Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436393a3a2f34382d3438203d3e203434333234.roa
File:                     323630323a663932613a613436393a3a2f34382d3438203d3e203434333234.roa (raw, json)
Hash identifier:          /WRZ7MOyeA7IqwvPNRw9HH/YyJWcODeKxUsX7rRJNzE=
Subject key identifier:   99:AD:08:E9:E1:FB:6D:D8:DF:CA:34:67:F0:5F:DF:37:F9:AC:22:ED
Certificate issuer:       /CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
Certificate serial:       44A05E0F04F792D540933CE6FCA508141CFFA249
Authority key identifier: 55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436393a3a2f34382d3438203d3e203434333234.roa
Signing time:             Fri 24 Jul 2026 08:10:37 +0000
ROA not before:           Fri 24 Jul 2026 08:05:37 +0000
ROA not after:            Fri 23 Jul 2027 08:10:37 +0000
asID:                     44324
IP address blocks:        2602:f92a:a469::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 06:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a0:5e:0f:04:f7:92:d5:40:93:3c:e6:fc:a5:08:14:1c:ff:a2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8
        Validity
            Not Before: Jul 24 08:05:37 2026 GMT
            Not After : Jul 23 08:10:37 2027 GMT
        Subject: CN=99AD08E9E1FB6DD8DFCA3467F05FDF37F9AC22ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f7:2e:72:f1:ec:bb:d8:93:fe:3a:db:e2:50:
                    ae:3d:c0:29:49:a5:57:c5:a5:4b:1d:28:48:45:24:
                    6d:41:a2:53:4a:27:9f:fe:3a:ee:d3:8f:7e:1c:6a:
                    4c:3b:0c:eb:b2:50:88:ac:f2:0f:71:9c:c4:25:43:
                    26:e0:39:96:62:69:4d:28:30:0d:d5:89:1a:13:8f:
                    fd:46:18:f2:69:90:da:d6:19:b4:75:ed:37:3a:a9:
                    f1:6a:50:56:64:7b:58:2a:e9:f3:6c:75:94:55:83:
                    e6:23:6e:9e:28:a0:3d:52:82:47:c0:f7:e7:08:b5:
                    9c:35:5e:9d:4c:09:45:a8:e5:57:69:7b:a8:a9:e8:
                    3f:03:47:e9:54:b8:a6:7f:ea:7f:5c:dc:5c:58:e9:
                    8d:49:73:e1:64:6f:57:39:f0:8e:09:05:dd:51:b2:
                    5f:6a:a5:42:92:93:89:04:9f:92:80:b9:67:be:36:
                    68:d1:fa:eb:68:c5:55:a9:f9:63:ab:f9:8f:a9:83:
                    90:78:7c:2a:73:37:1c:54:75:f9:6a:2f:c0:d4:c5:
                    7d:01:b9:c0:1f:fa:c6:80:dd:42:8c:06:cb:19:23:
                    67:d3:9b:66:26:b1:3b:ab:c6:c4:f5:b7:32:ce:d3:
                    a5:86:f7:de:7d:5b:5f:ef:bf:f8:97:64:f8:44:04:
                    be:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AD:08:E9:E1:FB:6D:D8:DF:CA:34:67:F0:5F:DF:37:F9:AC:22:ED
            X509v3 Authority Key Identifier:
                keyid:55:E1:C8:0B:28:E8:29:D7:D5:93:BA:EA:0D:4B:2D:08:67:A6:76:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/55E1C80B28E829D7D593BAEA0D4B2D0867A676E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd63ee0463350c4034a088c798eeb5d8a59a26450c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436393a3a2f34382d3438203d3e203434333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a469::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:df:34:8c:cb:0c:af:97:a3:e9:f0:ac:32:1c:03:71:80:a4:
         af:0a:85:18:3e:8e:b4:73:e5:02:cd:18:a5:2f:fa:b9:51:f9:
         a8:53:90:c3:d6:11:36:fa:83:43:08:59:ae:22:e6:a9:e3:a7:
         75:7f:a4:c9:a9:1b:5e:7d:3d:76:55:0a:87:ff:b0:12:c2:2f:
         cf:c7:b2:14:c4:c3:a2:cc:ac:4e:c6:84:ac:ad:8e:9e:bb:c2:
         11:a9:95:25:a3:c1:10:e4:c7:ac:48:cf:6a:6d:61:9b:72:4c:
         35:3b:3f:cb:27:4b:c4:ea:fa:f4:8f:b3:c5:15:d9:18:e4:cc:
         70:b9:0f:ca:49:94:71:36:5b:a3:67:c1:e2:80:64:7b:8b:e3:
         73:19:2e:9d:f3:81:e6:56:1e:4d:cc:a1:2d:28:8d:28:8d:dd:
         97:d2:27:2d:c2:f9:ba:c5:6c:03:f6:32:4a:c2:16:e4:65:00:
         59:a7:4c:b6:70:43:6d:41:29:eb:67:70:8b:05:f2:44:62:0d:
         ce:db:d2:10:05:df:38:00:65:27:15:92:1b:7f:5b:bd:3c:44:
         5f:d1:0d:4e:d9:ab:66:54:cb:5e:1a:da:d9:e7:30:ce:cc:31:
         e9:b5:ac:5f:a6:f5:36:25:7c:0f:cf:29:73:86:85:bc:e9:ad:
         11:61:7e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:53:43 2026 by rpki-client