Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa
File:                     326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (raw, json)
Hash identifier:          aHvhuFqDO1GB7QIZ+LV93NwGnOmb8RZNrGiJRajypMI=
Subject key identifier:   56:C2:97:F7:CA:CD:E6:FD:E5:7A:A4:A2:18:7F:C8:E6:78:E8:40:D2
Certificate issuer:       /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
Certificate serial:       6FC8F34A297ED70FACF1D4BB37A9D1DB6C4506CA
Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa
Signing time:             Sat 05 Jul 2025 08:10:57 +0000
ROA not before:           Sat 05 Jul 2025 08:05:57 +0000
ROA not after:            Sat 04 Jul 2026 08:10:57 +0000
asID:                     14618
IP address blocks:        2a0a:6040:3f80::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Jul 2025 21:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c8:f3:4a:29:7e:d7:0f:ac:f1:d4:bb:37:a9:d1:db:6c:45:06:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
        Validity
            Not Before: Jul  5 08:05:57 2025 GMT
            Not After : Jul  4 08:10:57 2026 GMT
        Subject: CN=56C297F7CACDE6FDE57AA4A2187FC8E678E840D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f0:e6:80:6c:34:8a:5d:57:fa:5b:ff:a2:c2:
                    a3:b3:f7:32:d3:2b:19:7a:89:39:00:19:bd:54:fb:
                    88:16:da:16:21:d2:3f:9a:30:55:9e:20:17:7b:29:
                    16:9f:2a:78:f0:fa:1e:23:ad:f5:d5:dd:29:b7:a5:
                    1d:d6:5b:f1:73:4c:15:ff:86:67:1a:58:bb:d5:3b:
                    72:4a:29:af:85:44:99:fb:a7:ed:66:78:dc:7b:cb:
                    29:20:68:cc:b8:4d:9e:18:c4:7c:60:16:c3:0b:21:
                    2f:3f:90:58:b0:b7:c2:cc:40:e3:91:2d:3c:9e:1e:
                    c6:fc:c6:2d:f3:52:08:14:1b:e8:ba:1d:d7:f1:70:
                    de:8d:a2:f7:4b:48:11:19:51:a5:c0:78:ee:13:d2:
                    d4:8d:02:2f:3f:e7:43:eb:d1:e9:9d:a8:57:3f:b9:
                    85:7f:d1:6b:f2:17:25:db:af:62:39:99:68:a6:b0:
                    f6:82:e1:d9:8b:d3:92:e3:02:5b:5a:66:63:1a:68:
                    6a:4c:b7:0a:a5:31:28:71:e9:9f:e6:ae:78:3f:80:
                    d1:c6:70:d9:ba:be:86:39:f4:d0:b9:bf:19:06:bc:
                    2a:f3:e4:1d:66:34:9b:e8:09:a6:93:63:c3:3d:89:
                    48:d1:aa:c7:97:25:05:7c:ed:06:c3:46:ea:ec:fe:
                    3c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C2:97:F7:CA:CD:E6:FD:E5:7A:A4:A2:18:7F:C8:E6:78:E8:40:D2
            X509v3 Authority Key Identifier:
                keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:3f80::/41

    Signature Algorithm: sha256WithRSAEncryption
         e5:e0:23:85:6b:66:4f:21:b3:ed:cc:3e:53:d7:32:02:b2:33:
         06:3a:a8:3f:b2:19:c4:f5:db:4f:fb:9e:f2:51:25:de:2d:0b:
         f9:ef:2b:cb:42:d9:b4:b4:22:2c:d4:8e:cb:35:83:35:b1:54:
         6c:36:62:e1:73:b2:40:d6:40:94:11:15:f5:bd:ab:57:ba:8b:
         3c:19:01:0f:a1:18:68:eb:2e:69:a3:1d:7b:22:81:4a:43:51:
         a8:0b:d4:70:d5:0f:a4:e0:21:b4:fc:91:cc:9c:5c:1c:59:b4:
         f1:7f:f0:cf:0b:c5:b2:11:da:d7:58:6f:70:b6:78:6e:5e:4a:
         68:9d:62:84:12:a9:dd:3b:4d:d7:cf:81:62:33:31:c3:49:bb:
         23:82:79:f4:a7:28:0b:03:45:46:99:42:8a:9c:aa:32:ea:07:
         de:77:f4:1e:94:b2:7c:84:92:a4:cf:2b:23:50:14:8b:2f:7d:
         79:f1:f2:12:85:9f:8d:89:33:4f:6c:9c:b7:d2:aa:39:79:9f:
         db:15:a4:d9:b7:e5:30:2c:35:42:27:59:bd:d9:b3:b6:86:f2:
         2b:92:d6:14:03:a4:9b:fc:6c:9f:28:8b:70:16:44:9d:f2:d5:
         da:26:a7:d0:19:8e:97:e2:aa:0d:6a:2f:05:46:65:a2:4c:f4:
         df:d6:80:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:56:56 2025 by rpki-client