Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a643030303a3a2f34302d3438203d3e20313339323939.roa
File:                     323630323a663932613a643030303a3a2f34302d3438203d3e20313339323939.roa (raw, json)
Hash identifier:          LyhvXLMvCzSxljEklDhIR7CEH4oj9WerwVkkCnG/SsQ=
Subject key identifier:   D1:DB:D6:E6:E8:E0:8D:27:D9:91:F4:C0:D0:A5:11:99:B4:B6:37:8E
Certificate issuer:       /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial:       7B0064004A545C85F1F6F1AD98974C87E2F86CB9
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a643030303a3a2f34302d3438203d3e20313339323939.roa
Signing time:             Fri 24 Oct 2025 17:07:19 +0000
ROA not before:           Fri 24 Oct 2025 17:02:19 +0000
ROA not after:            Fri 23 Oct 2026 17:07:19 +0000
asID:                     139299
IP address blocks:        2602:f92a:d000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:00:64:00:4a:54:5c:85:f1:f6:f1:ad:98:97:4c:87:e2:f8:6c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
        Validity
            Not Before: Oct 24 17:02:19 2025 GMT
            Not After : Oct 23 17:07:19 2026 GMT
        Subject: CN=D1DBD6E6E8E08D27D991F4C0D0A51199B4B6378E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d8:ae:38:c8:9f:3d:34:38:66:82:3b:02:3c:
                    dd:9e:94:13:5e:c3:bb:9a:3e:a9:e2:03:4a:14:6d:
                    4c:c2:f4:70:e8:ff:9a:de:8b:63:43:e6:f4:83:06:
                    ce:dd:1f:93:f0:70:93:e1:7d:d9:98:cc:ad:15:e8:
                    73:f0:c8:e3:7e:fa:f3:6a:5a:2f:89:4f:ba:17:74:
                    4f:a2:55:d6:f9:b5:56:27:ae:17:7c:28:b2:36:e1:
                    cd:48:d5:8a:fc:2f:bf:b8:57:b1:f5:f7:11:69:62:
                    1c:0c:5e:d4:ee:01:5a:b4:9c:df:6a:41:c3:64:92:
                    af:6d:b0:4e:9b:db:16:38:d8:b8:ea:3f:3d:d9:72:
                    7a:3e:21:97:36:69:6b:59:35:97:fb:0f:a1:2f:3c:
                    75:61:7f:eb:f7:db:ec:17:4a:0f:e1:f5:05:d0:45:
                    bd:d5:b4:1c:1d:32:0d:35:9b:cb:28:3b:ce:55:7a:
                    4f:8d:2f:10:37:f1:1a:a4:ea:05:e0:85:a3:23:bf:
                    f2:89:2b:1b:7f:f7:72:8b:11:e8:0b:84:09:d7:5e:
                    0b:fb:61:76:3f:cd:63:0a:a6:e2:9b:37:da:20:98:
                    69:c0:24:77:0c:8d:36:e3:28:e3:a7:6c:b5:0e:73:
                    bb:b8:e2:d0:6f:5c:0f:5b:d7:fa:b2:eb:5a:14:54:
                    58:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DB:D6:E6:E8:E0:8D:27:D9:91:F4:C0:D0:A5:11:99:B4:B6:37:8E
            X509v3 Authority Key Identifier:
                keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a643030303a3a2f34302d3438203d3e20313339323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:d000::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:ea:7f:36:29:dc:63:2b:b7:47:a8:a5:ba:fd:6c:de:5b:ac:
         05:18:fb:46:29:38:94:d9:8d:c4:fc:b3:c7:ff:35:17:cb:44:
         1d:14:d8:c2:03:de:2f:0e:b6:f7:79:16:c3:27:af:90:fb:51:
         e1:9e:8c:7a:49:02:2d:24:5e:cd:de:81:6a:3d:a2:6a:2e:c1:
         d5:88:60:38:0b:db:97:6f:82:1c:e9:a4:f8:d7:19:0f:3d:26:
         40:83:ab:6e:27:6c:7e:07:87:92:af:12:28:4e:0d:e4:a1:70:
         48:34:d4:d8:aa:a2:7a:63:c0:33:1a:37:e6:8e:0c:00:a9:84:
         03:37:94:5b:68:50:db:e9:57:50:98:9c:05:04:1f:98:4e:ec:
         a2:c3:64:dc:76:40:54:17:00:66:37:ff:b0:36:cd:07:c0:98:
         55:bb:17:15:1c:e4:8e:9f:da:59:ca:11:59:7c:bf:ca:cf:60:
         82:9a:56:3d:53:d2:d3:c3:b9:ae:4b:64:40:eb:de:08:aa:fa:
         8e:c9:d2:b5:cd:e8:ec:88:8b:86:ec:a8:bc:05:3f:6c:fa:96:
         d3:16:a8:a0:0e:ef:09:d9:85:65:85:eb:95:64:ec:25:11:66:
         29:23:43:ee:59:ed:be:bf:63:a3:84:39:6f:a3:c1:b9:3c:c2:
         0e:bf:d2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:43:23 2025 by rpki-client