Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a666631303a3a2f34342d3438203d3e20323034303835.roa
File:                     326130363a613030323a666631303a3a2f34342d3438203d3e20323034303835.roa (raw, json)
Hash identifier:          kZHoaU7lwxYhm4X+ikDPygqNY13KpFbZKfWyepSjLVQ=
Subject key identifier:   E7:80:2C:A8:20:53:E4:38:26:C8:49:CD:6B:80:A5:34:93:E5:7B:F1
Certificate issuer:       /CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
Certificate serial:       360E04E109E24B4240413BB4BA56184715FBB4EB
Authority key identifier: 1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a666631303a3a2f34342d3438203d3e20323034303835.roa
Signing time:             Tue 28 Jul 2026 06:32:49 +0000
ROA not before:           Tue 28 Jul 2026 06:27:49 +0000
ROA not after:            Tue 27 Jul 2027 06:32:49 +0000
asID:                     204085
IP address blocks:        2a06:a002:ff10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0e:04:e1:09:e2:4b:42:40:41:3b:b4:ba:56:18:47:15:fb:b4:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
        Validity
            Not Before: Jul 28 06:27:49 2026 GMT
            Not After : Jul 27 06:32:49 2027 GMT
        Subject: CN=E7802CA82053E43826C849CD6B80A53493E57BF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:e2:30:aa:5c:9a:18:f4:f2:31:0a:9c:b5:
                    b6:a7:af:0c:cc:cf:c3:6b:e7:21:15:f9:fd:86:dd:
                    b2:48:26:b8:a0:6b:b4:4a:9e:36:de:30:10:7b:45:
                    2c:f5:cb:09:79:ad:ab:b5:87:45:92:fe:71:eb:fe:
                    0b:5e:f2:d1:a5:ad:1e:e4:d9:ba:40:55:bb:08:e2:
                    21:ef:df:80:cb:66:65:f7:8b:f3:61:68:31:97:97:
                    c8:bb:19:90:19:5a:bb:b4:b8:32:9d:20:d3:68:55:
                    6d:9c:bd:ec:5a:5d:d5:5a:be:5e:42:70:1a:9a:d1:
                    dd:b9:55:bd:6f:59:5d:5e:2b:d5:61:30:75:2f:72:
                    5b:ce:cc:16:95:66:d6:20:ef:95:95:05:e3:f3:d4:
                    55:b8:b6:02:41:34:c3:19:ea:f2:a1:18:e9:8b:9c:
                    e8:08:a0:e5:97:25:76:ab:3a:07:59:32:63:73:0e:
                    ce:4f:73:c0:c5:ba:7b:32:90:1a:13:6a:c4:7b:e5:
                    70:c6:76:ff:e3:92:1f:c8:04:f0:59:17:41:72:88:
                    fc:fe:e7:09:aa:82:5e:e4:d8:2a:48:75:b9:cd:48:
                    d3:2d:47:3c:ab:26:30:70:4c:7a:f2:e0:c2:56:07:
                    08:91:7f:94:5b:c1:dd:bf:12:0c:d5:83:e6:11:58:
                    fa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:80:2C:A8:20:53:E4:38:26:C8:49:CD:6B:80:A5:34:93:E5:7B:F1
            X509v3 Authority Key Identifier:
                keyid:1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a666631303a3a2f34342d3438203d3e20323034303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a002:ff10::/44

    Signature Algorithm: sha256WithRSAEncryption
         4f:be:ae:f5:5a:de:27:a5:1d:3b:41:68:01:2a:8c:a3:22:f3:
         f8:47:16:a9:6d:5e:8b:18:15:5a:d1:e7:7e:4a:22:95:7e:d3:
         a1:6f:60:58:f3:f1:3c:b0:17:7d:bd:24:d1:60:cd:d6:68:8c:
         3e:1b:66:34:5f:d8:51:60:65:ae:02:da:3b:21:77:64:cb:50:
         4a:aa:2f:4c:95:35:6f:14:36:5a:d7:98:3a:6c:bb:da:05:c1:
         45:3b:ff:b7:ad:8e:55:fb:7d:d5:41:48:1e:a9:d9:d3:1f:f1:
         c8:05:0e:ac:82:6e:77:de:6e:d7:e1:30:81:3b:07:d2:15:2b:
         90:9d:94:21:94:57:f6:7f:9c:46:e5:0c:1b:09:6e:c0:98:b7:
         f3:5a:92:4e:18:4a:98:69:26:30:67:61:ad:8d:84:fe:23:cb:
         27:c9:56:f0:fd:ef:5c:4a:ba:c9:26:de:f1:33:ab:a8:4b:94:
         f6:a9:a0:97:26:87:8e:bd:e5:6a:5f:26:41:63:78:73:b2:53:
         46:96:69:47:cd:e0:b7:37:b9:0b:97:98:2e:83:34:b2:7e:73:
         a1:c9:fd:cd:89:c2:65:db:2f:61:d6:e9:d8:5a:5a:7d:cb:93:
         4b:0b:97:1b:be:52:8f:dc:98:8f:a2:82:17:e2:d8:73:1c:38:
         d2:d1:6a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:08:35 2026 by rpki-client