Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633034303a3a2f34342d3434203d3e20323037323532.roa
File:                     326130363a313238333a633034303a3a2f34342d3434203d3e20323037323532.roa (raw, json)
Hash identifier:          mcPiL+mk9QHXDUf8Ypkew6zb3xwOMgigVpNtwNFWdV4=
Subject key identifier:   71:6F:95:CA:07:0C:D8:63:D5:73:50:E9:64:1A:75:89:A4:74:68:F3
Certificate issuer:       /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Certificate serial:       7E61BE84FA41B28A8602757E6F6DF7AD79C502A4
Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633034303a3a2f34342d3434203d3e20323037323532.roa
Signing time:             Fri 05 Jun 2026 16:35:05 +0000
ROA not before:           Fri 05 Jun 2026 16:30:05 +0000
ROA not after:            Fri 04 Jun 2027 16:35:05 +0000
asID:                     207252
IP address blocks:        2a06:1283:c040::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:61:be:84:fa:41:b2:8a:86:02:75:7e:6f:6d:f7:ad:79:c5:02:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
        Validity
            Not Before: Jun  5 16:30:05 2026 GMT
            Not After : Jun  4 16:35:05 2027 GMT
        Subject: CN=716F95CA070CD863D57350E9641A7589A47468F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6e:1e:7f:4a:67:79:86:9b:3e:55:5b:82:2e:
                    9f:d4:81:2f:01:7d:e1:cf:e4:c8:92:04:b4:2d:c6:
                    b6:2d:3e:b4:c5:fb:94:c2:1e:d2:49:98:a8:ba:c6:
                    66:af:49:27:9f:e2:65:04:92:b5:cc:2e:3a:ff:ac:
                    d6:df:36:16:a9:90:cc:d6:a0:71:43:c5:da:7c:79:
                    00:c5:46:3e:4d:7f:84:c9:5c:28:9c:aa:63:98:12:
                    21:6b:4f:e9:88:28:90:ee:39:20:88:13:96:5d:1b:
                    59:2d:2c:67:94:88:2b:9e:81:dc:35:43:df:e4:e4:
                    cf:22:58:2f:0d:67:bb:6e:b4:30:8e:64:da:0b:d4:
                    5b:c7:96:f9:aa:ec:c7:bc:76:b9:6e:08:b0:cf:0e:
                    16:3f:89:9e:b0:2d:43:05:98:59:c3:cd:f3:ab:e6:
                    27:c1:f9:a7:f6:5c:0a:d3:8a:80:9f:82:6c:19:30:
                    69:94:0a:46:09:88:5a:69:e8:f6:75:1b:88:27:6a:
                    e3:f5:9f:86:76:5c:cb:6b:e8:ef:b7:64:7e:b4:3b:
                    e8:e5:eb:12:48:e8:95:63:3e:21:e2:a2:f2:b4:c1:
                    fe:2b:52:08:68:01:8e:51:fb:d1:19:1a:e0:26:ad:
                    b3:9f:c0:bc:e6:45:42:e1:11:c2:d7:de:88:9c:24:
                    9b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6F:95:CA:07:0C:D8:63:D5:73:50:E9:64:1A:75:89:A4:74:68:F3
            X509v3 Authority Key Identifier:
                keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633034303a3a2f34342d3434203d3e20323037323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:c040::/44

    Signature Algorithm: sha256WithRSAEncryption
         52:ed:2d:5b:19:a0:90:19:6d:59:69:7d:4a:26:33:e9:c7:7c:
         b2:af:0a:2b:fb:34:d8:87:c1:8b:fe:4e:9b:10:56:e0:94:3d:
         45:10:62:c7:c4:cf:3d:23:29:2a:6f:41:17:67:79:0b:be:0b:
         7a:13:58:77:f1:2a:00:4e:50:97:30:85:d0:22:bf:92:a5:07:
         48:24:a6:d9:20:b7:75:cf:46:8c:29:a3:5c:60:f8:b8:73:d7:
         80:1c:84:bb:5a:7e:e6:e7:b6:04:65:1e:2f:06:19:5e:05:a4:
         e1:29:76:9f:cb:3c:ae:46:f3:b5:76:e9:2d:a4:63:95:31:fb:
         45:b7:0d:b8:6b:c2:33:30:b5:88:d1:0b:47:d6:16:db:e5:54:
         ab:a2:fe:62:98:a0:ac:50:78:72:b5:72:fb:1f:71:30:95:d9:
         58:c3:35:26:24:da:b4:f2:8f:75:37:8b:61:8e:64:fe:53:55:
         e9:f9:c1:04:a8:cf:3f:fa:d5:d4:d3:e4:9b:56:e6:fe:23:58:
         b9:21:d6:c8:9b:a6:20:ec:69:2e:60:b6:3e:10:cf:4a:89:58:
         3a:2a:be:39:b4:07:3b:14:30:6f:5c:37:7a:1b:9f:02:8b:3c:
         12:66:47:71:1d:c3:f9:e5:59:e7:2e:90:14:43:70:69:a2:d8:
         e1:46:d4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:39:40 2026 by rpki-client