Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa
File:                     326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (raw, json)
Hash identifier:          6pzPl1CKzXGYp4EVxRXIn1wg4oABaAK4CCBHYDSxxpU=
Subject key identifier:   E4:D6:89:0F:C1:16:ED:53:9F:D0:E3:B1:88:DD:E6:4F:6D:F5:A2:FE
Certificate issuer:       /CN=547F71C62763A22A9156089F2F55B587337FAFCB
Certificate serial:       0F012F1192225F018CF070D391DC9EA20CC79F73
Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa
Signing time:             Sat 05 Jul 2025 15:29:02 +0000
ROA not before:           Sat 05 Jul 2025 15:24:02 +0000
ROA not after:            Sat 04 Jul 2026 15:29:02 +0000
asID:                     202201
IP address blocks:        2a0a:6040:5400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:01:2f:11:92:22:5f:01:8c:f0:70:d3:91:dc:9e:a2:0c:c7:9f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB
        Validity
            Not Before: Jul  5 15:24:02 2025 GMT
            Not After : Jul  4 15:29:02 2026 GMT
        Subject: CN=E4D6890FC116ED539FD0E3B188DDE64F6DF5A2FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:fe:a0:df:4f:db:cc:2b:54:cf:e2:ef:be:
                    48:19:b8:0e:af:44:26:90:c0:6e:82:3a:90:2e:1c:
                    1a:db:e8:83:a0:fc:a9:78:e5:d1:ef:bb:a6:69:4e:
                    f8:d9:0d:6e:83:ae:1f:8f:6e:c4:83:b8:fa:b4:10:
                    93:7a:53:7e:83:fd:2e:c0:6a:f0:00:cb:82:d4:f1:
                    8e:b9:6a:ac:8e:ca:26:d1:e8:70:c5:68:6c:0a:52:
                    4b:7d:eb:1f:2d:97:9b:04:f5:d0:a4:d6:a5:9c:7a:
                    ab:1c:dc:17:d6:c7:40:f4:af:ff:19:bc:0f:f3:b1:
                    1f:83:41:38:28:b1:9e:b8:24:e1:bb:fe:cc:d7:b7:
                    a6:9d:fd:af:ce:4f:ae:9f:f3:18:ed:66:d5:8b:b4:
                    db:22:17:53:a2:64:69:7b:23:d7:40:c1:41:8d:b1:
                    a2:69:0d:e3:71:5b:2d:a3:d4:f2:b4:4f:2a:4a:4e:
                    ee:67:45:06:8e:55:dc:e9:04:0c:da:c7:26:19:2c:
                    cd:cf:b5:c9:9e:a0:2a:0e:42:10:66:42:06:1d:8a:
                    ee:65:78:ba:75:bf:76:72:a5:ec:f3:6b:25:c4:de:
                    b2:00:cc:95:37:3b:4f:da:a6:f5:95:6f:68:a5:5f:
                    1d:30:6c:42:db:8b:d5:8a:79:9c:95:24:b2:fd:2a:
                    2c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D6:89:0F:C1:16:ED:53:9F:D0:E3:B1:88:DD:E6:4F:6D:F5:A2:FE
            X509v3 Authority Key Identifier:
                keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:5400::/40

    Signature Algorithm: sha256WithRSAEncryption
