Route Origin Authorization

$ rpki-client -vvf rsync.prefixlogic.com/repo/prefixlogic/0/323630323a663833643a66663a3a2f34382d3438203d3e2034323030353030363533.roa
File:                     323630323a663833643a66663a3a2f34382d3438203d3e2034323030353030363533.roa (raw, json)
Hash identifier:          FTnHuhkU6zkTzdKWvymLuqaygpfPuLws85SpA85MbOM=
Subject key identifier:   EC:F0:0D:0F:3E:9B:FD:37:C0:70:61:6E:65:F6:2B:A3:0C:08:15:E1
Certificate issuer:       /CN=ADAAE86C6188FA967BD17012C29A186590025DFA
Certificate serial:       50E11A0335E3BE611E43BF66536A051A8F4ED4C3
Authority key identifier: AD:AA:E8:6C:61:88:FA:96:7B:D1:70:12:C2:9A:18:65:90:02:5D:FA
Authority info access:    rsync://rpki-pp.com/repo/GOOFL/0/ADAAE86C6188FA967BD17012C29A186590025DFA.cer
Subject info access:      rsync://rsync.prefixlogic.com/repo/prefixlogic/0/323630323a663833643a66663a3a2f34382d3438203d3e2034323030353030363533.roa
Signing time:             Wed 27 May 2026 00:54:48 +0000
ROA not before:           Wed 27 May 2026 00:49:48 +0000
ROA not after:            Wed 26 May 2027 00:54:48 +0000
asID:                     4200500653
IP address blocks:        2602:f83d:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.prefixlogic.com/repo/prefixlogic/0/ADAAE86C6188FA967BD17012C29A186590025DFA.crl
                          rsync://rsync.prefixlogic.com/repo/prefixlogic/0/ADAAE86C6188FA967BD17012C29A186590025DFA.mft
                          rsync://rpki-pp.com/repo/GOOFL/0/ADAAE86C6188FA967BD17012C29A186590025DFA.cer
                          rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
                          rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/7c9b1947-b813-43b3-9152-c4ccbff1cde7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/7c9b1947-b813-43b3-9152-c4ccbff1cde7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e1:1a:03:35:e3:be:61:1e:43:bf:66:53:6a:05:1a:8f:4e:d4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAAE86C6188FA967BD17012C29A186590025DFA
        Validity
            Not Before: May 27 00:49:48 2026 GMT
            Not After : May 26 00:54:48 2027 GMT
        Subject: CN=ECF00D0F3E9BFD37C070616E65F62BA30C0815E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:35:5c:b8:86:69:59:5d:cb:35:9e:11:2d:
                    e9:14:55:c7:02:4e:9b:c1:17:51:95:f4:eb:29:d4:
                    cb:3c:84:7d:52:c3:42:af:2d:97:12:a6:fd:75:e5:
                    9d:cb:0b:b8:a8:9d:51:ab:30:fc:79:ab:65:08:a8:
                    76:f6:ed:cc:b7:c4:f2:65:b7:7f:50:bd:90:19:84:
                    71:33:e9:db:c9:78:93:d9:ea:75:eb:12:e0:1d:53:
                    1a:21:cc:f3:87:14:1a:bd:39:32:32:3c:cf:ad:17:
                    db:8a:3a:11:f9:a2:8d:2a:a0:a8:ce:c0:66:a2:ad:
                    23:f4:fa:66:9e:99:07:79:cb:57:0d:23:3a:dd:17:
                    01:8a:c9:b9:0d:43:19:de:ee:48:dc:1e:e1:9c:6a:
                    de:d7:c3:a7:d2:26:05:50:d9:8a:d1:28:8e:8d:a4:
                    b6:cc:f1:09:fb:15:bf:bb:26:ff:c0:36:80:0c:87:
                    f9:a5:70:2e:88:f9:6b:8c:0c:f4:21:cf:d1:b2:9a:
                    ae:b5:4c:f2:99:9f:71:22:03:3b:0d:f0:19:49:b2:
                    b1:d8:6a:f3:4d:5c:62:cf:bd:ed:21:df:f3:22:72:
                    b7:bd:5c:71:88:7c:97:0e:4d:52:ea:50:42:11:1f:
                    dc:1f:cf:45:5f:83:63:2d:7b:5d:ee:c0:ee:c0:98:
                    37:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F0:0D:0F:3E:9B:FD:37:C0:70:61:6E:65:F6:2B:A3:0C:08:15:E1
            X509v3 Authority Key Identifier:
                keyid:AD:AA:E8:6C:61:88:FA:96:7B:D1:70:12:C2:9A:18:65:90:02:5D:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.prefixlogic.com/repo/prefixlogic/0/ADAAE86C6188FA967BD17012C29A186590025DFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-pp.com/repo/GOOFL/0/ADAAE86C6188FA967BD17012C29A186590025DFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.prefixlogic.com/repo/prefixlogic/0/323630323a663833643a66663a3a2f34382d3438203d3e2034323030353030363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83d:ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         d3:4a:e7:31:c4:05:c9:45:71:e5:f7:8c:8a:a7:d5:3f:1f:64:
         91:7d:b7:73:53:22:57:a8:f0:f4:a0:e4:c5:29:5a:46:4a:71:
         36:4a:d4:30:86:1d:14:21:02:3c:64:08:0a:98:90:5e:df:d1:
         04:2f:81:90:f8:0a:64:85:2c:62:28:61:1c:12:c0:42:d8:f4:
         05:24:76:ad:67:f1:67:9a:8d:62:50:48:7a:36:b6:63:9a:04:
         40:fd:ff:83:71:12:d5:4d:fd:4e:fe:89:67:f3:76:15:21:a3:
         02:42:1b:0a:ae:88:e7:86:2c:12:53:c2:b3:c7:74:e8:61:37:
         83:1e:20:d8:74:d2:a5:76:d0:2f:d5:b4:18:57:c0:74:a2:1b:
         ae:27:a5:67:66:77:8a:a3:cb:88:7e:6a:e0:ae:ac:fe:99:c1:
         9c:1e:17:97:fa:2d:7f:d1:15:73:55:09:2a:bb:4b:6b:2c:b8:
         41:28:ec:14:af:97:5f:5b:8d:cc:da:18:0a:c9:8e:67:2a:ae:
         63:fa:ba:29:c0:64:47:40:cc:46:91:0a:bb:5b:9d:68:e1:e9:
         48:14:b9:76:3b:6d:d8:4e:55:05:5a:02:43:a8:9e:ac:19:f2:
         3a:35:b5:9b:0a:06:58:8b:5f:5a:0b:54:86:5d:68:ec:7d:29:
         37:7f:d8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:39 2026 by rpki-client