Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/326130623a346530373a363130303a3a2f34302d3430203d3e20323130363332.roa
File:                     326130623a346530373a363130303a3a2f34302d3430203d3e20323130363332.roa (raw, json)
Hash identifier:          UaVUawxyo7vEGzTJHFQ6hbv9VSPWBwLtWGhp7ONFPXo=
Subject key identifier:   9F:CB:DC:88:E5:0B:7E:B2:49:29:C6:B6:01:B6:02:D1:86:64:DC:3C
Certificate issuer:       /CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484
Certificate serial:       2283452328C8D32934653D20561478DE93A51C39
Authority key identifier: 79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/326130623a346530373a363130303a3a2f34302d3430203d3e20323130363332.roa
Signing time:             Mon 23 Feb 2026 09:16:02 +0000
ROA not before:           Mon 23 Feb 2026 09:11:02 +0000
ROA not after:            Mon 22 Feb 2027 09:16:02 +0000
asID:                     210632
IP address blocks:        2a0b:4e07:6100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 05:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:83:45:23:28:c8:d3:29:34:65:3d:20:56:14:78:de:93:a5:1c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484
        Validity
            Not Before: Feb 23 09:11:02 2026 GMT
            Not After : Feb 22 09:16:02 2027 GMT
        Subject: CN=9FCBDC88E50B7EB24929C6B601B602D18664DC3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:93:84:64:d8:51:38:c2:50:05:6d:bd:d5:b7:
                    20:19:55:8a:ef:3e:44:ef:ce:cd:ba:f7:7e:4f:6c:
                    46:21:73:48:ca:6f:00:c9:8e:5c:90:ae:b1:42:38:
                    fa:53:26:13:b6:91:75:0c:93:6c:24:fc:27:50:c7:
                    c3:79:90:ee:b2:47:b2:bb:01:54:81:33:2b:9a:35:
                    d2:64:ab:09:75:d6:5b:08:4d:ab:ee:cb:87:8a:a7:
                    9a:9b:cf:23:60:12:de:a2:f4:c0:ae:14:6b:ad:e0:
                    cb:74:9a:2a:e0:cd:5c:9a:e1:1a:c0:3e:b0:1c:83:
                    10:04:ac:b3:5c:c6:1e:5d:a7:7f:4d:af:28:e9:d7:
                    ee:f5:96:78:61:7f:33:85:16:06:c9:fa:eb:32:91:
                    f4:0b:74:9d:6d:dd:29:be:ef:d5:af:f8:cf:36:f7:
                    1e:3a:85:f5:8e:08:2f:df:04:dc:5f:aa:11:a1:6f:
                    72:b9:15:cc:26:dc:61:0d:02:59:38:8f:55:66:df:
                    1f:05:90:96:5d:b3:80:b1:ca:3e:5a:70:c7:f0:1c:
                    b7:43:dd:c4:92:24:0c:95:a8:60:b2:3c:1d:32:59:
                    30:33:5e:6a:cd:a3:37:ec:03:6e:b9:d5:f9:d1:33:
                    f0:c2:60:70:38:18:2f:97:52:93:d7:3d:c2:b4:e2:
                    e9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CB:DC:88:E5:0B:7E:B2:49:29:C6:B6:01:B6:02:D1:86:64:DC:3C
            X509v3 Authority Key Identifier:
