Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031623a3a2f34382d3438203d3e20323136303433.roa
File:                     326130363a313238333a633031623a3a2f34382d3438203d3e20323136303433.roa (raw, json)
Hash identifier:          dYa0eC7ZhUtTpL6oSasBodOMYZoyuPQNLUAbxf0H508=
Subject key identifier:   EA:E0:1B:AE:49:3F:1A:AD:02:43:3D:A4:6B:18:AC:51:44:BE:49:39
Certificate issuer:       /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Certificate serial:       50F9C3F124BFF890507DD8DC889FD6428AA6A67E
Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031623a3a2f34382d3438203d3e20323136303433.roa
Signing time:             Fri 05 Jun 2026 16:35:05 +0000
ROA not before:           Fri 05 Jun 2026 16:30:05 +0000
ROA not after:            Fri 04 Jun 2027 16:35:05 +0000
asID:                     216043
IP address blocks:        2a06:1283:c01b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f9:c3:f1:24:bf:f8:90:50:7d:d8:dc:88:9f:d6:42:8a:a6:a6:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
        Validity
            Not Before: Jun  5 16:30:05 2026 GMT
            Not After : Jun  4 16:35:05 2027 GMT
        Subject: CN=EAE01BAE493F1AAD02433DA46B18AC5144BE4939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:47:5f:79:a3:c5:21:e4:48:38:bd:c2:d0:9d:
                    22:55:cf:77:fe:8a:48:97:4a:7e:d7:f5:d1:f1:cf:
                    7b:b9:e5:d5:7f:7e:e0:62:b2:cc:05:c9:46:05:28:
                    e5:4e:92:25:00:c8:e8:44:6e:4e:1c:ec:57:99:fd:
                    7f:41:37:d0:45:fd:e5:ee:d0:bb:ca:82:1e:94:bc:
                    ba:96:30:98:a2:97:0a:40:1d:8f:88:c5:f2:01:28:
                    13:70:8e:59:ef:21:9b:39:36:e2:3b:ef:db:f7:0a:
                    e6:dd:d1:da:71:37:ed:5e:c0:47:52:4c:0f:8f:d3:
                    04:ac:81:ef:fd:3b:5e:d7:66:89:55:75:78:fe:2b:
                    7f:cc:ba:ac:6a:28:6e:52:3e:3d:bc:a3:83:92:19:
                    3e:a0:39:41:0f:5b:f5:00:fd:31:c1:2d:52:a1:a3:
                    59:32:1d:dd:8b:71:cf:3a:79:2f:ee:19:93:75:63:
                    34:2f:16:25:97:ce:93:32:00:ee:c7:66:d9:74:1c:
                    c3:3e:6c:11:7a:5a:0e:b9:b6:be:71:6b:54:5e:ac:
                    6c:86:05:67:7f:4a:0e:74:62:76:a0:1f:39:05:f0:
                    e4:7e:30:90:1c:db:38:1b:5d:cc:c8:ce:41:b6:f1:
                    bd:1f:e6:b0:3a:d0:1a:36:2b:f7:67:3d:bc:75:8d:
                    41:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E0:1B:AE:49:3F:1A:AD:02:43:3D:A4:6B:18:AC:51:44:BE:49:39
            X509v3 Authority Key Identifier:
                keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031623a3a2f34382d3438203d3e20323136303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:c01b::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:d9:9f:d7:38:08:ba:b4:1b:27:83:1c:a9:e0:7b:16:7c:1b:
         1a:51:98:03:65:ed:05:a4:e0:e1:81:13:09:7a:e1:26:6f:a5:
         07:de:29:90:b6:2d:83:ae:2a:a6:bc:9c:cb:5e:24:29:6e:99:
         2f:c8:6e:4c:d3:a6:cf:69:4b:ed:c1:50:76:85:f7:5d:08:4f:
         f0:ac:9f:33:ca:c1:f9:5d:88:c4:9d:a7:76:ee:fc:38:d0:e3:
         6b:47:7c:6a:55:7c:12:47:da:17:f8:7b:cb:41:3c:52:b9:66:
         4b:40:4c:34:1b:d5:6c:68:c3:15:66:5a:45:e5:fa:76:a9:f2:
         b8:03:36:e7:fa:12:b1:33:b8:4d:b7:99:ef:ac:f9:e9:d1:9b:
         9b:88:d4:d7:7e:8c:c6:33:18:65:2d:c4:08:d4:c0:a5:e4:d1:
         17:ff:5b:61:35:d4:5b:d7:5f:bf:6d:55:fb:63:21:bc:1f:e0:
         5d:a2:43:5d:69:87:ad:3d:67:d5:98:ee:85:29:ac:f2:e7:48:
         90:1e:f7:be:c8:5a:87:1c:f8:4e:fb:87:31:a5:a6:0b:fd:08:
         55:bd:65:22:4d:51:22:c9:ad:13:e4:69:14:af:36:bf:55:9b:
         70:8d:ac:a5:39:68:d9:22:e8:5b:32:e8:ea:ec:48:7f:2f:f2:
         59:cf:b7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:24:32 2026 by rpki-client