Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633032323a3a2f34382d3438203d3e20323136303635.roa
File:                     326130363a313238333a633032323a3a2f34382d3438203d3e20323136303635.roa (raw, json)
Hash identifier:          rIYKGVJ1XxuYSyLzxpG822xnabOEMgOZOeBoK9M56Po=
Subject key identifier:   77:37:73:F7:98:0E:CC:65:D7:D4:5B:5E:54:40:47:BE:E7:CB:0A:31
Certificate issuer:       /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Certificate serial:       015B13C35DB73FD3700833A52FFF4A0A5D4023A2
Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633032323a3a2f34382d3438203d3e20323136303635.roa
Signing time:             Fri 05 Jun 2026 16:35:04 +0000
ROA not before:           Fri 05 Jun 2026 16:30:04 +0000
ROA not after:            Fri 04 Jun 2027 16:35:04 +0000
asID:                     216065
IP address blocks:        2a06:1283:c022::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:5b:13:c3:5d:b7:3f:d3:70:08:33:a5:2f:ff:4a:0a:5d:40:23:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
        Validity
            Not Before: Jun  5 16:30:04 2026 GMT
            Not After : Jun  4 16:35:04 2027 GMT
        Subject: CN=773773F7980ECC65D7D45B5E544047BEE7CB0A31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:5d:ef:6e:f0:20:2b:ef:15:ce:e9:16:aa:
                    5f:c2:53:6b:90:d0:fa:2f:98:92:fd:cc:ab:5f:8c:
                    65:76:fc:29:b3:90:b4:ed:fc:5e:a0:01:4e:f9:5e:
                    07:a8:92:2e:24:4b:c6:53:59:8d:86:40:b2:40:72:
                    8d:f1:ab:d5:1f:0b:a5:f1:0a:30:0b:4b:99:a8:7c:
                    f1:60:83:22:49:ae:ba:6d:80:5b:03:f4:54:08:1b:
                    82:3f:55:60:08:3b:ed:95:06:47:c7:94:ce:a0:c9:
                    68:d2:5f:b0:4f:06:10:d7:1b:82:64:b6:cd:a8:9b:
                    9a:da:bb:5f:ab:13:26:fa:0b:ac:ee:85:c3:d8:dd:
                    32:fc:78:93:1e:46:e5:f6:96:86:28:a6:a1:24:4b:
                    7d:a8:e8:25:bf:cd:ad:65:29:b7:0f:74:e3:83:90:
                    9d:e9:ee:80:02:7b:3d:9c:37:cf:ab:78:fe:b3:df:
                    fa:10:17:5e:d3:fe:2d:95:47:e5:86:39:bb:f4:f1:
                    11:47:ad:5b:c0:01:6b:95:2f:64:f9:8b:42:5d:9d:
                    9d:53:ee:36:ea:3e:54:9b:ed:c2:c4:ac:17:4b:16:
                    65:58:45:3d:11:18:87:db:fd:50:5e:77:ef:ef:98:
                    ac:dc:72:a5:5e:8f:a9:29:42:83:de:05:42:26:f5:
                    6d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:37:73:F7:98:0E:CC:65:D7:D4:5B:5E:54:40:47:BE:E7:CB:0A:31
            X509v3 Authority Key Identifier:
                keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633032323a3a2f34382d3438203d3e20323136303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:c022::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:ba:99:5b:7b:99:01:1c:37:f9:9d:1f:0a:d2:a8:93:f9:69:
         76:00:ae:ac:b3:4d:19:ee:12:a2:2d:2e:15:04:00:64:3c:f6:
         68:76:01:4f:5e:12:bc:c9:58:2e:b9:7f:ab:88:b8:a2:e0:5c:
         b0:fd:5e:aa:b8:db:10:f0:b4:da:da:36:62:12:c4:dc:0b:6b:
         6f:fb:9a:d0:2d:3d:00:be:8e:b9:96:2e:6d:41:d0:18:9a:9d:
         27:dd:de:ec:d4:fc:76:78:15:60:23:f0:5c:a6:d1:62:3a:b9:
         94:38:a2:19:ce:0d:6a:c1:61:16:46:fc:cc:37:78:9d:d9:1b:
         6a:53:77:4e:3f:f6:49:c3:3d:55:14:43:db:40:e7:42:13:1e:
         c8:09:b6:db:16:a2:c9:ff:be:f5:b0:ab:78:8e:2b:1a:7a:65:
         02:79:eb:6e:8c:48:8b:55:74:0c:c0:e0:40:90:f3:4c:e3:76:
         4f:13:02:a7:9d:f3:5a:5e:51:d1:cc:6b:56:af:b0:df:97:6e:
         14:04:a1:10:5b:6f:48:f9:e1:f4:be:aa:61:aa:f8:0c:a6:7b:
         d9:38:91:1f:35:92:32:10:b5:90:8a:7d:cd:ad:cf:01:81:b5:
         d0:63:9e:99:96:ea:f0:38:40:bd:fc:92:67:2f:1c:0d:43:98:
         25:5f:0f:ce
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUAVsTw123P9NwCDOlL/9KCl1AI6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0
RjI5QzNGQjAeFw0yNjA2MDUxNjMwMDRaFw0yNzA2MDQxNjM1MDRaMDMxMTAvBgNV
BAMTKDc3Mzc3M0Y3OTgwRUNDNjVEN0Q0NUI1RTU0NDA0N0JFRTdDQjBBMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+5l3vbvAgK+8VzukWql/CU2uQ
0PovmJL9zKtfjGV2/CmzkLTt/F6gAU75Xgeoki4kS8ZTWY2GQLJAco3xq9UfC6Xx
CjALS5mofPFggyJJrrptgFsD9FQIG4I/VWAIO+2VBkfHlM6gyWjSX7BPBhDXG4Jk
ts2om5rau1+rEyb6C6zuhcPY3TL8eJMeRuX2loYopqEkS32o6CW/za1lKbcPdOOD
kJ3p7oACez2cN8+reP6z3/oQF17T/i2VR+WGObv08RFHrVvAAWuVL2T5i0JdnZ1T
7jbqPlSb7cLErBdLFmVYRT0RGIfb/VBed+/vmKzccqVej6kpQoPeBUIm9W1BAgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQUdzdz95gOzGXX1FteVEBHvufLCjEwHwYDVR0j
BBgwFoAUSAfBGL00iTS1zFmz6KeowU8pw/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm
NDA5LzQvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5QzNGQi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5
QzNGQi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt
MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzQvMzI2MTMwMzYzYTMxMzIzODMz
M2E2MzMwMzIzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNjMwMzYzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoGEoPAIjANBgkqhkiG9w0BAQsFAAOCAQEAkLqZW3uZARw3+Z0f
CtKok/lpdgCurLNNGe4Soi0uFQQAZDz2aHYBT14SvMlYLrl/q4i4ouBcsP1eqrjb
EPC02to2YhLE3Atrb/ua0C09AL6OuZYubUHQGJqdJ93e7NT8dngVYCPwXKbRYjq5
lDiiGc4NasFhFkb8zDd4ndkbalN3Tj/2ScM9VRRD20DnQhMeyAm22xaiyf++9bCr
eI4rGnplAnnrboxIi1V0DMDgQJDzTON2TxMCp53zWl5R0cxrVq+w35duFAShEFtv
SPnh9L6qYar4DKZ72TiRHzWSMhC1kIp9za3PAYG10GOemZbq8DhAvfySZy8cDUOY
JV8Pzg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:37:56 2026 by rpki-client