         21:08:49:94:1f:04:fb:9f:9d:4f:4d:6a:74:d8:7c:15:46:ee:
         a7:7a:76:58:7c:38:29:51:49:17:ad:1d:25:62:bc:4e:83:4e:
         10:da:d8:46:99:ac:31:d4:5d:2e:f7:46:40:9d:e6:cc:5d:84:
         ef:97:ee:ef:37:7b:62:09:a8:f6:78:47:8f:81:62:71:d9:da:
         a4:20:68:bc:96:87:59:7a:bf:df:3d:f7:7a:ba:48:0a:8b:e3:
         45:5d:c6:51:55:b5:9f:36:83:f3:30:34:6e:25:5a:57:72:1f:
         87:9b:e3:1a:77:d7:ae:60:35:d3:2d:aa:51:74:f8:f4:ca:29:
         dc:06:2e:42:52:2b:b0:2f:e8:c9:03:35:ea:0a:9b:30:f1:32:
         e7:92:bc:b9:fe:4b:5c:5f:f5:bc:2c:f4:80:cf:a6:fd:46:b4:
         ef:e7:14:72:bb:2f:0d:a8:9d:b4:a6:bf:40:42:6a:28:22:fa:
         ce:30:f3:3a:9e:c0:fd:99:2a:b4:e3:d8:dc:dc:65:ed:8e:9d:
         2f:fe:92:6b:41:fe:54:c0:41:c3:93:88:3c:43:71:18:96:c1:
         af:26:89:38:89:ca:9c:27:1d:52:41:f3:59:2f:26:dd:58:36:
         18:51:ad:26:b4:57:a5:9a:67:17:71:5c:71:d5:d5:00:54:e7:
         12:a1:44:81
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIUDwEvEZIiXwGM8HDTkdyeogzHn3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODcz
MzdGQUZDQjAeFw0yNTA3MDUxNTI0MDJaFw0yNjA3MDQxNTI5MDJaMDMxMTAvBgNV
BAMTKEU0RDY4OTBGQzExNkVENTM5RkQwRTNCMTg4RERFNjRGNkRGNUEyRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PP6g30/bzCtUz+LvvkgZuA6v
RCaQwG6COpAuHBrb6IOg/Kl45dHvu6ZpTvjZDW6Drh+PbsSDuPq0EJN6U36D/S7A
avAAy4LU8Y65aqyOyibR6HDFaGwKUkt96x8tl5sE9dCk1qWceqsc3BfWx0D0r/8Z
vA/zsR+DQTgosZ64JOG7/szXt6ad/a/OT66f8xjtZtWLtNsiF1OiZGl7I9dAwUGN
saJpDeNxWy2j1PK0TypKTu5nRQaOVdzpBAzaxyYZLM3PtcmeoCoOQhBmQgYdiu5l
eLp1v3ZypezzayXE3rIAzJU3O0/apvWVb2ilXx0wbELbi9WKeZyVJLL9KixBAgMB
AAGjggJfMIICWzAdBgNVHQ4EFgQU5NaJD8EW7VOf0OOxiN3mT231ov4wHwYDVR0j
BBgwFoAUVH9xxidjoiqRVgifL1W1hzN/r8swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3
Y2EzLzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU0N0Y3MUM2Mjc2M0Ey
MkE5MTU2MDg5RjJGNTVCNTg3MzM3RkFGQ0IuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzAxNzkxYTY0LWEzNmEtNGViOS1hNmZmLWUxYzQwNzhhN2Nh
My8xLzMyNjEzMDYxM2EzNjMwMzQzMDNhMzUzNDMwMzAzYTNhMmYzNDMwMmQzNDM4
MjAzZDNlMjAzMjMwMzIzMjMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAVDANBgkqhkiG9w0B
AQsFAAOCAQEAIQhJlB8E+5+dT01qdNh8FUbup3p2WHw4KVFJF60dJWK8ToNOENrY
RpmsMdRdLvdGQJ3mzF2E75fu7zd7Ygmo9nhHj4FicdnapCBovJaHWXq/3z33erpI
CovjRV3GUVW1nzaD8zA0biVaV3Ifh5vjGnfXrmA10y2qUXT49Mop3AYuQlIrsC/o
yQM16gqbMPEy55K8uf5LXF/1vCz0gM+m/Ua07+cUcrsvDaidtKa/QEJqKCL6zjDz
Op7A/ZkqtOPY3Nxl7Y6dL/6Sa0H+VMBBw5OIPENxGJbBryaJOInKnCcdUkHzWS8m
3Vg2GFGtJrRXpZpnF3FccdXVAFTnEqFEgQ==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:21:23 2025 by rpki-client