Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          Cf7Hq4Bj6m3ldjocti6iTYM0fKxr5EeeVnIgQEdXi4Q=
Subject key identifier:   F0:C4:24:85:C7:CC:C9:59:89:EE:7F:99:EF:33:29:47:5B:AC:2B:29
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       C637DC7C8980A7FF8495C950290B8E5B5E47EE
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Sat 05 Jul 2025 09:32:33 +0000
ROA not before:           Sat 05 Jul 2025 09:27:33 +0000
ROA not after:            Sat 04 Jul 2026 09:32:33 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba55::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 04:12:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c6:37:dc:7c:89:80:a7:ff:84:95:c9:50:29:0b:8e:5b:5e:47:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Jul  5 09:27:33 2025 GMT
            Not After : Jul  4 09:32:33 2026 GMT
        Subject: CN=F0C42485C7CCC95989EE7F99EF3329475BAC2B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:13:f0:e2:a4:be:be:c3:5f:2f:75:95:9b:c4:
                    be:1d:f8:a2:44:3d:24:ec:92:39:aa:a5:0a:d0:da:
                    66:32:26:7f:d6:1e:99:8b:bd:7f:3f:c4:4b:a3:bb:
                    46:6f:6c:6d:07:1e:71:91:ff:7d:6c:54:fc:bb:ed:
                    c8:32:92:ba:8a:52:cb:34:f6:c9:f7:09:02:d8:07:
                    e8:20:a4:1b:5d:58:b6:e2:a3:b3:74:43:96:38:41:
                    34:28:da:75:09:62:5f:01:1a:57:ee:1a:f1:e2:c0:
                    31:7a:ff:48:8e:72:66:dc:51:c1:00:b7:58:1f:42:
                    d4:87:10:e0:39:e9:f7:f6:48:f3:fd:f0:0d:56:4e:
                    a3:e6:90:ce:69:07:f0:92:0f:d2:a0:e9:bc:9e:d8:
                    7d:b3:26:a0:b3:ee:d4:09:b9:1b:5f:ed:03:ea:89:
                    39:8c:03:25:3a:a6:8b:c6:7a:0e:de:39:a9:1a:54:
                    47:04:0c:ab:7e:94:28:48:49:56:76:aa:ee:fb:48:
                    32:d6:88:78:08:aa:89:9d:89:bb:b7:fa:04:e9:73:
                    1b:0f:3b:39:38:a0:fd:e6:01:64:ef:53:77:c5:aa:
                    0f:0c:6d:b7:8b:3a:0e:78:00:0d:f3:6b:17:ea:4b:
                    30:8a:9b:37:09:78:b9:14:be:90:cd:03:25:8f:87:
                    d4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C4:24:85:C7:CC:C9:59:89:EE:7F:99:EF:33:29:47:5B:AC:2B:29
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba55::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:b0:5e:c7:69:93:27:7d:3f:29:49:3a:e8:8c:cb:65:4b:6e:
         d1:84:28:57:22:f0:b6:9f:73:b5:bc:dd:11:e4:3c:fd:fe:83:
         63:99:15:8b:72:0a:90:fb:b2:2d:e7:79:3c:6a:19:4e:ca:8e:
         45:cc:7f:6e:ba:7e:20:5e:db:4e:f8:7a:56:66:dd:54:c0:14:
         ff:bc:19:3e:6d:5c:d2:15:e0:e2:80:f5:b6:be:6d:d8:d8:ed:
         1f:ca:72:f5:19:0f:ab:ea:4f:ec:61:ab:86:55:bd:bc:51:25:
         68:28:b0:61:c1:f7:c6:69:8a:d6:99:39:89:3c:42:f6:aa:c4:
         f3:11:f4:20:f5:e9:24:eb:c6:85:35:9e:f2:a5:f8:b1:06:be:
         2e:f8:1c:27:d8:5d:9e:bc:03:3c:c5:a2:ee:a2:fd:89:11:ba:
         30:a1:a4:71:3d:de:5e:1e:cb:50:bb:37:b8:6e:f5:cd:72:51:
         23:5b:2c:84:24:fa:bf:35:56:f2:7e:e6:c3:39:c7:0d:9d:e7:
         7b:96:7b:44:f3:1b:b4:37:3b:2e:77:65:9a:18:17:60:b9:0d:
         67:f6:06:1a:eb:20:4a:4b:d5:4a:fb:a4:80:53:d7:0b:50:3a:
         26:6b:09:ea:7c:b7:a8:ec:be:08:ca:05:53:0c:11:9a:b0:2c:
         85:2b:b4:d8
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIUAMY33HyJgKf/hJXJUCkLjlteR+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY3MjhCOTE0NjcwNDM0RENGNTYzM0U4MUUyQjg3MjFE
Rjc1Q0VCODAeFw0yNTA3MDUwOTI3MzNaFw0yNjA3MDQwOTMyMzNaMDMxMTAvBgNV
BAMTKEYwQzQyNDg1QzdDQ0M5NTk4OUVFN0Y5OUVGMzMyOTQ3NUJBQzJCMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqE/DipL6+w18vdZWbxL4d+KJE
PSTskjmqpQrQ2mYyJn/WHpmLvX8/xEuju0ZvbG0HHnGR/31sVPy77cgykrqKUss0
9sn3CQLYB+ggpBtdWLbio7N0Q5Y4QTQo2nUJYl8BGlfuGvHiwDF6/0iOcmbcUcEA
t1gfQtSHEOA56ff2SPP98A1WTqPmkM5pB/CSD9Kg6bye2H2zJqCz7tQJuRtf7QPq
iTmMAyU6povGeg7eOakaVEcEDKt+lChISVZ2qu77SDLWiHgIqomdibu3+gTpcxsP
Ozk4oP3mAWTvU3fFqg8MbbeLOg54AA3zaxfqSzCKmzcJeLkUvpDNAyWPh9QjAgMB
AAGjggJjMIICXzAdBgNVHQ4EFgQU8MQkhcfMyVmJ7n+Z7zMpR1usKykwHwYDVR0j
BBgwFoAUD3KLkUZwQ03PVjPoHiuHId91zrgwDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm
NTBlOC8xMS8wRjcyOEI5MTQ2NzA0MzREQ0Y1NjMzRTgxRTJCODcyMURGNzVDRUI4
LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp
ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvMEY3MjhCOTE0Njcw
NDM0RENGNTYzM0U4MUUyQjg3MjFERjc1Q0VCOC5jZXIwgbgGCCsGAQUFBwELBIGr
MIGoMIGlBggrBgEFBQcwC4aBmHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1
MGU4LzExLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjI2MTM1MzUzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMTM5MzkzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAulUwDQYJKoZI
hvcNAQELBQADggEBAC2wXsdpkyd9PylJOuiMy2VLbtGEKFci8Lafc7W83RHkPP3+
g2OZFYtyCpD7si3neTxqGU7KjkXMf266fiBe2074elZm3VTAFP+8GT5tXNIV4OKA
9ba+bdjY7R/KcvUZD6vqT+xhq4ZVvbxRJWgosGHB98ZpitaZOYk8QvaqxPMR9CD1
6STrxoU1nvKl+LEGvi74HCfYXZ68AzzFou6i/YkRujChpHE93l4ey1C7N7hu9c1y
USNbLIQk+r81VvJ+5sM5xw2d53uWe0TzG7Q3Oy53ZZoYF2C5DWf2BhrrIEpL1Ur7
pIBT1wtQOiZrCep8t6jsvgjKBVMMEZqwLIUrtNg=
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:10 2025 by rpki-client