Route Origin Authorization

$ rpki-client -vvf rpki-repository.haruue.net/repo/YC3254-RPKI/3/326130613a363034303a326430313a3a2f34382d3438203d3e20323030323536.roa
File:                     326130613a363034303a326430313a3a2f34382d3438203d3e20323030323536.roa (raw, json)
Hash identifier:          5/Mas8xUHgwNybWjCEplVbmHOdI40K1TKYf2XXxA6R8=
Subject key identifier:   44:61:08:5F:45:00:27:E8:2F:5D:36:B7:04:0F:C2:54:93:08:A8:C6
Certificate issuer:       /CN=18299A2A773E023437644491950ACF588A4379CF
Certificate serial:       3C0E21494A37AB627109D14DF139A1A26964F92D
Authority key identifier: 18:29:9A:2A:77:3E:02:34:37:64:44:91:95:0A:CF:58:8A:43:79:CF
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/18299A2A773E023437644491950ACF588A4379CF.cer
Subject info access:      rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/326130613a363034303a326430313a3a2f34382d3438203d3e20323030323536.roa
Signing time:             Sat 05 Jul 2025 15:08:10 +0000
ROA not before:           Sat 05 Jul 2025 15:03:10 +0000
ROA not after:            Sat 04 Jul 2026 15:08:10 +0000
asID:                     200256
IP address blocks:        2a0a:6040:2d01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/18299A2A773E023437644491950ACF588A4379CF.crl
                          rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/18299A2A773E023437644491950ACF588A4379CF.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/18299A2A773E023437644491950ACF588A4379CF.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 13:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0e:21:49:4a:37:ab:62:71:09:d1:4d:f1:39:a1:a2:69:64:f9:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18299A2A773E023437644491950ACF588A4379CF
        Validity
            Not Before: Jul  5 15:03:10 2025 GMT
            Not After : Jul  4 15:08:10 2026 GMT
        Subject: CN=4461085F450027E82F5D36B7040FC2549308A8C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7d:af:e0:8d:0c:61:8d:62:50:31:7c:18:51:
                    3f:a0:3a:99:b9:14:66:47:45:c4:2f:31:f4:28:21:
                    3c:5c:0c:99:f0:01:9d:f2:ea:70:53:98:af:c0:ce:
                    1d:d7:ec:0d:9f:b9:89:21:74:b7:fe:55:de:b4:2f:
                    91:87:bb:cf:8c:b6:fc:f0:2f:14:e2:b7:62:84:ff:
                    57:6e:e1:cc:51:9e:0e:85:a4:3c:5b:dc:0b:7e:f5:
                    18:76:e3:e4:90:73:e1:f5:8b:d5:38:da:6e:ea:66:
                    f5:b0:c5:c5:d5:b9:57:4b:91:72:c4:6b:09:be:8f:
                    9e:90:5c:52:ec:c1:f1:da:eb:20:48:c8:ea:ef:9a:
                    f6:48:bf:a1:f9:48:e8:5d:6c:a7:a4:56:16:be:5a:
                    f4:cb:a1:34:21:f3:35:2f:a8:55:83:5a:7a:6b:41:
                    48:0f:b5:57:87:f1:10:02:a4:97:0b:3d:d8:01:98:
                    ed:b2:2a:cd:20:17:7d:4f:bf:2e:45:86:99:a7:e4:
                    86:99:4e:1d:74:80:be:65:9e:9a:cb:bc:cb:47:b5:
                    9c:a9:e1:38:23:55:ef:e0:a2:db:e8:07:71:85:0c:
                    8c:4c:22:f1:1d:e6:f2:f7:f5:46:10:3f:ef:3d:59:
                    fb:02:7b:7f:9b:f9:97:cd:4e:76:5e:0e:ed:6b:80:
                    01:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:61:08:5F:45:00:27:E8:2F:5D:36:B7:04:0F:C2:54:93:08:A8:C6
            X509v3 Authority Key Identifier:
                keyid:18:29:9A:2A:77:3E:02:34:37:64:44:91:95:0A:CF:58:8A:43:79:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/18299A2A773E023437644491950ACF588A4379CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/18299A2A773E023437644491950ACF588A4379CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/326130613a363034303a326430313a3a2f34382d3438203d3e20323030323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2d01::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:0e:a6:5f:ae:ac:34:ea:9e:cd:f0:ef:53:07:4a:ee:90:01:
         54:14:e5:05:17:92:a9:38:cd:76:55:53:c1:6d:b6:00:6a:01:
         d9:7b:1b:1d:7e:01:18:9a:c5:1b:d9:8f:41:4a:33:c3:99:99:
         b7:3d:27:4c:90:c1:04:1d:57:15:9d:dc:38:76:9b:4e:ab:4f:
         fb:b2:28:08:9b:a0:c5:15:dc:02:b0:5c:6a:b1:23:ea:f7:cb:
         07:8c:dd:c6:4c:ab:50:f4:59:76:5b:8b:dd:67:b4:36:0c:1d:
         76:2c:49:70:ff:f1:bb:03:4f:5e:a9:53:cc:5e:c4:26:01:8c:
         14:8f:a0:cf:8e:53:18:8b:27:9d:69:c2:07:7c:38:e8:d7:6b:
         e1:ab:b6:72:6a:9e:40:0a:18:e6:7c:22:75:36:08:7f:5f:0a:
         42:05:70:fe:80:91:c2:a9:13:a9:76:42:c3:46:5b:3e:0c:0e:
         e8:c8:b5:8b:d3:f5:aa:e4:97:1f:e7:84:60:71:de:68:7f:6c:
         89:e2:f1:d2:88:a0:57:72:f8:c3:c7:df:83:a3:d3:ef:f7:77:
         a6:9d:bc:c6:50:80:d3:83:21:12:04:14:b4:77:70:3d:3e:55:
         c5:c7:94:a4:93:72:e4:d2:44:93:2d:bc:99:02:b3:63:95:66:
         22:e1:c8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:07:08 2025 by rpki-client