Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/323630323a666162383a3a2f33362d3336203d3e203630393030.roa
File:                     323630323a666162383a3a2f33362d3336203d3e203630393030.roa (raw, json)
Hash identifier:          Jq683A8ZTSfiLEEYfENeUwP5bRhGsVOwvR5J+n1Uwes=
Subject key identifier:   5A:1D:94:AD:22:91:EE:E4:89:B0:41:3E:80:EB:B2:95:78:5F:42:E9
Certificate issuer:       /CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071
Certificate serial:       2C3183B0AA7AF128EBED61DA3B849F1084EA982E
Authority key identifier: 93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/323630323a666162383a3a2f33362d3336203d3e203630393030.roa
Signing time:             Fri 05 Jun 2026 22:39:08 +0000
ROA not before:           Fri 05 Jun 2026 22:34:08 +0000
ROA not after:            Fri 04 Jun 2027 22:39:08 +0000
asID:                     60900
IP address blocks:        2602:fab8::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:31:83:b0:aa:7a:f1:28:eb:ed:61:da:3b:84:9f:10:84:ea:98:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071
        Validity
            Not Before: Jun  5 22:34:08 2026 GMT
            Not After : Jun  4 22:39:08 2027 GMT
        Subject: CN=5A1D94AD2291EEE489B0413E80EBB295785F42E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:af:38:39:18:33:d4:8a:ae:24:4d:e5:d1:c8:
                    87:10:04:26:03:65:3c:8f:79:3f:2c:8d:cd:ba:27:
                    c7:16:22:da:bf:aa:4b:67:1b:a7:b5:75:dd:e7:a1:
                    7a:21:17:55:04:d0:bf:59:ec:de:25:44:d7:85:e3:
                    d1:4d:0a:9b:2e:d1:5d:5f:b9:57:7a:22:0e:f8:14:
                    75:a6:b8:95:23:80:41:48:ef:20:80:17:f0:59:e5:
                    01:ee:ce:a5:f8:32:0a:11:61:40:46:fe:a3:de:93:
                    59:81:58:65:2c:66:7a:29:9d:0c:60:94:b2:46:e6:
                    37:8a:11:e9:cb:5e:37:f6:dd:8d:ae:39:ca:41:c4:
                    20:12:48:ec:2d:18:cb:3a:58:31:38:9d:f8:21:7d:
                    29:1e:bf:f2:34:7f:9d:32:87:cf:b8:a0:0c:64:9f:
                    1a:c4:c4:6d:81:f8:9e:33:a7:7e:06:34:e3:ac:2d:
                    ee:89:49:fa:30:bd:1c:85:a6:b2:4b:3f:c9:3d:9d:
                    12:1f:6a:65:1d:21:0c:43:3c:1e:bd:5b:d3:1c:2f:
                    c1:ef:2a:bd:71:05:4f:28:b3:d7:b7:f6:26:33:47:
                    3f:a7:ab:a5:c9:76:05:e7:0b:d8:d5:e6:a9:e3:f7:
                    d7:17:57:91:ee:2e:37:d5:b2:d9:b6:2f:1d:62:6c:
                    0d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1D:94:AD:22:91:EE:E4:89:B0:41:3E:80:EB:B2:95:78:5F:42:E9
            X509v3 Authority Key Identifier:
                keyid:93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/323630323a666162383a3a2f33362d3336203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fab8::/36

    Signature Algorithm: sha256WithRSAEncryption
         25:6f:e8:03:19:fa:01:4d:74:8a:5e:4d:fa:ab:57:ef:66:0a:
         76:71:d1:50:31:83:8e:4a:7c:a6:47:56:df:4a:6e:3a:aa:f8:
         1f:d6:bc:75:fa:0b:52:e9:5c:31:f6:a3:e7:35:f3:cc:7a:77:
         1b:5f:89:10:c0:80:99:fc:2a:ce:91:10:86:ae:59:d2:a4:71:
         5d:31:dc:b2:f9:50:b3:2f:59:51:e5:b8:38:fe:31:da:21:62:
         94:a1:60:c4:b3:98:37:85:4f:96:be:6b:d3:dc:ab:33:73:4b:
         1a:58:9b:51:ad:be:0a:61:b5:04:4d:a0:28:84:b0:4c:71:c1:
         47:f8:91:c5:12:d0:7d:84:e3:4c:7a:0b:38:a0:55:08:d1:ca:
         99:52:f5:b2:04:03:86:c0:a5:0d:d2:49:e3:d5:cb:ff:c3:2b:
         df:3a:54:13:d9:51:a7:e4:05:04:ec:3e:01:70:e3:f6:5c:4d:
         4d:de:18:46:1d:0a:22:79:35:c4:55:45:b2:a9:c6:f4:cc:bc:
         c5:de:78:40:48:dc:04:f7:b1:cb:57:97:7c:a4:4a:04:15:33:
         7f:39:6b:2a:60:27:0f:94:61:7c:4a:62:51:94:4c:ae:bd:de:
         f7:54:e6:ca:f1:64:30:38:db:c6:5b:65:64:bb:7d:c6:8c:08:
         c8:4a:9c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:04:39 2026 by rpki-client