Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623230303a3a2f34302d3438203d3e20323136323637.roa
File:                     326130363a313238333a623230303a3a2f34302d3438203d3e20323136323637.roa (raw, json)
Hash identifier:          cpWpfWLGCyJ8+Cni4xCAaFNNVRhptDPlOhSZvEgqi6g=
Subject key identifier:   E5:CA:1D:B5:92:14:83:17:7C:60:E2:2F:EF:3E:F2:29:75:C3:F0:41
Certificate issuer:       /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Certificate serial:       274C4ED69F998A3E0C65BA2A1F925CC42467A6F2
Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623230303a3a2f34302d3438203d3e20323136323637.roa
Signing time:             Fri 05 Jun 2026 16:35:04 +0000
ROA not before:           Fri 05 Jun 2026 16:30:04 +0000
ROA not after:            Fri 04 Jun 2027 16:35:04 +0000
asID:                     216267
IP address blocks:        2a06:1283:b200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4c:4e:d6:9f:99:8a:3e:0c:65:ba:2a:1f:92:5c:c4:24:67:a6:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
        Validity
            Not Before: Jun  5 16:30:04 2026 GMT
            Not After : Jun  4 16:35:04 2027 GMT
        Subject: CN=E5CA1DB5921483177C60E22FEF3EF22975C3F041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:48:43:a7:a1:f6:e5:ed:d8:0d:f4:76:b5:ff:
                    a9:2d:f3:13:60:2b:3a:a6:58:af:fc:b4:90:68:68:
                    22:05:87:94:8f:ca:8e:72:cb:0e:bd:5b:09:1c:44:
                    dc:99:47:91:bf:a6:9f:60:19:20:f6:92:58:15:e9:
                    86:77:c5:c0:ef:fe:e0:c7:ad:9e:bf:05:65:95:42:
                    6b:3f:df:83:00:58:66:7f:a7:92:06:16:b6:b1:80:
                    77:5e:43:bf:64:a8:f5:96:65:72:8e:33:1e:51:0b:
                    d7:24:8b:5a:14:a3:ff:24:12:86:72:c7:74:0c:0f:
                    29:7a:12:7d:bf:69:4c:8d:b8:5e:52:28:bf:52:25:
                    ff:87:6f:fc:26:0e:02:b7:7d:a0:ec:99:30:04:c3:
                    ae:2f:87:a8:5f:df:90:c7:74:68:a0:7a:67:10:b3:
                    ff:c6:0a:67:ad:22:7e:56:21:e6:90:7f:47:bf:9e:
                    c8:e9:d3:73:3c:6a:a1:d0:c7:7d:b3:62:47:9a:99:
                    50:b9:a4:bc:d3:db:9a:fc:a9:45:2f:e5:52:7b:21:
                    31:4a:f1:4b:ad:c1:1b:10:58:7f:c5:ad:97:56:2e:
                    0e:08:9f:7f:21:50:6f:e8:ec:05:34:b8:05:05:df:
                    de:6b:01:ac:11:92:12:8e:fb:e6:f9:5f:69:52:31:
                    e1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CA:1D:B5:92:14:83:17:7C:60:E2:2F:EF:3E:F2:29:75:C3:F0:41
            X509v3 Authority Key Identifier:
                keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623230303a3a2f34302d3438203d3e20323136323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:b200::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:c9:51:1a:c8:18:68:b6:82:b1:24:c1:2d:30:65:c3:1d:f6:
         58:9e:21:90:42:60:2a:94:e1:ad:97:5b:f9:4b:f2:38:99:03:
         83:92:3e:04:87:64:4c:d2:71:f2:16:f6:ce:83:95:0f:38:cd:
         7d:e1:a8:40:8c:e0:8a:71:b9:4f:5a:15:bc:28:26:20:76:4b:
         ea:2e:3d:48:d6:2c:61:dd:20:b4:b5:9f:17:47:7e:d5:41:dc:
         79:11:a0:e1:ac:19:f1:5e:91:2c:2a:5b:c5:c7:2c:87:3a:9f:
         16:80:4b:11:1d:00:cf:6f:76:75:ee:c3:73:0f:51:f7:c0:d6:
         a0:72:52:b8:3b:33:c8:ed:ea:d4:9e:42:c4:ac:ae:0e:cf:e1:
         eb:ea:a7:ee:07:6b:36:ec:5a:76:78:66:90:1f:a3:aa:ea:6f:
         8d:8c:f2:d3:c4:d7:5a:e1:6b:92:85:89:91:0a:3d:0c:41:cc:
         c2:1a:be:99:f6:a2:e2:e9:ef:a0:9c:35:2a:d1:d0:b5:c8:77:
         27:72:65:6a:c4:b7:6b:e6:a5:3c:86:a5:e3:10:2f:66:78:8b:
         f3:a3:c3:1a:bd:1e:40:1d:bb:72:12:c7:3a:1a:74:05:ab:32:
         35:4b:b2:e2:57:25:0a:c7:fd:07:38:c9:73:40:a5:d2:cb:2c:
         00:e6:fa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:07:05 2026 by rpki-client