Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613435303a3a2f34342d3438203d3e20323037363138.roa
File:                     323630323a663932613a613435303a3a2f34342d3438203d3e20323037363138.roa (raw, json)
Hash identifier:          JLb25ZxSGp5EpQKaxM3hHQNAFbR478I5lY6aepa0XPQ=
Subject key identifier:   C6:03:2B:70:92:0B:DB:37:89:21:73:D3:D7:01:66:D4:3A:3E:BC:92
Certificate issuer:       /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial:       05A44615FD42D9592596CC3BA6FDA809B6B28DDA
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613435303a3a2f34342d3438203d3e20323037363138.roa
Signing time:             Tue 17 Feb 2026 11:13:42 +0000
ROA not before:           Tue 17 Feb 2026 11:08:42 +0000
ROA not after:            Tue 16 Feb 2027 11:13:42 +0000
asID:                     207618
IP address blocks:        2602:f92a:a450::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a4:46:15:fd:42:d9:59:25:96:cc:3b:a6:fd:a8:09:b6:b2:8d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
        Validity
            Not Before: Feb 17 11:08:42 2026 GMT
            Not After : Feb 16 11:13:42 2027 GMT
        Subject: CN=C6032B70920BDB37892173D3D70166D43A3EBC92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ed:d0:d2:4e:38:82:df:89:eb:98:96:61:e5:
                    b6:5b:a3:60:15:20:45:57:af:2a:8b:40:86:69:d7:
                    05:02:fd:73:37:35:b9:c4:ec:4b:d0:ba:11:bb:cf:
                    44:e9:92:d8:fe:1c:86:9e:64:e9:87:b8:e7:b4:88:
                    74:82:fb:fe:6e:1f:d6:c6:23:c4:0d:e3:64:2e:ec:
                    1e:b1:87:af:c7:55:2a:b8:5f:24:5b:bf:1d:ba:60:
                    37:0c:fd:64:0b:65:03:11:e2:60:92:2c:2c:3d:5e:
                    24:f9:d4:a5:80:92:c3:62:2c:bd:2e:de:c4:c2:1b:
                    66:e1:13:b2:a4:e8:7c:7c:26:40:62:ad:28:87:b0:
                    ec:c0:4a:82:45:8b:ba:94:db:56:98:14:2d:87:cb:
                    0d:44:85:9c:8b:21:99:7b:16:02:a2:7d:ff:06:b6:
                    04:12:46:4c:81:af:39:d8:7f:1e:d1:7b:1b:67:bb:
                    0a:5d:92:e2:fd:ed:67:61:e3:2b:d5:e8:40:fa:95:
                    73:08:b1:e4:b9:16:d1:d6:c6:8c:d0:04:79:14:22:
                    2b:8a:87:8d:fd:54:49:3e:d4:de:3a:0a:f4:09:1f:
                    98:ca:fe:8a:90:22:9b:93:42:cd:61:f8:35:8e:5f:
                    95:38:61:a0:1f:25:ad:98:c3:ce:2c:00:bb:6d:17:
                    c2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:03:2B:70:92:0B:DB:37:89:21:73:D3:D7:01:66:D4:3A:3E:BC:92
            X509v3 Authority Key Identifier:
                keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613435303a3a2f34342d3438203d3e20323037363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a450::/44

    Signature Algorithm: sha256WithRSAEncryption
         10:d6:0b:10:e5:c8:d8:28:03:16:07:5f:a6:08:9c:5f:81:e3:
         31:b5:e5:9d:2c:4c:5e:e6:4e:b5:9b:04:4f:dd:73:9d:86:ed:
         cc:c4:38:13:9c:87:84:bc:b1:35:c6:c8:9b:7a:fa:f5:01:34:
         c2:14:9e:3a:a1:d3:71:64:f3:aa:64:fb:fb:34:59:39:3d:3a:
         25:6e:86:9b:b8:84:9c:72:84:cc:f8:1c:d1:7e:3f:32:f1:d3:
         91:a9:01:79:a5:6e:be:9c:bc:05:bb:30:19:80:b3:ae:80:7f:
         03:36:50:2d:5b:d1:bf:d1:61:d4:56:cf:0a:7d:eb:fa:58:2a:
         0b:fc:8b:73:07:25:61:3b:c2:b8:68:69:4c:f5:e9:61:df:58:
         1f:e2:9d:f9:ca:5a:2c:63:a2:20:b5:62:86:1b:07:d9:38:f0:
         8f:8c:e3:3d:ea:06:8c:e2:ac:8c:8f:69:88:35:03:c0:d6:48:
         cd:2f:7b:eb:b9:ce:20:96:3a:fc:1b:ac:75:ae:d0:e3:b5:8a:
         12:41:93:98:f7:a2:55:9a:8f:bc:b5:55:d1:93:49:c3:fa:ac:
         5c:03:c9:b8:58:bb:cd:d8:c1:57:48:0d:ac:1e:4c:bc:63:44:
         84:bd:32:23:3a:c3:19:2f:8b:5a:c0:16:6d:fd:6d:25:8f:8b:
         cc:fe:b0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:35 2026 by rpki-client