Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/326130363a613030323a666631313a3a2f34382d3438203d3e20323138373839.roa
File:                     326130363a613030323a666631313a3a2f34382d3438203d3e20323138373839.roa (raw, json)
Hash identifier:          YU6hYmLGunAuLNoT2NkLO6XcvryiKELepJNQzECBZLY=
Subject key identifier:   42:E3:F4:0A:5B:A6:02:1A:B6:68:AB:E1:C0:0D:E1:B5:FE:68:48:73
Certificate issuer:       /CN=08B09F355659D14A7514422FF8C0A470E09A616D
Certificate serial:       4CE36BC9DB6C602946BE663E601FC9AC60F0C75A
Authority key identifier: 08:B0:9F:35:56:59:D1:4A:75:14:42:2F:F8:C0:A4:70:E0:9A:61:6D
Authority info access:    rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/08B09F355659D14A7514422FF8C0A470E09A616D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/326130363a613030323a666631313a3a2f34382d3438203d3e20323138373839.roa
Signing time:             Wed 02 Sep 2026 02:30:25 +0000
ROA not before:           Wed 02 Sep 2026 02:25:25 +0000
ROA not after:            Wed 01 Sep 2027 02:30:25 +0000
asID:                     218789
IP address blocks:        2a06:a002:ff11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.mft
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/08B09F355659D14A7514422FF8C0A470E09A616D.cer
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e3:6b:c9:db:6c:60:29:46:be:66:3e:60:1f:c9:ac:60:f0:c7:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08B09F355659D14A7514422FF8C0A470E09A616D
        Validity
            Not Before: Sep  2 02:25:25 2026 GMT
            Not After : Sep  1 02:30:25 2027 GMT
        Subject: CN=42E3F40A5BA6021AB668ABE1C00DE1B5FE684873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:26:79:5d:95:5c:be:f2:c6:95:40:4e:cf:dd:
                    19:4a:33:2c:d6:08:15:a1:ae:4f:d0:a8:23:d9:92:
                    c2:fe:7d:71:53:53:50:ed:e4:e7:d7:37:05:36:0a:
                    e8:a7:ac:f6:bc:fb:57:66:95:53:14:56:a8:e8:7f:
                    de:19:62:80:7d:1e:30:54:05:7d:31:03:5e:ab:8e:
                    26:bc:3b:cd:90:57:02:ef:8c:06:0d:0c:cd:cb:9a:
                    db:7b:e6:71:d0:72:e3:77:9d:16:90:3b:bc:a8:a7:
                    fc:cb:a2:91:56:d5:88:43:64:ce:7f:2f:c9:cf:48:
                    e2:dd:33:4d:49:1a:39:29:d1:87:71:5e:f4:1d:f6:
                    7e:54:68:8f:33:f4:bf:0a:a5:00:48:46:01:bc:71:
                    ab:49:7f:be:9e:4f:13:52:9d:76:90:4f:79:e9:9e:
                    ec:15:7e:a4:48:d2:de:b5:d6:a6:35:b0:e8:6b:1b:
                    ff:88:ba:33:1c:27:21:ac:ec:75:5d:d4:55:6c:87:
                    0f:37:d8:13:b7:f7:d7:ed:ce:42:df:cf:50:78:8a:
                    59:44:77:20:fb:37:35:db:54:f8:36:e5:2b:44:45:
                    83:d1:5f:d6:d1:5a:22:4e:e1:1c:4e:31:19:08:f2:
                    95:e5:57:a4:55:35:38:71:31:e8:33:b4:fb:27:75:
                    ed:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E3:F4:0A:5B:A6:02:1A:B6:68:AB:E1:C0:0D:E1:B5:FE:68:48:73
            X509v3 Authority Key Identifier:
