Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa
File:                     326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (raw, json)
Hash identifier:          YVenbTOqKe9MEXa6/fOG09XMak323Qg3KMUQzchdB9c=
Subject key identifier:   0D:5F:E7:68:6C:A3:54:16:61:65:60:7F:23:E2:E1:AC:C7:8D:17:5D
Certificate issuer:       /CN=547F71C62763A22A9156089F2F55B587337FAFCB
Certificate serial:       0A54010E380C35E07F5FAFD2EE67EE2DEE81D202
Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa
Signing time:             Sat 05 Jul 2025 15:29:02 +0000
ROA not before:           Sat 05 Jul 2025 15:24:02 +0000
ROA not after:            Sat 04 Jul 2026 15:29:02 +0000
asID:                     200179
IP address blocks:        2a0a:6040:5400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:54:01:0e:38:0c:35:e0:7f:5f:af:d2:ee:67:ee:2d:ee:81:d2:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB
        Validity
            Not Before: Jul  5 15:24:02 2025 GMT
            Not After : Jul  4 15:29:02 2026 GMT
        Subject: CN=0D5FE7686CA354166165607F23E2E1ACC78D175D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2d:ed:af:cb:26:17:43:2f:a2:b1:19:21:59:
                    8f:64:c6:7c:02:7f:05:65:5a:7a:1d:e8:ab:34:99:
                    9b:43:ac:91:8c:f2:83:7f:8b:bd:62:8d:c7:c9:9a:
                    c9:99:cb:a6:ff:65:93:a0:0e:98:c4:d0:39:da:da:
                    b1:4a:23:8e:bf:c4:ba:9d:63:f1:d3:c2:db:b1:53:
                    20:b9:80:c0:65:76:7e:6c:6c:1f:41:9e:75:78:d9:
                    da:79:b2:16:1d:99:59:25:5d:2e:30:25:f1:57:7a:
                    90:de:90:ee:7a:16:28:10:ff:f9:25:84:13:2e:5a:
                    ff:a3:de:5f:fb:73:df:e6:8e:09:f1:56:ef:2b:93:
                    1e:4a:e8:da:a6:2f:aa:84:57:0b:92:f1:cb:16:80:
                    53:a7:1a:ec:ed:85:24:5a:17:a3:df:4b:8a:d7:1e:
                    ce:58:5a:ec:df:31:e4:89:11:b4:93:31:20:ac:73:
                    1c:c5:f7:4f:6d:06:63:34:a4:c7:a1:fc:6e:60:a2:
                    ac:73:57:c1:fb:ef:80:0b:e5:78:ed:79:26:cc:d8:
                    8c:26:9b:e3:1a:7c:7e:d8:b7:ca:9e:eb:c5:30:c2:
                    50:b8:e5:84:d8:5b:0a:9b:7b:15:dd:b5:43:4b:bf:
                    92:91:ce:b4:37:8d:2e:a9:5b:5d:ac:94:ed:c5:9d:
                    13:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5F:E7:68:6C:A3:54:16:61:65:60:7F:23:E2:E1:AC:C7:8D:17:5D
            X509v3 Authority Key Identifier:
                keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:5400::/40

    Signature Algorithm: sha256WithRSAEncryption
         04:f7:65:96:66:27:94:5c:db:19:6e:3a:47:63:5c:6a:53:ef:
         11:fd:85:97:b9:b5:ce:89:18:4b:57:ef:e4:85:5f:50:a4:9a:
         66:cb:98:0d:3c:99:fb:60:96:50:9f:71:c9:14:19:86:15:84:
         f3:62:bc:56:a1:4e:49:f7:47:90:b4:f7:32:a6:07:91:f7:5a:
         a9:9d:18:35:8d:dc:e1:6f:35:52:65:fe:27:d0:cc:12:6e:aa:
         0c:0b:0a:4a:a9:47:d9:7e:e2:a7:dd:ae:9d:ad:e5:11:b3:96:
         f6:62:79:9d:7a:4d:ac:92:67:c3:77:02:93:11:df:0a:32:71:
         81:57:6b:c9:2d:ef:44:51:52:9d:d7:5e:6b:f6:71:ca:d1:0b:
         14:46:bf:76:d2:bd:0e:f7:87:b4:87:c9:de:aa:90:73:16:87:
         21:b4:a1:ff:9e:8a:bb:ac:6d:83:63:d1:45:76:55:21:2e:bf:
         9d:60:30:78:c2:57:b6:5e:84:89:b8:bc:ee:fc:00:7c:0d:f0:
         8a:bc:b1:1c:e9:38:27:4d:cf:e1:24:8c:9d:ee:55:0f:d6:03:
         2f:a6:72:2b:63:1a:3e:a4:6b:e2:44:6f:56:bc:09:47:a7:4c:
         6d:5c:4e:66:78:b0:c0:a0:92:d6:52:be:27:65:fa:da:23:75:
         d9:35:22:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:59:59 2025 by rpki-client