Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613437343a3a2f34382d3438203d3e20313339333137.roa
File:                     323630323a663932613a613437343a3a2f34382d3438203d3e20313339333137.roa (raw, json)
Hash identifier:          E4T48Xa0z2oRpppt0kd+9gM6ocnhmZSsvwpBSiuPpCY=
Subject key identifier:   39:41:5C:22:A7:B3:36:42:FE:90:D9:65:A1:74:8A:59:C7:41:93:8B
Certificate issuer:       /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial:       469D6BED2962EB29D4BFE4654850FFA5BAE5BA06
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613437343a3a2f34382d3438203d3e20313339333137.roa
Signing time:             Fri 24 Oct 2025 17:07:34 +0000
ROA not before:           Fri 24 Oct 2025 17:02:34 +0000
ROA not after:            Fri 23 Oct 2026 17:07:34 +0000
asID:                     139317
IP address blocks:        2602:f92a:a474::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9d:6b:ed:29:62:eb:29:d4:bf:e4:65:48:50:ff:a5:ba:e5:ba:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
        Validity
            Not Before: Oct 24 17:02:34 2025 GMT
            Not After : Oct 23 17:07:34 2026 GMT
        Subject: CN=39415C22A7B33642FE90D965A1748A59C741938B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:72:f7:c5:4e:65:f2:e3:4d:a1:90:79:0a:75:
                    e5:1f:5d:86:5b:c2:1c:6c:b6:49:5f:fe:f2:c1:98:
                    cf:06:0f:d7:43:c1:c3:ff:be:e9:03:a9:f4:8a:f6:
                    05:11:90:37:81:63:04:dd:f1:cd:31:bf:f3:21:e2:
                    9d:2e:b4:8a:34:11:5f:7b:20:0e:8c:d3:3c:ca:49:
                    d4:de:42:6d:d0:92:31:29:61:5e:dc:22:54:d8:c8:
                    b5:aa:94:c1:a7:8e:cb:ce:3c:a9:86:01:83:10:0d:
                    32:d7:9f:59:45:64:72:ac:20:c4:e1:d6:3c:fb:87:
                    21:ca:86:16:91:de:de:da:c1:1c:83:3c:c4:d3:4d:
                    d7:81:e4:b5:aa:d6:c1:0d:28:7b:ae:16:b7:6d:6c:
                    4c:7d:13:5e:cd:77:37:3d:9c:df:94:0a:55:e1:a3:
                    fe:d9:a0:ad:96:c2:bf:e8:c0:ab:01:28:4e:d7:5b:
                    dd:91:d2:28:9f:f3:78:03:97:ed:08:59:46:6f:a8:
                    34:6c:ac:b3:49:33:a6:52:2d:a9:18:46:b2:75:53:
                    ee:d5:b4:9f:a5:b4:ba:f6:91:02:a8:06:f9:11:09:
                    41:3d:23:8c:18:c9:93:f0:58:51:b2:22:e5:ef:af:
                    9a:53:31:3c:4b:b3:a6:77:87:d7:a6:f8:54:ca:ef:
                    34:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:41:5C:22:A7:B3:36:42:FE:90:D9:65:A1:74:8A:59:C7:41:93:8B
            X509v3 Authority Key Identifier:
                keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613437343a3a2f34382d3438203d3e20313339333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a474::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:41:71:54:06:cd:44:7d:88:ba:95:fd:66:f6:60:d9:c6:b1:
         32:ed:09:5a:0a:60:00:31:0a:1e:1c:01:ad:92:6b:27:57:0a:
         4a:5b:81:f2:aa:be:db:b1:16:a3:58:3b:ba:91:fc:6b:c5:3b:
         2e:c4:7d:38:d1:cc:4f:1a:6c:64:79:4f:20:4a:18:d3:a7:30:
         b2:38:65:dd:f4:3b:83:0d:49:c9:aa:e6:0e:18:31:0d:71:c6:
         75:3f:bc:0a:8d:0e:ec:4c:36:7c:33:e7:46:f2:e7:e6:39:d0:
         cb:7f:ec:ab:01:99:c8:d4:da:75:01:b1:ce:79:18:97:e4:30:
         a4:16:42:4f:70:06:e9:c4:20:a1:d0:c2:66:31:63:e0:55:1b:
         96:80:83:fe:50:a7:bd:39:9a:c6:6c:b1:51:a5:3b:5b:2f:11:
         28:0e:a9:4a:3c:03:ef:3b:d5:92:c5:de:d0:0a:dc:1e:9f:5c:
         9e:d6:8b:f0:39:84:49:83:a8:ef:04:b2:dd:8b:d9:8d:f1:65:
         ce:2e:a7:0d:d9:d2:5c:d0:8c:95:16:43:53:c4:22:6a:06:4c:
         36:17:ca:2a:97:c8:5b:3e:21:ec:b1:c8:4e:97:cb:d5:ce:02:
         b8:9a:10:07:38:bb:36:ae:de:75:b7:71:b9:d6:71:1d:38:b8:
         1f:5f:b1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:43:22 2025 by rpki-client