                keyid:08:B0:9F:35:56:59:D1:4A:75:14:42:2F:F8:C0:A4:70:E0:9A:61:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/08B09F355659D14A7514422FF8C0A470E09A616D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/326130363a613030323a666631313a3a2f34382d3438203d3e20323138373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a002:ff11::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:4e:02:a1:8b:a8:b6:4b:3f:58:c3:e2:c1:1b:ac:35:d9:88:
         7d:19:28:76:92:70:07:2b:dc:2e:c4:03:4d:86:bc:c2:f5:a7:
         29:c3:9d:09:49:e7:3b:0c:ec:2d:81:18:7e:98:f9:af:1e:ee:
         ea:d2:30:39:b1:c1:48:99:58:f1:33:8b:7b:71:b4:1b:f9:5d:
         9a:d4:1c:2b:c3:50:d4:61:95:36:13:fe:2d:6b:08:38:5d:a6:
         56:28:c8:ad:ba:00:61:f1:58:0d:01:9c:93:d3:89:75:a6:2a:
         6b:c1:a7:a1:63:4c:bc:c6:b8:9e:50:98:fc:23:bd:e6:1c:24:
         ce:04:e7:c9:6f:23:4d:db:81:15:35:1a:9d:16:fa:80:23:44:
         a7:95:2e:8a:68:5f:68:9b:94:a8:7e:e4:44:f3:8b:36:8a:9f:
         9b:54:94:33:00:8d:8e:f3:55:38:07:3f:04:a2:63:32:c7:dc:
         e4:f3:57:f2:ac:a0:01:ab:98:2d:e8:e2:b7:d1:08:35:29:3c:
         57:c2:6a:cf:4f:4a:fb:91:26:3d:90:2d:e7:b1:2d:d4:bf:05:
         4b:5e:58:0b:20:8b:b3:f7:48:29:ca:13:c0:cc:5c:28:ba:b3:
         a2:f4:49:5d:22:9e:70:c3:72:2d:2b:1f:b6:93:2d:49:6f:99:
         16:83:5b:69
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUTONrydtsYClGvmY+YB/JrGDwx1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhCMDlGMzU1NjU5RDE0QTc1MTQ0MjJGRjhDMEE0NzBF
MDlBNjE2RDAeFw0yNjA5MDIwMjI1MjVaFw0yNzA5MDEwMjMwMjVaMDMxMTAvBgNV
BAMTKDQyRTNGNDBBNUJBNjAyMUFCNjY4QUJFMUMwMERFMUI1RkU2ODQ4NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJnldlVy+8saVQE7P3RlKMyzW
CBWhrk/QqCPZksL+fXFTU1Dt5OfXNwU2CuinrPa8+1dmlVMUVqjof94ZYoB9HjBU
BX0xA16rjia8O82QVwLvjAYNDM3Lmtt75nHQcuN3nRaQO7yop/zLopFW1YhDZM5/
L8nPSOLdM01JGjkp0YdxXvQd9n5UaI8z9L8KpQBIRgG8catJf76eTxNSnXaQT3np
nuwVfqRI0t611qY1sOhrG/+IujMcJyGs7HVd1FVshw832BO399ftzkLfz1B4illE
dyD7NzXbVPg25StERYPRX9bRWiJO4RxOMRkI8pXlV6RVNThxMegztPsnde3FAgMB
AAGjggJpMIICZTAdBgNVHQ4EFgQUQuP0ClumAhq2aKvhwA3htf5oSHMwHwYDVR0j
BBgwFoAUCLCfNVZZ0Up1FEIv+MCkcOCaYW0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTY2ZGNlNTQtMjBiOS00N2U4LWJjYzMtZDMwN2M3MGZk
ZWE5LzEvMDhCMDlGMzU1NjU5RDE0QTc1MTQ0MjJGRjhDMEE0NzBFMDlBNjE2RC5j
cmwwgYIGCCsGAQUFBwEBBHYwdDByBggrBgEFBQcwAoZmcnN5bmM6Ly9rcmlsbC5k
aXNwYWlzeS5zeXN0ZW1zL3JlcG8vZGlzcGFpc3llbnRlcnByaXNlcy8zLzA4QjA5
RjM1NTY1OUQxNEE3NTE0NDIyRkY4QzBBNDcwRTA5QTYxNkQuY2VyMIG3BggrBgEF
BQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E2NmRjZTU0LTIwYjktNDdlOC1iY2MzLWQz
MDdjNzBmZGVhOS8xLzMyNjEzMDM2M2E2MTMwMzAzMjNhNjY2NjMxMzEzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjMxMzgzNzM4Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBqAC/xEw
DQYJKoZIhvcNAQELBQADggEBADtOAqGLqLZLP1jD4sEbrDXZiH0ZKHaScAcr3C7E
A02GvML1pynDnQlJ5zsM7C2BGH6Y+a8e7urSMDmxwUiZWPEzi3txtBv5XZrUHCvD
UNRhlTYT/i1rCDhdplYoyK26AGHxWA0BnJPTiXWmKmvBp6FjTLzGuJ5QmPwjveYc
JM4E58lvI03bgRU1Gp0W+oAjRKeVLopoX2iblKh+5ETzizaKn5tUlDMAjY7zVTgH
PwSiYzLH3OTzV/KsoAGrmC3o4rfRCDUpPFfCas9PSvuRJj2QLeexLdS/BUteWAsg
i7P3SCnKE8DMXCi6s6L0SV0innDDci0rH7aTLUlvmRaDW2k=
-----END CERTIFICATE-----
Generated at Mon Sep 28 06:56:48 2026 by rpki-client