Route Origin Authorization

$ rpki-client -vvvf rsync.proxy-arp.network/repo/bgp43-u7/3/AS202260.roa
File:                     AS202260.roa (raw, json)
Hash identifier:          RMOBqE0eVnznHgJjIUe1HQ0l0o80LY0FuODwxNBl66o=
Subject key identifier:   94:DB:EC:42:5B:7C:D3:62:92:EB:6D:0D:3B:99:D3:11:F4:50:A8:B5
Certificate issuer:       /CN=57C4BC98201FEEFD6892394642DD684EE5729821
Certificate serial:       1E6F610F7B99522DA2E230781695148B9DD9943A
Authority key identifier: 57:C4:BC:98:20:1F:EE:FD:68:92:39:46:42:DD:68:4E:E5:72:98:21
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/57C4BC98201FEEFD6892394642DD684EE5729821.cer
Subject info access:      rsync://rsync.proxy-arp.network/repo/bgp43-u7/3/AS202260.roa
Signing time:             Sun 08 Nov 2026 18:09:30 +0000
ROA not before:           Sun 08 Nov 2026 18:04:30 +0000
ROA not after:            Sun 07 Nov 2027 18:09:30 +0000
asID:                     202260
IP address blocks:        2a0b:4e07:b31::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.proxy-arp.network/repo/bgp43-u7/3/57C4BC98201FEEFD6892394642DD684EE5729821.crl
                          rsync://rsync.proxy-arp.network/repo/bgp43-u7/3/57C4BC98201FEEFD6892394642DD684EE5729821.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/57C4BC98201FEEFD6892394642DD684EE5729821.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 22:24:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6f:61:0f:7b:99:52:2d:a2:e2:30:78:16:95:14:8b:9d:d9:94:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57C4BC98201FEEFD6892394642DD684EE5729821
        Validity
            Not Before: Nov  8 18:04:30 2026 GMT
            Not After : Nov  7 18:09:30 2027 GMT
        Subject: CN=94DBEC425B7CD36292EB6D0D3B99D311F450A8B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:24:47:0f:42:0c:40:24:2a:a0:c9:a7:dc:d2:
                    6a:5e:31:db:eb:c9:2e:e8:1c:21:c3:92:2c:f5:1d:
                    d5:f8:bd:48:1b:c2:18:ce:bb:b1:85:f7:1b:d7:57:
                    13:31:11:79:91:54:7a:42:f0:43:30:7a:e5:04:fb:
                    67:2d:03:47:ae:8b:ee:a0:2a:14:7b:16:1e:ec:ef:
                    5e:ef:8a:6d:44:df:46:67:01:56:b1:3a:f7:20:a0:
                    c8:a6:09:6b:2a:54:e5:da:3b:48:09:9e:6e:6a:a1:
                    93:6c:7a:ca:41:64:31:9b:94:36:23:d6:23:b6:6a:
                    0b:ae:e7:9e:e1:e7:8a:97:ef:29:ae:c0:e8:7d:6b:
                    61:15:de:f2:1d:66:2b:9b:46:70:0a:0a:47:88:b1:
                    6c:cc:83:16:4d:6d:92:e6:2c:eb:ee:fa:f7:d6:07:
                    37:22:ab:23:4b:f7:ca:36:3c:ec:a2:4e:e0:d6:e1:
                    31:49:2b:ba:88:50:3f:84:08:a6:4d:2e:96:61:db:
                    b7:d6:2c:3a:ee:09:8d:7f:aa:29:44:b3:8a:74:16:
                    dd:b4:23:5c:45:e5:ae:37:9e:7a:0f:e4:62:ad:90:
                    1e:87:d5:28:05:b0:f1:9c:08:c4:be:fb:3c:7d:1e:
                    f3:23:14:8c:59:86:bf:2a:e6:74:08:20:64:1b:fe:
                    9e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DB:EC:42:5B:7C:D3:62:92:EB:6D:0D:3B:99:D3:11:F4:50:A8:B5
            X509v3 Authority Key Identifier:
                keyid:57:C4:BC:98:20:1F:EE:FD:68:92:39:46:42:DD:68:4E:E5:72:98:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.proxy-arp.network/repo/bgp43-u7/3/57C4BC98201FEEFD6892394642DD684EE5729821.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/57C4BC98201FEEFD6892394642DD684EE5729821.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.proxy-arp.network/repo/bgp43-u7/3/AS202260.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:b31::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:2f:b2:d1:bc:3e:58:ef:36:80:3a:ec:1b:23:99:d9:0e:b7:
         8b:35:23:80:91:ee:ce:52:62:c0:77:9a:93:0c:b1:35:4a:fe:
         13:14:d2:c4:af:28:cf:da:c9:b5:54:2c:10:c9:2f:05:78:00:
         40:b3:d4:d2:bf:44:f8:59:47:a4:f9:f9:58:38:23:f8:ed:4a:
         2c:1d:72:d0:9d:a4:d4:da:2c:55:97:e9:bc:7b:e9:dc:e5:4e:
         96:8c:c1:e4:18:63:90:48:8d:3f:2f:09:67:f3:04:64:b8:29:
         f9:2f:2b:99:f4:ca:8f:09:72:ef:45:05:5a:8c:b3:14:66:a1:
         5b:24:f6:70:06:87:64:67:30:3f:5d:07:b0:1a:f1:ad:40:9a:
         27:ed:ae:56:22:e7:3b:8f:25:a9:a1:2d:04:d3:49:c7:65:59:
         6d:54:45:b4:33:2b:50:af:7a:96:c1:35:74:13:f8:f8:37:a7:
         7f:6b:8a:28:4f:80:41:ff:c8:56:7f:6c:28:04:2c:0c:6a:36:
         63:4b:58:2b:ef:e1:97:02:ab:d3:27:fb:41:8a:cc:8b:79:78:
         21:5f:f2:b2:50:2c:db:fc:23:7d:b7:c0:76:b3:c4:0f:cc:7c:
         ca:53:43:f9:07:d1:7b:e1:be:f2:29:77:37:42:7b:ec:11:ed:
         c1:a7:6d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:57:44 2026 by rpki-client