                keyid:79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/326130623a346530373a363130303a3a2f34302d3430203d3e20323130363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:6100::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:e6:a8:3a:c2:ba:29:0d:41:ad:d4:2c:46:11:f1:aa:8f:f5:
         26:16:b1:dc:74:a9:9e:f6:8d:8a:ff:4d:13:85:4f:e6:8f:41:
         17:66:42:57:99:54:f4:ac:bc:59:29:b8:66:f7:b9:a4:38:cf:
         1f:7d:a1:9e:7e:1b:21:2f:a4:56:ac:16:e0:fb:47:94:b0:ca:
         6d:b9:a9:42:9d:a4:8b:c2:a4:e4:46:ae:13:76:eb:f3:af:db:
         3f:99:0b:f4:2c:27:08:2a:33:16:98:7e:1a:ef:7e:15:a4:d1:
         4f:31:98:fc:a5:4c:63:e8:24:0b:62:ad:f1:57:08:f4:27:1a:
         10:14:dd:3d:31:fe:73:8f:2e:16:36:17:26:58:6f:53:bb:fb:
         6b:c2:e6:81:1d:e1:52:58:61:73:cd:51:55:83:96:f1:4d:bf:
         00:aa:66:48:7e:7e:09:92:71:f5:ad:c8:35:a0:61:67:d2:4b:
         3b:29:a5:3c:7d:d5:64:8f:85:6a:e5:ee:52:56:0e:7f:7e:65:
         7a:47:ca:50:e6:61:df:bd:bc:d4:a7:79:45:43:88:ef:5d:c0:
         a0:96:c9:39:01:71:5e:ae:4d:cb:70:bc:0c:1c:10:48:ec:77:
         34:e8:be:d2:e9:21:e4:74:00:cc:4d:9c:55:04:87:3c:4e:65:
         54:60:34:6f
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUIoNFIyjI0yk0ZT0gVhR43pOlHDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4
OEUxODQ4NDAeFw0yNjAyMjMwOTExMDJaFw0yNzAyMjIwOTE2MDJaMDMxMTAvBgNV
BAMTKDlGQ0JEQzg4RTUwQjdFQjI0OTI5QzZCNjAxQjYwMkQxODY2NERDM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjk4Rk2FE4wlAFbb3VtyAZVYrv
PkTvzs26935PbEYhc0jKbwDJjlyQrrFCOPpTJhO2kXUMk2wk/CdQx8N5kO6yR7K7
AVSBMyuaNdJkqwl11lsITavuy4eKp5qbzyNgEt6i9MCuFGut4Mt0mirgzVya4RrA
PrAcgxAErLNcxh5dp39Nryjp1+71lnhhfzOFFgbJ+usykfQLdJ1t3Sm+79Wv+M82
9x46hfWOCC/fBNxfqhGhb3K5Fcwm3GENAlk4j1Vm3x8FkJZds4Cxyj5acMfwHLdD
3cSSJAyVqGCyPB0yWTAzXmrNozfsA2651fnRM/DCYHA4GC+XUpPXPcK04umDAgMB
AAGjggJ5MIICdTAdBgNVHQ4EFgQUn8vciOULfrJJKca2AbYC0YZk3DwwHwYDVR0j
BBgwFoAUeaoSutfixQJ4iQ8t+czgK4jhhIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGYxNjlhN2EtZTA0My00MzM3LWFlZWMtMjRkMmFiOTFm
MTM4LzEvNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4OEUxODQ4NC5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz
MDUzZjgyMGY1LzEvNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4OEUx
ODQ4NC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGYxNjlhN2Et
ZTA0My00MzM3LWFlZWMtMjRkMmFiOTFmMTM4LzEvMzI2MTMwNjIzYTM0NjUzMDM3
M2EzNjMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEzMDM2MzMzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoLTgdhMA0GCSqGSIb3DQEBCwUAA4IBAQA25qg6wropDUGt1CxG
EfGqj/UmFrHcdKme9o2K/00ThU/mj0EXZkJXmVT0rLxZKbhm97mkOM8ffaGefhsh
L6RWrBbg+0eUsMptualCnaSLwqTkRq4Tduvzr9s/mQv0LCcIKjMWmH4a734VpNFP
MZj8pUxj6CQLYq3xVwj0JxoQFN09Mf5zjy4WNhcmWG9Tu/trwuaBHeFSWGFzzVFV
g5bxTb8AqmZIfn4JknH1rcg1oGFn0ks7KaU8fdVkj4Vq5e5SVg5/fmV6R8pQ5mHf
vbzUp3lFQ4jvXcCglsk5AXFerk3LcLwMHBBI7Hc06L7S6SHkdADMTZxVBIc8TmVU
YDRv
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:20 2026 by rpki-client