Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a646561643a3a2f34382d3438203d3e20313939363839.roa
File:                     326130363a313238333a646561643a3a2f34382d3438203d3e20313939363839.roa (raw, json)
Hash identifier:          +e4IHl5pKsqF3Qna8N5+UO/iXIc7ZbrJPC5PNSQII0c=
Subject key identifier:   BC:68:81:EC:45:3A:7F:3D:CD:BC:46:02:2C:43:93:34:06:B3:03:12
Certificate issuer:       /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Certificate serial:       4E6798D907BCFD909C645BC0B790290C00BD9ED9
Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a646561643a3a2f34382d3438203d3e20313939363839.roa
Signing time:             Fri 05 Jun 2026 16:35:05 +0000
ROA not before:           Fri 05 Jun 2026 16:30:05 +0000
ROA not after:            Fri 04 Jun 2027 16:35:05 +0000
asID:                     199689
IP address blocks:        2a06:1283:dead::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:67:98:d9:07:bc:fd:90:9c:64:5b:c0:b7:90:29:0c:00:bd:9e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
        Validity
            Not Before: Jun  5 16:30:05 2026 GMT
            Not After : Jun  4 16:35:05 2027 GMT
        Subject: CN=BC6881EC453A7F3DCDBC46022C43933406B30312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f1:4c:74:b8:75:47:e0:7a:57:25:4e:a3:b4:
                    1a:d0:f5:cf:47:1e:89:e8:8a:c3:e6:f1:6d:e4:65:
                    e5:1f:86:e7:2c:df:81:47:93:d3:2f:8b:a4:ed:80:
                    0b:01:24:fd:40:68:64:5f:fb:fd:82:60:dc:95:fc:
                    06:5a:d5:f7:d2:43:9d:f7:ff:43:48:a9:35:d1:72:
                    07:cc:68:d1:6f:1f:53:f8:f8:9e:27:f2:97:c6:37:
                    8d:06:7c:6d:e6:ef:f3:80:44:6f:03:ac:b8:a6:3e:
                    ff:a3:19:71:80:2b:31:c1:85:82:76:87:c9:79:9e:
                    41:20:0c:03:20:64:a5:be:97:bd:0c:38:42:cb:2e:
                    55:83:be:1f:64:92:e9:ac:3e:05:79:d7:c3:20:b4:
                    eb:9e:3d:b1:db:9b:f2:ff:7c:9e:02:43:f0:7d:71:
                    f5:89:c9:5d:72:30:58:0c:70:8b:47:b9:b1:d4:ca:
                    b3:37:24:e4:d0:9a:d6:74:86:86:59:ce:eb:e8:27:
                    3d:76:31:c6:b4:ee:ae:4a:3b:9f:21:cf:7a:7a:bb:
                    06:68:1b:62:7a:48:54:15:ad:49:a3:c6:d9:a6:6e:
                    e0:d4:d1:18:5f:62:6c:49:0f:76:0b:6f:69:4e:40:
                    61:ed:86:93:54:7a:ab:e3:61:29:e9:a8:52:17:1c:
                    9f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:68:81:EC:45:3A:7F:3D:CD:BC:46:02:2C:43:93:34:06:B3:03:12
            X509v3 Authority Key Identifier:
                keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a646561643a3a2f34382d3438203d3e20313939363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:dead::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:8c:a6:d6:ae:6e:62:d6:2b:e1:a4:a7:48:0f:82:60:75:f6:
         c3:8f:d1:2e:ec:b6:ec:eb:ed:1d:74:29:16:1c:20:5e:b7:0d:
         99:b5:fd:03:55:ac:3b:71:7b:86:27:fe:53:23:81:1e:62:a9:
         13:b2:f8:ab:58:92:d4:15:12:40:e9:45:f7:ce:f4:3a:4a:3d:
         e0:06:fc:81:90:c4:60:bb:9a:f1:af:f4:b9:88:b4:bb:ff:e3:
         f6:a6:ae:fd:a7:95:ad:7c:6c:2a:50:99:e6:de:5b:67:31:05:
         49:8d:f2:08:6a:21:21:43:4a:11:13:2c:1a:ce:ed:b9:d1:08:
         2a:8e:74:67:31:0f:89:1c:34:16:b9:3c:47:a5:69:f0:4a:43:
         5f:f7:5e:46:9c:35:8d:75:74:2c:a9:04:3e:12:d6:d7:76:34:
         d1:63:d0:60:e4:4f:80:6d:3b:ae:7d:bf:eb:23:21:24:ae:1c:
         71:6f:fd:bc:ed:c2:fc:e4:2c:8b:7d:e6:8f:f8:36:17:7f:50:
         ff:c4:27:99:2d:ee:43:fb:88:03:67:a4:be:f5:04:4d:69:f6:
         9b:ef:1f:dd:cd:af:20:d5:4c:13:3f:c6:3d:90:bf:fb:a8:05:
         5c:13:9d:7f:69:97:a2:2e:58:9a:e0:2d:6f:5a:5c:41:a6:9b:
         d6:d2:6d:95
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUTmeY2Qe8/ZCcZFvAt5ApDAC9ntkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0
RjI5QzNGQjAeFw0yNjA2MDUxNjMwMDVaFw0yNzA2MDQxNjM1MDVaMDMxMTAvBgNV
BAMTKEJDNjg4MUVDNDUzQTdGM0RDREJDNDYwMjJDNDM5MzM0MDZCMzAzMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs8Ux0uHVH4HpXJU6jtBrQ9c9H
HonoisPm8W3kZeUfhucs34FHk9Mvi6TtgAsBJP1AaGRf+/2CYNyV/AZa1ffSQ533
/0NIqTXRcgfMaNFvH1P4+J4n8pfGN40GfG3m7/OARG8DrLimPv+jGXGAKzHBhYJ2
h8l5nkEgDAMgZKW+l70MOELLLlWDvh9kkumsPgV518MgtOuePbHbm/L/fJ4CQ/B9
cfWJyV1yMFgMcItHubHUyrM3JOTQmtZ0hoZZzuvoJz12Mca07q5KO58hz3p6uwZo
G2J6SFQVrUmjxtmmbuDU0RhfYmxJD3YLb2lOQGHthpNUeqvjYSnpqFIXHJ+VAgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQUvGiB7EU6fz3NvEYCLEOTNAazAxIwHwYDVR0j
BBgwFoAUSAfBGL00iTS1zFmz6KeowU8pw/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm
NDA5LzQvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5QzNGQi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5
QzNGQi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt
MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzQvMzI2MTMwMzYzYTMxMzIzODMz
M2E2NDY1NjE2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkzOTM2MzgzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoGEoPerTANBgkqhkiG9w0BAQsFAAOCAQEAGYym1q5uYtYr4aSn
SA+CYHX2w4/RLuy27OvtHXQpFhwgXrcNmbX9A1WsO3F7hif+UyOBHmKpE7L4q1iS
1BUSQOlF9870Oko94Ab8gZDEYLua8a/0uYi0u//j9qau/aeVrXxsKlCZ5t5bZzEF
SY3yCGohIUNKERMsGs7tudEIKo50ZzEPiRw0Frk8R6Vp8EpDX/deRpw1jXV0LKkE
PhLW13Y00WPQYORPgG07rn2/6yMhJK4ccW/9vO3C/OQsi33mj/g2F39Q/8QnmS3u
Q/uIA2ekvvUETWn2m+8f3c2vINVMEz/GPZC/+6gFXBOdf2mXoi5YmuAtb1pcQaab
1tJtlQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:32:16 2026 by rpki-client