Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          KxJ7XF8Z2VNL2LPTKDndZcM/etl1/MxhPowc5xh/Txk=
Subject key identifier:   93:60:A9:DA:5C:DD:62:9F:02:74:0B:28:67:79:08:DA:06:49:14:DB
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       0CA39FE6FA01FDB108C83388D6A37533EA05AF3C
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Sat 05 Jul 2025 09:32:31 +0000
ROA not before:           Sat 05 Jul 2025 09:27:31 +0000
ROA not after:            Sat 04 Jul 2026 09:32:31 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba57::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Jul 2025 14:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a3:9f:e6:fa:01:fd:b1:08:c8:33:88:d6:a3:75:33:ea:05:af:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Jul  5 09:27:31 2025 GMT
            Not After : Jul  4 09:32:31 2026 GMT
        Subject: CN=9360A9DA5CDD629F02740B28677908DA064914DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b8:08:48:92:ef:4a:71:8b:6b:58:3f:b0:54:
                    2f:e6:11:1e:76:65:76:02:c6:9a:e4:61:4e:54:2e:
                    d3:ff:07:a0:1f:9a:66:f3:60:f4:9f:9d:c2:8a:09:
                    36:fa:27:91:40:d1:ca:6c:5e:5f:c3:1d:3a:09:c7:
                    0e:c1:21:6b:49:00:28:fc:08:8b:bf:2a:ae:27:fb:
                    0e:37:07:ce:61:e5:e4:a5:c7:b3:45:f1:41:67:fc:
                    9e:de:f3:0e:1b:4c:de:8f:32:62:39:8e:9d:f8:90:
                    b4:f0:73:d6:d3:85:02:0a:05:08:d7:75:08:8d:0d:
                    76:03:ff:75:b7:d3:ae:25:69:ac:a2:01:f1:c2:e6:
                    4c:39:77:6a:64:b1:8c:9f:cf:36:b8:d4:06:42:70:
                    75:8f:f9:0d:76:5b:eb:dd:0b:b0:5b:11:29:fd:cf:
                    cb:7e:84:6d:e9:f9:e1:eb:43:04:fe:c5:ad:76:a4:
                    21:f4:f8:32:75:98:ce:79:a1:8d:a3:cf:3f:ad:53:
                    42:7d:2d:56:80:b5:83:e4:75:bd:58:93:a4:00:27:
                    06:e9:f7:6e:2e:12:a1:88:ec:50:20:e7:f4:7d:10:
                    06:7e:eb:90:38:ad:ad:9e:7b:b5:39:7e:f7:9f:b7:
                    f3:6b:ea:5b:49:f0:3c:6d:7d:3f:8b:aa:02:e2:4c:
                    4c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:60:A9:DA:5C:DD:62:9F:02:74:0B:28:67:79:08:DA:06:49:14:DB
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba57::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:ff:25:6a:a9:1f:5b:a9:ab:48:4e:f6:bc:3b:a5:b3:91:d7:
         dc:44:15:cb:20:4d:f2:2e:39:1c:56:25:01:71:90:14:37:75:
         cd:d8:cf:3b:4e:d8:2e:53:a0:31:24:2c:f9:00:81:b9:85:e8:
         94:89:70:09:99:a4:64:7e:c5:d2:2e:f7:30:2d:c5:84:da:07:
         a0:15:f1:f3:07:99:f8:74:7c:8a:23:52:f4:a0:85:85:14:5e:
         7d:a7:59:5c:b5:f7:38:bd:52:c1:d3:b4:8f:56:da:69:34:4a:
         f5:4e:b7:4e:36:82:33:88:7e:c0:13:bb:2a:1a:74:f4:a5:8f:
         36:e9:53:3e:69:fb:a0:fa:64:c0:8d:7c:04:ff:9c:72:41:bb:
         35:94:08:ba:42:0b:5f:df:02:3b:a7:b8:8d:00:31:f0:c4:cb:
         0c:ec:ec:f8:26:ed:1c:73:7a:bc:cc:31:81:de:53:08:2c:91:
         a5:ac:35:59:64:62:b5:17:82:26:70:e8:0c:ba:83:fc:6e:34:
         0b:4c:16:b6:b7:2d:76:f9:22:66:c9:cc:6d:ed:52:1d:5e:0f:
         0a:a8:7d:88:4d:e4:4c:07:5b:72:32:74:22:5a:9f:c1:2c:33:
         3d:d6:de:aa:d7:a2:ed:d8:84:02:02:fe:f0:23:fa:a6:fe:63:
         3d:c8:2c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:49:18 2025 by rpki-client