Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031303a3a2f34342d3434203d3e20323037323532.roa
File:                     326130363a313238333a633031303a3a2f34342d3434203d3e20323037323532.roa (raw, json)
Hash identifier:          VNk6YYf2NRUN45nDlwHVNmN8Hlebg4mN51T2DJiB/DU=
Subject key identifier:   E0:21:3F:93:D8:7F:90:D1:08:C4:EF:13:F6:AF:31:E2:6F:5F:38:54
Certificate issuer:       /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Certificate serial:       60AAFBA7FAA0B157C724863BB35EEC42C3C73E46
Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031303a3a2f34342d3434203d3e20323037323532.roa
Signing time:             Fri 05 Jun 2026 16:35:05 +0000
ROA not before:           Fri 05 Jun 2026 16:30:05 +0000
ROA not after:            Fri 04 Jun 2027 16:35:05 +0000
asID:                     207252
IP address blocks:        2a06:1283:c010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:aa:fb:a7:fa:a0:b1:57:c7:24:86:3b:b3:5e:ec:42:c3:c7:3e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
        Validity
            Not Before: Jun  5 16:30:05 2026 GMT
            Not After : Jun  4 16:35:05 2027 GMT
        Subject: CN=E0213F93D87F90D108C4EF13F6AF31E26F5F3854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:78:f0:cb:cc:bb:69:0d:68:dc:ff:72:c1:b1:
                    59:4c:b7:d8:22:54:c6:dc:59:0f:20:06:d5:d4:2c:
                    f1:4d:0b:62:91:f5:fd:cd:71:e3:1f:06:1e:67:64:
                    da:2e:85:72:51:35:8b:3a:ed:a5:ba:03:36:f0:62:
                    c4:f5:a8:59:e5:30:d3:3c:79:52:5f:a1:b8:d5:78:
                    4f:2c:57:dc:63:d3:b3:ed:af:f6:a1:95:06:aa:ae:
                    80:08:02:80:95:d2:ac:33:45:26:6a:db:83:e5:40:
                    9a:9f:f2:58:84:fe:51:6f:80:a3:fd:50:58:4f:6c:
                    8b:dc:f6:f4:71:87:72:88:5e:e5:2a:4e:3b:8f:80:
                    d6:c1:f0:e5:74:e1:e1:11:38:ae:fd:c1:f9:ae:42:
                    43:9a:13:94:41:72:fc:1b:f5:ca:6e:d6:98:c2:c0:
                    20:ea:7e:56:b9:95:96:68:bc:90:26:25:78:d4:a9:
                    a1:31:28:86:65:e9:e3:70:ad:c3:e9:dd:58:40:b5:
                    d1:24:42:5e:76:e5:b7:47:b8:04:91:94:bb:d8:40:
                    f7:be:63:fe:31:32:e7:4a:c2:7c:ab:f2:10:75:f7:
                    dd:49:11:ce:5e:1d:e5:76:36:af:55:0e:75:32:4a:
                    e4:50:73:66:b1:80:64:f7:f3:3f:71:26:7c:20:85:
                    2a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:21:3F:93:D8:7F:90:D1:08:C4:EF:13:F6:AF:31:E2:6F:5F:38:54
            X509v3 Authority Key Identifier:
                keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031303a3a2f34342d3434203d3e20323037323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:c010::/44

    Signature Algorithm: sha256WithRSAEncryption
         1e:87:4a:61:c0:92:03:04:81:b0:9b:a3:7e:35:bd:89:3a:91:
         c1:29:72:b5:89:d9:3a:4b:82:54:ea:a0:57:53:42:35:d4:92:
         18:b5:ee:e8:77:2d:98:7b:af:49:48:bf:3f:51:df:8a:3f:d3:
         ad:4c:35:bd:40:f4:ce:20:10:d3:34:ff:06:09:7a:ef:5c:47:
         55:0d:8c:88:ad:9d:b9:55:f3:e5:8d:ce:75:00:80:bf:ca:98:
         ab:5d:c7:7e:57:e9:6b:36:5f:8e:7c:40:a4:d5:15:68:7a:49:
         5e:df:31:4d:78:87:9b:a1:06:12:88:f8:5b:5c:ec:9f:09:5c:
         15:92:34:13:0f:4e:d2:a2:c4:54:6f:7d:7d:e9:3c:34:01:b0:
         a9:5e:44:76:cb:8a:b6:a0:74:85:b7:e2:8e:cd:65:cb:00:c6:
         2a:02:c3:81:a0:ad:3b:86:50:ea:27:6f:59:4e:2d:ea:c9:e2:
         f9:dc:17:8b:4d:8b:d7:5a:0b:4d:b9:77:0a:a2:7e:a6:68:5b:
         4b:a8:08:f4:4f:15:0c:64:4e:41:9c:5d:1e:c4:1b:48:b4:08:
         90:90:2e:d4:d1:a6:67:e2:b0:6a:75:58:04:51:03:26:71:45:
         41:20:a1:fa:e9:aa:b4:92:9c:a7:fc:1f:f4:be:32:46:56:0b:
         56:d6:b4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:01:11 2026 by rpki-client