Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61303a3a2f34342d3438203d3e2030.roa
File:                     323630323a663939323a61303a3a2f34342d3438203d3e2030.roa (raw, json)
Hash identifier:          dIrRhUCsqIlQRkKASf3euKWdJjEjwQuOt/Ix4ZqqXVk=
Subject key identifier:   06:B8:53:AD:AC:E9:E3:8C:E8:33:D2:68:5C:02:4B:B2:9C:31:FD:CB
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       1233EDC658C0C477E528A5376F48B8BD090881EC
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61303a3a2f34342d3438203d3e2030.roa
Signing time:             Tue 26 May 2026 12:16:06 +0000
ROA not before:           Tue 26 May 2026 12:11:06 +0000
ROA not after:            Tue 25 May 2027 12:16:06 +0000
asID:                     0
IP address blocks:        2602:f992:a0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:33:ed:c6:58:c0:c4:77:e5:28:a5:37:6f:48:b8:bd:09:08:81:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: May 26 12:11:06 2026 GMT
            Not After : May 25 12:16:06 2027 GMT
        Subject: CN=06B853ADACE9E38CE833D2685C024BB29C31FDCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:95:1a:1c:a2:da:b5:26:3e:8e:fd:d5:3e:
                    cb:84:8e:fb:f3:1b:33:bd:4b:a1:8e:76:6e:9f:b9:
                    e4:cd:78:d8:fa:1c:83:43:51:1b:08:3a:b7:ab:d3:
                    ad:99:ef:0a:87:b1:d5:91:e2:2b:71:3f:3d:e7:d8:
                    0b:db:72:a4:de:bb:82:fe:df:56:05:0e:a7:36:e2:
                    e9:36:f6:95:72:82:e7:ea:71:de:c6:45:46:c2:6b:
                    29:2f:b1:7c:2d:bb:36:0a:6d:12:c2:4c:09:d6:50:
                    2d:99:95:46:0e:5c:30:43:58:22:5f:d0:07:50:40:
                    bb:43:d1:38:7c:5b:f5:a5:b0:5a:b3:10:de:1d:f0:
                    d9:21:69:c5:e5:d7:c3:c7:16:49:0b:8a:ee:b1:e6:
                    13:2e:a5:50:30:78:79:13:9d:07:d6:8c:f1:83:cb:
                    6d:dc:06:3a:6c:d2:8d:e6:4c:c0:f3:cd:5b:50:4b:
                    e5:8a:39:76:cf:32:47:e1:9a:7f:5f:dd:8f:c9:77:
                    df:b1:3e:85:35:9d:ae:38:d1:34:57:c1:56:5d:07:
                    3f:e2:9a:f4:dc:f4:3f:dd:04:30:a4:4e:80:e0:1e:
                    d9:6f:36:52:c0:2c:03:ac:49:a1:5d:6f:10:0d:67:
                    32:82:31:6c:5a:14:73:df:da:dd:58:fd:93:61:8e:
                    b2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B8:53:AD:AC:E9:E3:8C:E8:33:D2:68:5C:02:4B:B2:9C:31:FD:CB
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61303a3a2f34342d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f992:a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         65:a9:7f:d3:86:8e:5d:e5:66:fc:a7:59:89:79:e8:ed:19:0e:
         ba:1b:59:27:f3:8c:99:89:85:83:b0:5f:ca:8f:4f:b0:d5:3b:
         f5:72:3b:94:e4:cb:59:46:26:5b:32:b4:ed:bd:41:2e:e4:9a:
         c0:da:5f:a9:d7:57:c3:6a:59:03:9a:89:2a:c7:a3:d5:c7:1e:
         20:0c:3f:cf:36:6e:67:5f:71:ef:54:28:55:51:75:6e:98:1b:
         8f:9f:e7:67:e4:20:d3:c3:2f:36:29:91:32:85:cb:55:ec:dc:
         92:d6:57:45:c9:72:75:9b:bb:10:f3:a3:c2:d6:db:db:17:9a:
         ad:85:95:1e:3c:fb:ad:d3:9f:b3:3d:64:6d:6c:fd:11:c1:4d:
         49:8c:48:79:ad:cb:4b:23:4d:e8:a4:cd:33:d8:f1:91:4a:14:
         99:ce:a0:3d:ad:d0:fa:41:5a:16:b9:8b:16:5c:e3:2e:2a:b3:
         92:33:7d:6b:77:d8:b6:f2:e9:63:e4:05:88:4e:8b:c2:b4:10:
         5e:6a:b2:de:05:f5:60:99:1a:4f:7e:55:09:6c:77:c1:2c:db:
         5a:98:0c:1a:89:bb:22:a0:d3:23:c7:6a:68:c2:80:54:ac:63:
         26:fa:e4:b2:1d:86:6f:80:1d:27:d1:57:da:72:f2:dd:20:3e:
         72:c5:47:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:01:54 2026 by rpki-client