Route Origin Authorization

$ rpki-client -vvf rpki-repository.haruue.net/repo/YC3254-RPKI/3/326130613a363034303a326430323a3a2f34382d3438203d3e20313436393530.roa
File:                     326130613a363034303a326430323a3a2f34382d3438203d3e20313436393530.roa (raw, json)
Hash identifier:          +JYf+tzbS+CoWVZWaE5aWdFMZO1LdaRFHGtN892YGUI=
Subject key identifier:   AD:D0:22:34:0A:BF:BA:44:AC:75:28:B8:AC:1F:E7:78:0D:A9:6E:04
Certificate issuer:       /CN=18299A2A773E023437644491950ACF588A4379CF
Certificate serial:       5BC16B8AADFB1F888FF4C0BF18461CF81B70C281
Authority key identifier: 18:29:9A:2A:77:3E:02:34:37:64:44:91:95:0A:CF:58:8A:43:79:CF
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/18299A2A773E023437644491950ACF588A4379CF.cer
Subject info access:      rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/326130613a363034303a326430323a3a2f34382d3438203d3e20313436393530.roa
Signing time:             Sat 05 Jul 2025 15:08:10 +0000
ROA not before:           Sat 05 Jul 2025 15:03:10 +0000
ROA not after:            Sat 04 Jul 2026 15:08:10 +0000
asID:                     146950
IP address blocks:        2a0a:6040:2d02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/18299A2A773E023437644491950ACF588A4379CF.crl
                          rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/18299A2A773E023437644491950ACF588A4379CF.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/18299A2A773E023437644491950ACF588A4379CF.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 22:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c1:6b:8a:ad:fb:1f:88:8f:f4:c0:bf:18:46:1c:f8:1b:70:c2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18299A2A773E023437644491950ACF588A4379CF
        Validity
            Not Before: Jul  5 15:03:10 2025 GMT
            Not After : Jul  4 15:08:10 2026 GMT
        Subject: CN=ADD022340ABFBA44AC7528B8AC1FE7780DA96E04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:04:87:8a:9a:07:78:1f:e7:14:3c:15:07:95:
                    10:85:6e:f7:ca:84:5e:b1:a3:09:20:68:b7:18:a9:
                    7b:f6:13:e4:f3:67:72:d9:6d:85:be:0e:b6:e2:c9:
                    bb:e4:02:75:03:2e:84:5f:78:fa:dc:b4:7e:a1:cb:
                    93:d7:62:0f:a2:35:6e:9c:02:f0:5d:27:5e:6c:94:
                    df:e5:1e:f6:72:1d:18:da:c9:8c:3a:68:46:3a:1c:
                    64:0b:51:a8:f6:12:0b:1d:ad:cb:0d:cb:64:bd:57:
                    56:b9:d9:56:da:0c:80:0b:de:44:d5:8b:f3:e5:46:
                    7f:05:68:09:ba:d1:7e:30:47:e7:eb:e4:56:50:25:
                    14:26:24:d2:49:60:f3:cd:3c:a5:0e:ae:ae:f1:56:
                    e9:e8:40:5b:71:14:b9:91:12:90:4c:38:b8:da:5a:
                    b9:72:11:61:b1:5c:f6:b6:2c:b9:36:8b:9d:c6:6f:
                    1a:2a:e7:0f:e6:1c:d4:ec:40:89:e2:c0:c4:b2:d2:
                    05:36:1f:93:77:a2:30:86:c2:aa:3b:eb:f8:dd:a5:
                    93:e1:70:f6:a8:29:a2:49:98:5c:5c:2c:d9:40:72:
                    94:11:a2:b7:06:db:67:f1:d4:eb:f7:af:91:8d:81:
                    eb:96:50:f2:4c:96:23:c5:fd:bc:2e:94:be:87:e3:
                    a4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D0:22:34:0A:BF:BA:44:AC:75:28:B8:AC:1F:E7:78:0D:A9:6E:04
            X509v3 Authority Key Identifier:
                keyid:18:29:9A:2A:77:3E:02:34:37:64:44:91:95:0A:CF:58:8A:43:79:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/18299A2A773E023437644491950ACF588A4379CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/18299A2A773E023437644491950ACF588A4379CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/326130613a363034303a326430323a3a2f34382d3438203d3e20313436393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2d02::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:f8:d7:26:3a:54:2f:30:ce:71:8a:4a:be:eb:8e:b5:42:70:
         59:7e:85:09:79:57:0e:8c:27:78:b7:b3:13:1f:bf:e1:71:3f:
         ac:13:e8:be:83:04:38:8f:58:84:78:01:a5:65:58:12:12:e6:
         46:4d:db:e7:74:7a:5d:31:cb:d5:fe:39:89:31:91:60:cf:8a:
         de:ac:ef:62:d4:a7:95:90:52:e0:ab:a8:56:93:b8:f6:ee:6b:
         cf:61:5a:5e:aa:61:d6:80:4d:7e:1e:d1:0a:2b:dc:5e:e1:62:
         1e:d1:3b:5e:6d:01:c3:19:82:53:27:36:4d:46:b9:c0:5f:0f:
         cf:4c:92:b8:ad:4e:72:70:3d:df:33:9f:8e:24:46:c7:43:de:
         f5:96:da:67:72:c0:f9:67:36:33:83:7a:c2:98:17:d5:5d:e5:
         d1:a9:12:5f:16:6a:0b:a7:63:0a:5b:27:a8:c1:72:5c:04:ff:
         dd:31:71:a3:f6:07:da:97:df:94:07:1f:b9:e1:e6:02:37:3a:
         db:5e:c6:f3:8b:6e:a3:28:e0:4c:08:d8:08:76:90:35:57:ea:
         ce:54:f1:bf:83:3c:08:19:8e:31:cc:fd:15:a2:b8:06:83:e5:
         ff:63:d6:2a:99:c4:1e:a1:28:c1:f0:2d:d0:d4:52:86:2e:32:
         01:5c:97:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:28:46 2025 by rpki-client