Route Origin Authorization

$ rpki-client -vvf rpki-repository.haruue.net/repo/YC3254-RPKI/3/326130613a363034303a326430303a3a2f34382d3438203d3e20313436393530.roa
File:                     326130613a363034303a326430303a3a2f34382d3438203d3e20313436393530.roa (raw, json)
Hash identifier:          NPK52BwUUyHt+FUh3qIclZ8cVg4T7q82YEE/2AzB7gI=
Subject key identifier:   C7:E9:56:46:5E:E4:5C:77:5C:DC:3C:E9:81:70:80:27:CC:20:46:88
Certificate issuer:       /CN=18299A2A773E023437644491950ACF588A4379CF
Certificate serial:       771E61D4E4D74EFE55E6C211FE93BE80E5A75474
Authority key identifier: 18:29:9A:2A:77:3E:02:34:37:64:44:91:95:0A:CF:58:8A:43:79:CF
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/18299A2A773E023437644491950ACF588A4379CF.cer
Subject info access:      rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/326130613a363034303a326430303a3a2f34382d3438203d3e20313436393530.roa
Signing time:             Sat 05 Jul 2025 15:08:10 +0000
ROA not before:           Sat 05 Jul 2025 15:03:10 +0000
ROA not after:            Sat 04 Jul 2026 15:08:10 +0000
asID:                     146950
IP address blocks:        2a0a:6040:2d00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/18299A2A773E023437644491950ACF588A4379CF.crl
                          rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/18299A2A773E023437644491950ACF588A4379CF.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/18299A2A773E023437644491950ACF588A4379CF.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 22:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:1e:61:d4:e4:d7:4e:fe:55:e6:c2:11:fe:93:be:80:e5:a7:54:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18299A2A773E023437644491950ACF588A4379CF
        Validity
            Not Before: Jul  5 15:03:10 2025 GMT
            Not After : Jul  4 15:08:10 2026 GMT
        Subject: CN=C7E956465EE45C775CDC3CE981708027CC204688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:7a:04:cd:f8:92:e4:fb:3e:d8:bd:8e:0b:
                    31:49:30:90:69:b6:1d:a8:d0:f7:09:de:a1:9e:65:
                    ad:1e:bc:8f:f7:0b:db:31:0e:5b:d4:e5:58:e2:a3:
                    22:8e:a4:87:66:92:b7:47:3f:20:fe:87:38:1e:a5:
                    90:df:5b:45:43:6b:4e:3e:6d:15:a4:02:7e:6b:40:
                    02:50:91:3a:cd:5b:07:9d:5f:de:1e:a8:37:18:54:
                    21:dd:e3:14:cb:d9:49:24:f4:08:76:be:e5:eb:f1:
                    84:a8:32:35:45:13:a5:77:c7:38:e8:e4:ed:d0:73:
                    48:6a:6b:08:cb:05:60:17:52:7d:ae:0f:44:6a:b4:
                    7d:b0:6d:c7:ca:0a:99:61:a4:1f:a9:74:5c:d0:56:
                    ff:14:11:84:29:0d:3b:aa:d9:a6:2c:63:05:13:bd:
                    f0:81:b3:83:f3:0e:9e:73:e1:1f:6d:2c:33:51:c1:
                    2d:8d:93:04:8c:f7:5f:2e:16:4c:cb:d0:99:11:b7:
                    67:56:03:62:9c:28:bc:04:46:b1:4c:68:bf:ef:1c:
                    76:58:ba:01:d6:f9:74:6f:bf:92:48:31:05:82:fb:
                    84:c1:35:32:a5:6e:2d:c4:bc:b7:7d:0b:2e:2a:8d:
                    3b:b5:db:14:e4:af:51:ac:d4:9b:4f:2b:3c:0f:c0:
                    75:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E9:56:46:5E:E4:5C:77:5C:DC:3C:E9:81:70:80:27:CC:20:46:88
            X509v3 Authority Key Identifier:
                keyid:18:29:9A:2A:77:3E:02:34:37:64:44:91:95:0A:CF:58:8A:43:79:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/18299A2A773E023437644491950ACF588A4379CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/18299A2A773E023437644491950ACF588A4379CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/326130613a363034303a326430303a3a2f34382d3438203d3e20313436393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:60:bc:52:61:42:c7:22:fd:68:5d:92:a5:24:a1:f3:58:9e:
         a1:03:0b:cd:a4:f3:9b:5f:d5:bf:93:1d:c3:70:e6:d0:92:95:
         4c:ad:c8:a2:1d:a9:5f:bb:13:9d:56:9c:6c:72:f6:d4:fd:5d:
         b7:d3:fb:12:1f:4b:87:f7:66:4f:ee:15:db:35:a2:de:40:c8:
         1a:60:7d:8b:11:bc:04:7a:fc:d8:1f:f2:fa:57:e7:04:a1:bd:
         63:3e:24:54:f5:d0:00:78:c8:72:21:a8:03:f2:f3:70:a5:5b:
         0c:2b:32:9d:f8:d9:62:9b:4f:cc:d8:49:b5:55:88:1d:e1:6d:
         46:e7:47:5b:67:42:0b:f7:80:e1:5b:e4:41:39:a6:0c:df:4e:
         2f:f2:eb:18:5d:b6:8a:ff:08:33:cf:a8:c0:ab:41:e2:ca:db:
         47:78:12:c7:c6:0c:e4:3a:27:da:cd:c5:96:e2:f8:70:81:5c:
         78:a4:82:f8:40:2a:60:d3:ce:2e:ff:93:b7:91:cb:93:0c:b8:
         bc:cb:0d:65:37:35:1b:d1:c1:f9:c8:3a:75:07:e5:0c:00:91:
         e9:6f:19:59:d4:a0:2b:f5:5f:35:8a:58:3e:c2:3e:12:c2:c9:
         c5:6c:7d:9e:bb:ba:98:4b:78:bd:aa:bf:e4:4d:de:44:10:8f:
         83:44:82:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:28:37 2025 by rpki-client