Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/326130623a346530373a6138343a3a2f34382d3438203d3e20323133343133.roa
File:                     326130623a346530373a6138343a3a2f34382d3438203d3e20323133343133.roa (raw, json)
Hash identifier:          vLPoSQgfosHE7Eo78gbVp2ZF9Mgg6KTTveqCQsG15Og=
Subject key identifier:   9C:63:F8:96:D6:AE:22:51:78:ED:5E:FD:AC:57:09:AC:92:B7:63:F7
Certificate issuer:       /CN=966427869FCAD15ECBE4F1C77A3FB3C68BD1F917
Certificate serial:       5E0F99E8A52AB0AF1F6826E448EA4863C543AA9D
Authority key identifier: 96:64:27:86:9F:CA:D1:5E:CB:E4:F1:C7:7A:3F:B3:C6:8B:D1:F9:17
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/326130623a346530373a6138343a3a2f34382d3438203d3e20323133343133.roa
Signing time:             Fri 01 Aug 2025 08:17:21 +0000
ROA not before:           Fri 01 Aug 2025 08:12:21 +0000
ROA not after:            Fri 31 Jul 2026 08:17:21 +0000
asID:                     213413
IP address blocks:        2a0b:4e07:a84::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0f:99:e8:a5:2a:b0:af:1f:68:26:e4:48:ea:48:63:c5:43:aa:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966427869FCAD15ECBE4F1C77A3FB3C68BD1F917
        Validity
            Not Before: Aug  1 08:12:21 2025 GMT
            Not After : Jul 31 08:17:21 2026 GMT
        Subject: CN=9C63F896D6AE225178ED5EFDAC5709AC92B763F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:80:83:6b:00:3d:b8:00:4d:50:f2:2e:1d:4f:
                    fa:ed:4e:c4:f2:40:70:8b:58:57:9f:dd:ff:34:86:
                    3b:ea:7f:66:89:22:75:ff:1f:dc:c6:ac:8e:85:2f:
                    dd:e4:9d:9d:d5:c2:be:78:a6:d2:0c:10:f9:77:b0:
                    05:a0:1b:82:32:9f:9e:1c:1e:c3:33:4e:e8:fe:58:
                    3e:93:00:6e:b2:88:38:fb:b1:39:00:da:31:5c:c6:
                    54:9a:09:57:b2:92:5b:f1:c6:2f:78:07:7e:d2:46:
                    0e:ea:ed:c3:2b:ef:a5:8f:9b:b1:5f:a6:b3:87:fe:
                    f7:2f:75:00:41:27:63:ab:f0:99:e1:f0:d7:ca:ad:
                    fd:da:44:88:b6:f1:61:6c:e2:5c:2c:b1:1f:d9:bf:
                    2c:25:5b:35:94:91:73:34:29:b9:54:6a:31:b1:2e:
                    73:56:8f:04:d4:9f:d5:54:0f:14:44:11:81:18:62:
                    0a:56:5c:be:4a:f4:35:8f:1d:84:25:ad:d0:7e:b8:
                    7a:3f:30:2e:6f:f2:a4:0b:76:4d:7d:aa:0b:8d:86:
                    56:c2:1a:c9:11:cf:7e:4b:6e:00:71:57:60:aa:ef:
                    31:e1:be:fb:6a:e0:0e:78:16:be:26:b3:27:02:77:
                    f4:b2:64:35:dc:50:a3:56:f7:05:45:16:a6:ac:2e:
                    e8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:63:F8:96:D6:AE:22:51:78:ED:5E:FD:AC:57:09:AC:92:B7:63:F7
            X509v3 Authority Key Identifier:
                keyid:96:64:27:86:9F:CA:D1:5E:CB:E4:F1:C7:7A:3F:B3:C6:8B:D1:F9:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/326130623a346530373a6138343a3a2f34382d3438203d3e20323133343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:a84::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:5f:93:d7:c0:99:91:20:0d:b9:f6:d7:a8:f3:b3:2d:42:e4:
         02:00:30:18:fe:a6:7c:7d:10:63:f6:34:81:54:d4:9b:7b:2f:
         c7:cb:08:44:b4:6c:2e:8e:0a:76:6e:ca:fe:4b:68:ae:15:e6:
         5e:50:21:3d:57:c1:d8:9a:4b:bd:9e:de:dd:4f:20:5c:99:7e:
         09:8d:b5:2f:f7:0d:e3:0c:e1:f1:ad:b1:1b:04:da:e3:f0:bb:
         92:38:42:17:b9:0f:d8:cb:66:36:cd:8c:f5:cf:18:45:57:d1:
         37:90:dc:dc:eb:02:75:c0:63:95:58:ff:ee:f0:a5:ae:97:aa:
         1d:5c:b1:3d:cc:f9:5e:20:ec:6e:0b:df:e2:6f:6a:41:9b:bf:
         44:ce:69:23:4d:2c:f5:4f:f1:85:5d:02:bd:f1:5f:8c:17:1e:
         ed:6a:30:d9:77:b5:14:93:af:6f:1f:37:09:cf:5a:cc:d6:39:
         fc:f2:32:cb:57:40:f9:3d:0d:7c:f4:53:39:3f:fc:c5:97:07:
         c7:59:70:51:0b:f1:65:44:13:bc:7c:90:f2:68:8e:47:7a:af:
         b6:81:14:c2:be:50:0a:e9:45:4a:53:4d:6f:dd:88:21:5d:5f:
         00:4e:6d:56:54:9c:05:72:e4:27:b9:fd:33:60:2d:15:bd:4b:
         75:8e:59:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:03:57 2025 by rpki-client