRoMFtpYl4349nTXZ3aO4p7KU2KXPCE24TPH9t8WCJRm5AltMi1
xfA6ZwLQOOZNnJ3+0/M5z42LUDUxFgf4mYjVtgQVuzPm4AYRX/JhbwMNRwdpomX7
jKqX8/MRonQ6IC5ip+2OjF3vXnkMNIg1EyeSk33aGUT0wgDgipe+AxHbKWxA9IPv
y5WGNbLI+AusV1FrB/DZg5K7xaM4MC/vpky3MND4cOC1DoucdZc4oy7YhMJDAgMB
AAGjggJ5MIICdTAdBgNVHQ4EFgQUUFmOak5bsHlLuyeC0zWUYze9vIEwHwYDVR0j
BBgwFoAUSAfBGL00iTS1zFmz6KeowU8pw/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm
NDA5LzQvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5QzNGQi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5
QzNGQi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt
MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzQvMzI2MTMwMzYzYTMxMzIzODMz
M2E2MjMxMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNjMwMzUzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoGEoOxMA0GCSqGSIb3DQEBCwUAA4IBAQAEYaBT8mntmvwHXgeP
d23wp8kmKaTuVvWMZS7sGJL1fWVOleJYshRXZbO0OrVbio5/i1QpwmgmN+JbwzZi
wHwKz+zGH30JC9X5pF6nk/yZrdTJMOc1Yq1RkuoHHTtZgOkURe1GA+ji14/PGIKs
/2n+dKNRcnHCZXrVA3x6m1liZJ9eEpysbv402PrwYDawcVEKwz9BF8EKND4qP44A
jphVl+u1HQM1GXQK5vhBzYtPcrKpdV/k2VW40ZiWERXH+78IOnYLxsNgDtkahxik
mIz9+jb/mKgqF24d893uQBF5YNLknfDNYtHot0C3ol8BBW2OZ0mt/rVQdN4d+w/S
ZTCI
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:00:01 2026 by rpki-client