Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/323630323a663730343a6330303a3a2f33382d313238203d3e20323130343634.roa
File:                     323630323a663730343a6330303a3a2f33382d313238203d3e20323130343634.roa (raw, json)
Hash identifier:          SwYmKY7VAfP3jCpaL+7DOdOQSf38T4XFjf21rHXyXZw=
Subject key identifier:   7F:FA:DC:BC:B3:1B:9A:5C:C2:7B:89:89:96:A0:DA:20:12:81:DA:AF
Certificate issuer:       /CN=22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca
Certificate serial:       5D225CC0FF05A5B57BC21DBAB3E1E52B92F1DB29
Authority key identifier: C5:4C:55:4D:4B:0B:04:61:D9:A0:1E:2A:06:E5:5F:C0:EC:4E:D8:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/323630323a663730343a6330303a3a2f33382d313238203d3e20323130343634.roa
Signing time:             Wed 15 Apr 2026 16:37:15 +0000
ROA not before:           Wed 15 Apr 2026 16:32:15 +0000
ROA not after:            Wed 14 Apr 2027 16:37:15 +0000
asID:                     210464
IP address blocks:        2602:f704:c00::/38 maxlen: 128
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 16:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:22:5c:c0:ff:05:a5:b5:7b:c2:1d:ba:b3:e1:e5:2b:92:f1:db:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca
        Validity
            Not Before: Apr 15 16:32:15 2026 GMT
            Not After : Apr 14 16:37:15 2027 GMT
        Subject: CN=7FFADCBCB31B9A5CC27B898996A0DA201281DAAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:d9:d9:ac:30:d7:b0:50:72:40:ff:33:79:
                    5e:19:cf:1a:3c:a2:94:92:b5:78:55:da:01:df:8f:
                    d2:59:45:02:2f:2e:28:24:5a:7c:e8:2a:4d:78:e1:
                    cc:65:35:21:cf:2f:b5:c7:20:e1:9f:db:9a:f2:fb:
                    86:04:c0:02:80:c4:7a:33:73:62:f7:53:f8:b4:ac:
                    18:ff:ff:90:08:96:e5:2d:a8:69:ed:e2:99:7b:89:
                    62:b9:58:0b:1a:5b:52:06:f8:a6:66:60:2f:08:9a:
                    c4:07:7d:a6:18:83:01:89:67:f0:6f:6c:01:8c:10:
                    ba:9b:a7:95:2f:8c:c2:a0:72:60:67:9a:32:52:5a:
                    b8:90:6c:86:64:3c:ec:0e:90:1f:b8:99:04:8f:a3:
                    b4:28:05:b2:9d:50:a5:4f:d6:95:63:0a:a8:9c:86:
                    a8:f7:51:d9:4f:aa:f8:fb:15:45:c3:b8:29:fa:aa:
                    fb:a8:48:c2:c9:0c:64:59:c4:ca:54:97:ae:fb:34:
                    1c:fb:79:4a:98:cc:03:13:7e:36:1e:cb:d0:aa:d4:
                    ac:80:64:70:23:82:8d:4a:1f:cb:92:70:75:68:18:
                    d3:23:43:9f:e3:6e:20:99:39:22:5b:fe:1c:1b:e1:
                    63:0c:7a:54:4d:bc:6a:44:82:84:52:3a:3d:fa:56:
                    51:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FA:DC:BC:B3:1B:9A:5C:C2:7B:89:89:96:A0:DA:20:12:81:DA:AF
            X509v3 Authority Key Identifier:
                keyid:C5:4C:55:4D:4B:0B:04:61:D9:A0:1E:2A:06:E5:5F:C0:EC:4E:D8:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/323630323a663730343a6330303a3a2f33382d313238203d3e20323130343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f704:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         52:f5:29:98:a4:ee:0a:00:fd:18:13:20:cc:62:97:e0:a3:60:
         7b:4e:3c:8a:37:c8:78:d9:b2:f6:25:97:09:6c:e7:f1:c0:8b:
         21:e5:90:e2:9c:23:5a:e8:17:f2:ac:00:c5:e1:10:22:fe:0d:
         72:59:20:47:1b:c1:85:41:43:12:ba:8c:a0:2f:dd:0a:fd:87:
         85:e2:0c:a9:5f:7e:01:d8:4f:d5:fe:2e:8d:03:02:c1:3e:dd:
         47:fe:dc:df:2f:cd:10:d5:3f:1f:72:a4:37:9b:25:4c:5b:02:
         01:89:8d:cd:8d:43:74:41:14:9d:c9:0d:7f:f1:17:99:07:49:
         0d:1a:98:13:59:4f:c8:db:2e:17:ca:3a:f6:24:20:b3:43:74:
         6c:78:de:cc:4a:63:b5:d5:9a:ac:f5:fc:f6:ef:9d:2c:35:1a:
         0f:35:f9:b3:cb:0e:6f:24:77:d4:ed:c5:e7:42:80:80:5b:29:
         dd:f8:e6:28:f4:fc:30:88:9c:70:f9:8c:3b:65:02:53:ec:e4:
         28:6f:14:3a:d9:5e:4a:22:98:49:15:4c:29:86:76:d4:e1:0d:
         fe:40:b3:fd:a8:9d:ce:e7:12:b0:fd:9c:df:36:d3:d6:4f:3b:
         bb:42:09:76:80:7b:b7:6e:90:41:43:e0:68:82:2a:7e:db:86:
         90:a8:5e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:30 2026 by rpki-client