Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633035303a3a2f34342d3434203d3e20313937363334.roa
File:                     326130363a313238333a633035303a3a2f34342d3434203d3e20313937363334.roa (raw, json)
Hash identifier:          wNYdx6lf0MTqKvaAl2IcrWtu61BjAD7a0OX8w6WNO2c=
Subject key identifier:   9F:06:A3:92:26:85:A1:8C:CC:F4:DF:8D:20:81:60:64:A4:0F:2D:27
Certificate issuer:       /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Certificate serial:       38D032C1E3EB3FD31EAB81622A2E6D3FD1B842BE
Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633035303a3a2f34342d3434203d3e20313937363334.roa
Signing time:             Fri 05 Jun 2026 16:35:04 +0000
ROA not before:           Fri 05 Jun 2026 16:30:04 +0000
ROA not after:            Fri 04 Jun 2027 16:35:04 +0000
asID:                     197634
IP address blocks:        2a06:1283:c050::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d0:32:c1:e3:eb:3f:d3:1e:ab:81:62:2a:2e:6d:3f:d1:b8:42:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
        Validity
            Not Before: Jun  5 16:30:04 2026 GMT
            Not After : Jun  4 16:35:04 2027 GMT
        Subject: CN=9F06A3922685A18CCCF4DF8D20816064A40F2D27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:bb:41:75:04:cf:2c:cb:9d:a3:ce:28:c1:
                    46:d6:ea:82:fb:7e:f4:e4:8e:c5:c4:ba:14:b3:6b:
                    07:01:b4:69:8a:9b:95:d0:98:8b:34:df:b4:a7:9f:
                    d4:33:c5:14:d6:dd:2b:8c:93:9f:ac:7f:7e:0b:a7:
                    88:a6:65:41:75:28:fc:71:d0:34:e1:98:3d:d1:e8:
                    64:35:c2:fd:12:9e:fb:7d:fa:b3:d2:a6:21:2f:ee:
                    70:fd:3b:fd:32:2e:1b:14:fe:74:18:dc:3d:72:05:
                    e3:6b:14:22:7e:27:b1:d8:d4:82:59:44:87:9e:2b:
                    24:e0:c6:d0:c8:03:c7:f5:e1:31:d0:de:96:4a:aa:
                    a2:f9:16:f4:5d:db:bb:25:76:a4:1d:b2:1b:aa:ad:
                    62:75:d1:76:11:49:3e:b4:02:9a:a4:57:8c:d0:10:
                    ae:0a:29:2f:e6:ca:d7:48:6d:30:c6:e0:e6:bc:f0:
                    78:7b:56:2e:ec:6a:5a:06:cf:04:c1:ad:1d:eb:f3:
                    d7:8d:78:04:9d:96:f0:81:46:24:8d:b6:8f:35:af:
                    27:08:af:07:f4:05:bc:cb:19:52:ce:96:81:9f:b8:
                    8e:88:25:43:b7:63:a2:04:5a:86:f6:2d:a1:9c:9d:
                    74:82:ff:2a:1e:d3:91:8e:98:13:2f:6d:82:db:66:
                    cc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:06:A3:92:26:85:A1:8C:CC:F4:DF:8D:20:81:60:64:A4:0F:2D:27
            X509v3 Authority Key Identifier:
                keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633035303a3a2f34342d3434203d3e20313937363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:c050::/44

    Signature Algorithm: sha256WithRSAEncryption
         9c:20:52:4b:6f:13:e4:5f:4d:f1:3c:6b:2f:cb:83:66:cf:5f:
         73:f0:0e:1b:dc:8a:5c:07:cd:61:b7:7d:56:be:53:34:eb:8d:
         f9:5b:e3:c5:64:3f:23:d0:75:a7:ae:f8:e8:a2:a6:c3:e6:7b:
         7e:94:c3:23:98:fd:b0:17:31:31:6f:fa:f0:9f:b7:ba:e5:61:
         a7:83:8d:17:b6:cd:0c:d4:07:0f:39:74:b5:35:b8:a6:fb:64:
         27:1b:57:62:05:d6:0a:55:21:55:44:b7:52:eb:0e:1a:1a:2f:
         d6:82:0f:55:8a:fa:b8:da:95:fa:28:cb:71:d5:7f:72:f2:b1:
         1c:62:f6:b2:3f:d9:d3:97:29:0d:99:69:70:28:d9:20:d0:7c:
         f5:bb:6f:d4:6f:cf:32:85:61:cc:9e:d3:73:43:cc:e3:fa:91:
         db:1b:92:c7:d3:6f:f6:02:b3:1d:b0:42:ed:5d:7b:c8:07:9c:
         8f:94:4c:5c:2d:63:21:2d:94:f7:19:fb:6e:d4:ec:7b:1a:28:
         b3:f1:15:fa:e6:23:3d:93:17:c1:65:e6:af:01:0a:a9:16:1e:
         bb:cf:07:4c:74:fc:82:9f:fb:32:8b:5e:26:95:d2:db:fc:db:
         70:00:91:cb:f6:7c:91:17:7e:89:c1:93:6f:15:86:b9:6c:e8:
         de:3e:e0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:06:22 2026 by rpki-client