Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa
File:                     323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          LYgZcAysAqTVRfiLPXt05OGj2/jQNQyJSA64BahR3p0=
Subject key identifier:   99:65:54:00:A7:CE:F0:0F:E5:95:F1:AA:44:90:2A:77:16:19:0A:3C
Certificate issuer:       /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Certificate serial:       2A680B33236B6847A7C468407D21D12A7531F9D7
Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Sat 28 Feb 2026 08:16:11 +0000
ROA not before:           Sat 28 Feb 2026 08:11:11 +0000
ROA not after:            Sat 27 Feb 2027 08:16:11 +0000
asID:                     199518
IP address blocks:        2602:f9a2:55::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:68:0b:33:23:6b:68:47:a7:c4:68:40:7d:21:d1:2a:75:31:f9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
        Validity
            Not Before: Feb 28 08:11:11 2026 GMT
            Not After : Feb 27 08:16:11 2027 GMT
        Subject: CN=99655400A7CEF00FE595F1AA44902A7716190A3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d4:4e:c4:e9:ab:de:0c:3d:eb:7d:cd:b0:e0:
                    5a:11:e0:2a:07:c1:c6:ae:75:1f:89:2b:d6:0c:cb:
                    04:d1:58:ff:c7:da:42:7c:35:7b:47:da:76:07:7e:
                    7c:b9:2d:50:06:41:05:5c:65:43:f2:00:c6:be:c9:
                    f6:fa:e2:ab:af:5d:34:bb:eb:ae:36:f0:5b:4a:85:
                    bf:40:43:b0:b9:d0:ee:10:a6:0c:09:15:77:93:7f:
                    05:e0:50:8e:57:a7:c8:5c:27:ff:7f:73:78:59:ad:
                    79:cd:a4:d8:af:30:66:6f:43:0d:06:22:a6:2e:a7:
                    4e:fa:eb:d3:50:33:7a:ae:02:e9:b6:60:c0:d7:9c:
                    60:e8:53:ed:16:e3:ed:78:33:5b:da:36:88:28:cd:
                    95:2b:68:73:96:5b:c7:84:55:d1:03:56:86:52:67:
                    67:0b:c9:3c:2d:4d:aa:34:71:84:2c:81:a5:22:f7:
                    48:e1:63:36:73:1a:02:c2:63:54:8a:be:88:9f:9e:
                    81:85:08:3b:0d:f0:37:b6:28:c2:1a:3f:fc:67:8f:
                    0c:99:09:06:db:78:e6:f2:2d:74:79:7a:5a:7d:4f:
                    66:d2:11:d5:02:49:52:6f:5b:5b:be:0d:1c:7b:96:
                    3d:23:23:8f:82:b2:fb:c8:b0:6d:de:cc:bc:b7:3c:
                    a8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:65:54:00:A7:CE:F0:0F:E5:95:F1:AA:44:90:2A:77:16:19:0A:3C
            X509v3 Authority Key Identifier:
                keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a2:55::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:08:2a:4b:4c:fa:34:e7:00:18:41:a5:55:09:cb:0f:24:20:
         7b:ef:cf:a9:b5:bc:2b:5a:6b:84:54:fa:10:9b:e5:75:c2:6f:
         8a:71:bc:30:cf:c7:89:5c:67:27:5b:41:ee:b7:4b:cc:ff:d3:
         03:ab:54:26:50:c4:20:84:0a:3c:05:55:d7:d4:86:af:b0:5a:
         4c:b2:f9:08:fe:23:f1:57:c8:8f:a3:fd:fd:d9:44:20:b2:10:
         59:f0:50:8c:ee:a5:e1:a7:2b:72:9d:c8:1d:91:59:cf:35:c1:
         9a:16:50:31:a2:11:0f:d3:11:b1:dc:1b:72:0d:3b:b9:41:b8:
         1b:f6:1e:b1:bc:7b:71:2e:b2:c1:46:e4:00:82:5f:66:c7:ba:
         af:d4:b0:49:36:be:d7:30:5c:57:c1:d6:40:f0:4f:b8:42:2c:
         30:66:24:3f:c6:4f:c4:97:39:3e:70:df:be:93:7a:32:b4:e1:
         f5:4a:ae:18:8c:0c:98:44:01:49:0e:ef:a0:f8:3c:55:d4:bb:
         1c:37:2e:c1:c1:12:45:3e:f2:12:12:d5:b2:8a:80:a8:76:48:
         be:10:41:f6:05:d3:7e:71:74:3f:75:58:aa:ab:70:40:fc:f9:
         37:b1:68:53:eb:69:95:88:89:c0:f4:c2:75:89:3c:5a:27:4f:
         5b:d1:a6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:06:50 2026 by rpki-client