Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436393a3a2f34382d3438203d3e203331383938.roa
File:                     323630323a663932613a613436393a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier:          OV+J7peOuymct3LneGHLZNpG3HJVYIr/LIrYZ2P0Flk=
Subject key identifier:   12:F9:A1:04:58:7D:6B:B6:4B:18:D4:B0:02:DE:1A:5B:1F:69:A0:C1
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       2FCFE8D3AF747F85B2A55827876089A2A3EF3C1A
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436393a3a2f34382d3438203d3e203331383938.roa
Signing time:             Fri 24 Jul 2026 08:10:15 +0000
ROA not before:           Fri 24 Jul 2026 08:05:15 +0000
ROA not after:            Fri 23 Jul 2027 08:10:15 +0000
asID:                     31898
IP address blocks:        2602:f92a:a469::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 06:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:cf:e8:d3:af:74:7f:85:b2:a5:58:27:87:60:89:a2:a3:ef:3c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Jul 24 08:05:15 2026 GMT
            Not After : Jul 23 08:10:15 2027 GMT
        Subject: CN=12F9A104587D6BB64B18D4B002DE1A5B1F69A0C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:c6:e8:d7:c5:e9:fe:27:65:c6:63:f2:17:
                    ec:c8:0b:39:c7:b4:1e:9f:90:fa:e4:e8:a6:09:b7:
                    49:04:79:16:0b:88:84:ac:81:67:f8:5d:ae:fa:94:
                    dd:4a:d9:fe:97:4c:ae:9c:b6:07:a2:45:dd:54:2d:
                    ae:3c:42:8e:d2:1f:81:53:a5:49:6f:af:66:4f:12:
                    e8:dc:33:4a:d5:bb:c6:44:e5:b3:a4:89:ff:0f:8b:
                    1c:13:cc:1a:e3:6f:e4:a2:d6:3a:53:01:fe:b6:1a:
                    fc:45:50:d5:f1:e4:3a:ae:0b:23:ea:ed:c0:79:44:
                    88:97:35:bf:be:4a:d0:bf:52:44:a4:95:a5:df:19:
                    1f:2a:b7:19:d7:fc:63:35:ff:2f:48:5a:ee:7c:a7:
                    9b:cc:a0:5b:77:da:96:1e:f2:00:67:e1:86:d5:93:
                    af:13:3a:1c:02:06:65:82:77:98:3b:6a:90:43:85:
                    45:a0:74:8f:1e:2c:78:0c:c2:32:89:27:c8:48:21:
                    70:47:00:96:ed:32:69:53:6a:4a:a7:9e:7f:00:95:
                    8e:2d:6f:89:a7:c2:28:1f:53:df:0a:ad:07:f2:96:
                    25:15:7b:e2:c9:ad:40:65:39:84:ab:69:90:c9:af:
                    61:59:36:a9:e7:a5:2c:34:ff:82:82:bd:d4:be:56:
                    13:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F9:A1:04:58:7D:6B:B6:4B:18:D4:B0:02:DE:1A:5B:1F:69:A0:C1
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436393a3a2f34382d3438203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a469::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:5e:af:b5:6c:05:27:7b:30:78:c9:4f:03:ea:0e:cd:12:12:
         71:4a:c1:4a:9f:1e:2b:f0:45:4e:7e:ac:d2:e2:f6:e3:62:d6:
         7e:87:0e:4b:07:e7:fe:e8:a0:15:48:a0:6f:b6:39:c9:8a:d1:
         f8:b0:2b:06:19:ae:41:c2:7b:02:02:8d:fb:13:f1:fa:7c:bb:
         61:27:56:a1:38:e8:8d:7a:40:11:74:fe:2d:e8:b8:69:e0:ac:
         3e:4d:61:3b:90:24:58:91:c6:ef:19:84:26:97:2a:f8:d6:b2:
         46:03:4a:24:c2:b8:d6:8e:be:30:ee:8f:b7:86:83:15:c0:d2:
         62:ef:a7:5b:2d:0a:08:30:99:bf:09:88:36:7e:b1:64:cd:64:
         b6:93:12:10:51:09:09:f9:7a:84:69:fc:b4:2c:1a:4a:f8:b8:
         e0:2e:1c:f6:fd:a8:8b:f3:25:a1:52:eb:bd:e8:9d:29:7d:b2:
         0f:41:a8:42:62:d6:69:7a:41:fe:0c:f5:78:9b:96:fe:61:18:
         fa:7a:12:2f:40:d5:5a:84:90:f8:fb:e2:25:f2:05:1f:68:b3:
         69:49:a7:16:75:a7:50:3f:22:c8:42:41:b5:e7:42:4e:1c:64:
         b6:4a:55:48:b9:fb:74:af:f9:96:e6:18:a9:8d:96:fb:71:c4:
         4d:4c:45:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:11:28 2026 by rpki-client