Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a626130303a3a2f34302d3438203d3e20323039363638.roa
File:                     326130363a313238333a626130303a3a2f34302d3438203d3e20323039363638.roa (raw, json)
Hash identifier:          91wDi/+137I0IqLRwsLPhgWeWjG2K4sPD7Bu405H5P0=
Subject key identifier:   77:0B:0E:C9:BF:DB:03:85:9B:16:B3:9F:DC:48:5E:23:B7:A1:5B:04
Certificate issuer:       /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Certificate serial:       78B19757D6309CEE23C2816EEBDE699FB0EB1489
Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a626130303a3a2f34302d3438203d3e20323039363638.roa
Signing time:             Fri 05 Jun 2026 16:35:04 +0000
ROA not before:           Fri 05 Jun 2026 16:30:04 +0000
ROA not after:            Fri 04 Jun 2027 16:35:04 +0000
asID:                     209668
IP address blocks:        2a06:1283:ba00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b1:97:57:d6:30:9c:ee:23:c2:81:6e:eb:de:69:9f:b0:eb:14:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
        Validity
            Not Before: Jun  5 16:30:04 2026 GMT
            Not After : Jun  4 16:35:04 2027 GMT
        Subject: CN=770B0EC9BFDB03859B16B39FDC485E23B7A15B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:ef:10:16:b7:a4:17:58:e5:ab:80:c9:b9:51:
                    6a:50:57:cc:ec:47:70:23:c7:8a:9b:e4:17:f9:e9:
                    4a:09:59:33:46:00:55:07:0c:43:7e:52:73:20:c5:
                    99:66:d4:38:ff:71:08:5f:65:84:d5:04:41:3a:e3:
                    fa:3b:a4:93:e5:ae:09:51:af:3c:af:8b:5b:e4:e7:
                    b1:23:bc:41:cb:16:12:9c:7c:fd:e7:39:1c:89:6c:
                    b2:48:2c:b1:68:35:3d:b9:0c:85:d3:c1:09:5b:18:
                    02:11:00:54:f4:b5:f2:49:e6:1d:07:3c:61:9a:38:
                    88:77:52:b8:19:04:76:6e:fc:78:ca:99:fa:79:a3:
                    b5:a8:e0:27:8e:7e:76:6c:f2:97:06:ef:fe:e2:f4:
                    aa:0b:a6:4c:a7:90:07:22:7a:34:56:8b:f6:ff:81:
                    da:32:d5:c8:b2:fd:48:ba:f1:60:2f:93:33:b5:73:
                    29:8c:65:1f:3d:a2:ff:f7:17:29:9d:ea:c7:37:33:
                    78:5f:68:7a:70:20:f9:c4:6b:3d:a7:65:35:2b:fa:
                    95:0f:e0:d2:9d:8e:78:d8:98:2e:a2:b6:8a:26:ea:
                    7e:9a:cf:d3:26:b1:08:05:1d:bd:41:cc:46:9d:63:
                    0e:7c:28:4c:04:a0:99:fd:84:e2:20:f9:93:95:3c:
                    5e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0B:0E:C9:BF:DB:03:85:9B:16:B3:9F:DC:48:5E:23:B7:A1:5B:04
            X509v3 Authority Key Identifier:
                keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a626130303a3a2f34302d3438203d3e20323039363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:ba00::/40

    Signature Algorithm: sha256WithRSAEncryption
         55:17:56:37:91:a2:e4:1d:6b:ad:52:4f:9a:89:c6:cb:2f:26:
         43:9d:47:f3:95:cc:c2:70:43:ec:11:91:36:5d:19:f6:af:7a:
         6b:a0:44:1e:b6:2b:53:77:58:6e:02:0f:57:e5:f6:1f:ff:db:
         a5:9d:a9:9d:f8:40:c0:3f:8b:79:38:97:21:27:f3:04:7e:7f:
         20:32:9e:2c:61:a9:24:bd:b6:7e:32:27:47:5c:45:2b:eb:78:
         dc:67:1b:8e:ff:0f:ec:9e:ae:c0:d4:63:be:13:55:2b:94:f9:
         e9:60:8b:9d:c3:8a:2f:70:8b:61:8c:aa:a1:db:24:69:8b:91:
         a6:1a:92:bd:46:70:5f:28:75:4e:57:12:45:d3:ec:f6:f3:de:
         02:fd:88:b8:05:e0:ae:bd:23:b7:96:eb:2f:16:bd:b1:3d:52:
         34:8d:aa:f7:41:c6:15:d0:21:9e:b9:7d:5f:41:da:70:58:c9:
         07:59:12:59:24:ff:71:15:2f:ea:94:18:cb:de:b5:60:46:9d:
         26:22:51:13:bc:90:2d:aa:01:8d:4f:d6:7e:04:d9:ac:0b:d9:
         09:e1:93:9f:f5:fa:30:ae:7e:f2:f8:99:43:2f:87:96:05:fd:
         2a:0d:fe:28:63:90:05:77:1b:1a:80:68:c9:e3:47:dc:bc:d3:
         83:ae:f0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:10:10 2026 by rpki-client