Route Origin Authorization

$ rpki-client -vvf rpki-repository.haruue.net/repo/YC3254-RPKI/3/326130613a363034303a326431303a3a2f34342d3435203d3e20313436393530.roa
File:                     326130613a363034303a326431303a3a2f34342d3435203d3e20313436393530.roa (raw, json)
Hash identifier:          Sm02FF0/i5ba0RTK4xHKUohrp4zl6qb6OXqWNqU3NZ8=
Subject key identifier:   F9:12:FC:AD:66:C1:C2:1A:99:37:5D:BB:CA:4E:21:91:F7:F8:43:20
Certificate issuer:       /CN=18299A2A773E023437644491950ACF588A4379CF
Certificate serial:       61A036A643711A1CF02681376F2DC63E10D25AE7
Authority key identifier: 18:29:9A:2A:77:3E:02:34:37:64:44:91:95:0A:CF:58:8A:43:79:CF
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/18299A2A773E023437644491950ACF588A4379CF.cer
Subject info access:      rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/326130613a363034303a326431303a3a2f34342d3435203d3e20313436393530.roa
Signing time:             Sat 05 Jul 2025 15:08:10 +0000
ROA not before:           Sat 05 Jul 2025 15:03:10 +0000
ROA not after:            Sat 04 Jul 2026 15:08:10 +0000
asID:                     146950
IP address blocks:        2a0a:6040:2d10::/44 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/18299A2A773E023437644491950ACF588A4379CF.crl
                          rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/18299A2A773E023437644491950ACF588A4379CF.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/18299A2A773E023437644491950ACF588A4379CF.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 22:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a0:36:a6:43:71:1a:1c:f0:26:81:37:6f:2d:c6:3e:10:d2:5a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18299A2A773E023437644491950ACF588A4379CF
        Validity
            Not Before: Jul  5 15:03:10 2025 GMT
            Not After : Jul  4 15:08:10 2026 GMT
        Subject: CN=F912FCAD66C1C21A99375DBBCA4E2191F7F84320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:81:06:80:dc:8a:6b:b8:85:aa:d4:00:5d:61:
                    ce:27:b0:38:a2:11:84:9f:32:fd:37:30:b6:4a:c4:
                    84:00:1c:9f:4a:c6:13:50:7b:80:c2:a2:16:32:f2:
                    29:3b:61:29:e1:ce:24:78:93:ed:1f:16:15:d3:3d:
                    81:ae:9d:24:cd:56:dc:f5:b0:d3:74:47:3c:20:6a:
                    1a:5b:9e:cd:37:53:ff:b1:29:d3:f7:9a:82:e9:f3:
                    bc:e6:e1:58:b2:f6:fa:ac:eb:20:db:26:82:00:c1:
                    7f:92:40:00:4a:17:94:8d:ac:f0:c8:d9:83:4f:ef:
                    36:77:16:49:b2:17:02:2c:85:3f:c5:a3:1c:6f:df:
                    7c:2b:e2:47:0f:22:c0:e4:2d:ad:ee:7a:7e:13:33:
                    d6:28:28:8e:2c:d5:3e:5d:4d:1b:9b:1f:2a:96:89:
                    62:ed:21:7b:55:f1:92:d6:3e:10:08:40:55:0b:76:
                    d9:b7:6e:ce:2a:5f:3f:46:f5:f6:b3:36:56:5a:d3:
                    30:88:00:22:80:03:64:d0:0b:61:65:f3:3b:51:45:
                    72:91:51:77:33:74:f9:16:6a:91:90:0c:fd:fe:2b:
                    eb:6a:9d:ca:89:28:65:4d:2d:d1:4d:f0:45:eb:ad:
                    f2:07:c9:f9:1b:d4:57:29:25:4b:fc:86:c5:9b:4c:
                    41:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:12:FC:AD:66:C1:C2:1A:99:37:5D:BB:CA:4E:21:91:F7:F8:43:20
            X509v3 Authority Key Identifier:
                keyid:18:29:9A:2A:77:3E:02:34:37:64:44:91:95:0A:CF:58:8A:43:79:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/18299A2A773E023437644491950ACF588A4379CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/18299A2A773E023437644491950ACF588A4379CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/326130613a363034303a326431303a3a2f34342d3435203d3e20313436393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2d10::/44

    Signature Algorithm: sha256WithRSAEncryption
         56:5d:22:1a:b7:63:30:45:19:0e:34:79:cc:0b:81:2d:4a:d1:
         27:ce:82:78:5f:10:3c:96:8d:de:0b:35:00:bb:03:48:fd:22:
         df:b8:60:f6:ea:64:6e:96:e7:a4:dc:10:e1:c7:43:63:f9:26:
         d1:4b:3c:b2:ad:0c:64:00:0b:28:43:92:27:b3:9b:eb:1b:a5:
         b8:20:f5:91:77:ba:32:eb:17:b6:28:f8:17:d0:43:08:5c:50:
         ed:8d:bc:57:e1:27:62:f1:ad:d2:d9:9b:87:ca:3d:d2:74:8a:
         3a:43:49:88:28:5d:6c:1d:e3:eb:0b:c2:1f:3d:23:f6:f9:5a:
         df:ee:50:86:5d:73:5c:a4:b8:5e:96:4e:2f:45:ee:89:57:20:
         97:3b:0e:3c:90:b2:1a:ff:13:fc:78:d5:8b:2d:91:0e:6c:56:
         f3:f5:da:80:67:56:b4:62:35:cc:10:ba:3f:94:c9:0f:d1:89:
         5e:2c:cb:af:34:d5:ea:b7:47:43:4a:04:ce:4b:2b:53:29:d9:
         80:9e:f5:4b:4f:19:9d:39:d5:56:d8:49:77:59:4b:24:ea:dd:
         7c:e9:ca:6a:ec:a0:ca:84:1c:35:72:e6:28:01:6a:42:c9:86:
         2e:e0:04:13:b5:5e:ef:ee:fc:ff:bb:d9:94:d0:15:0b:6e:ff:
         e1:3e:68:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:28:35 2025 by rpki-client