Route Origin Authorization

$ rpki-client -vvf rpki-repository.haruue.net/repo/YC3254-RPKI/2/326130613a363034303a326430323a3a2f34382d3438203d3e20313436393530.roa
File:                     326130613a363034303a326430323a3a2f34382d3438203d3e20313436393530.roa (raw, json)
Hash identifier:          6MRMvQXCgJHPOIeMb5qxKQbTPD4Yi8D+afsLoI33KWU=
Subject key identifier:   B0:A1:8E:6C:65:F3:5B:4F:9E:8A:01:E0:33:77:21:68:C0:D1:48:BE
Certificate issuer:       /CN=3F0AC25D352C83DA8307594B98ED061BE8489682
Certificate serial:       2F0FEEBB66A1D490483A72E2287091F6FB0251B0
Authority key identifier: 3F:0A:C2:5D:35:2C:83:DA:83:07:59:4B:98:ED:06:1B:E8:48:96:82
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer
Subject info access:      rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/326130613a363034303a326430323a3a2f34382d3438203d3e20313436393530.roa
Signing time:             Tue 13 May 2025 13:20:18 +0000
ROA not before:           Tue 13 May 2025 13:15:18 +0000
ROA not after:            Tue 12 May 2026 13:20:18 +0000
asID:                     146950
IP address blocks:        2a0a:6040:2d02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.crl
                          rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 09:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0f:ee:bb:66:a1:d4:90:48:3a:72:e2:28:70:91:f6:fb:02:51:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0AC25D352C83DA8307594B98ED061BE8489682
        Validity
            Not Before: May 13 13:15:18 2025 GMT
            Not After : May 12 13:20:18 2026 GMT
        Subject: CN=B0A18E6C65F35B4F9E8A01E033772168C0D148BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:40:c2:b1:39:89:6b:46:dd:b1:9c:71:ce:50:
                    46:59:0b:57:41:10:a4:0e:e8:63:63:29:53:43:db:
                    45:cc:a2:39:f5:c5:b8:6d:42:45:82:d8:f2:55:f4:
                    d8:82:0c:5b:df:ae:68:78:be:94:24:ac:99:84:60:
                    32:0f:2d:b1:8c:58:0c:86:14:c6:fe:13:aa:58:fe:
                    a9:e5:5e:e8:be:b2:5c:1a:6f:1b:6f:da:f8:39:86:
                    ab:99:67:83:ab:d6:05:78:f9:a3:f0:39:ca:73:76:
                    12:cf:fa:00:b1:06:51:f1:99:9a:24:40:3b:02:34:
                    e1:da:ee:7c:11:61:8f:35:f1:72:11:b0:4b:ad:99:
                    7d:c5:59:d4:82:ef:e4:c1:8c:1c:82:e5:c9:96:09:
                    27:0b:31:9a:de:2b:bf:c3:c5:d4:2a:86:d0:bb:24:
                    68:ce:d3:b4:5e:ab:b8:d8:52:7a:f4:f7:20:cb:88:
                    eb:f2:fc:af:f8:57:3f:f4:4a:76:ba:6a:bc:cd:9f:
                    2a:93:e3:8c:28:5c:6b:39:e4:48:82:c8:f2:cb:f5:
                    a4:5d:b1:47:7c:0f:d6:97:2a:13:4f:44:5b:90:bd:
                    fd:33:a1:54:10:19:f1:fa:a6:64:1e:f2:93:3f:4f:
                    56:9c:11:2f:4b:7f:29:87:dd:68:7b:d3:1c:bc:ac:
                    2d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A1:8E:6C:65:F3:5B:4F:9E:8A:01:E0:33:77:21:68:C0:D1:48:BE
            X509v3 Authority Key Identifier:
                keyid:3F:0A:C2:5D:35:2C:83:DA:83:07:59:4B:98:ED:06:1B:E8:48:96:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/326130613a363034303a326430323a3a2f34382d3438203d3e20313436393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2d02::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:8a:bc:96:c5:08:d9:77:58:6d:b3:33:a7:a9:35:81:0c:83:
         53:4b:d9:22:16:63:f7:c5:78:9f:f4:97:eb:f2:d7:a4:05:13:
         3f:7b:8f:f5:82:3b:70:76:ed:62:8d:b5:d6:77:48:30:d3:90:
         69:f4:02:ad:83:09:a2:cd:cd:b4:a8:20:2b:88:7c:cd:41:df:
         08:ac:78:9c:54:7c:80:10:02:2d:e4:dd:61:f2:ca:ec:85:74:
         fc:a7:40:60:1d:58:14:3e:8f:dc:53:6d:76:c1:3d:b8:e1:b7:
         42:4b:bc:49:b4:90:44:57:96:42:f7:0d:b9:94:dd:25:ac:0c:
         c7:9d:79:2c:95:3d:32:00:f3:44:80:2e:a7:a9:d2:e8:a5:31:
         63:2e:d0:3d:d5:c5:a8:98:9b:85:fa:da:0a:0a:10:6a:0f:61:
         7b:20:7a:c9:6e:49:11:5b:ec:43:03:33:83:ec:c2:39:d7:5f:
         3f:12:86:bd:05:1f:f8:96:2d:47:fc:42:09:5e:50:51:11:e5:
         9f:e1:01:5e:6c:e4:58:9e:64:e9:61:2a:b7:4d:4e:97:d9:96:
         38:12:18:1b:3b:10:ba:33:4f:3d:b8:c6:ac:4c:15:eb:ba:14:
         af:d1:6f:89:3f:1a:58:4e:3c:d6:80:14:e1:40:88:df:60:2c:
         5f:d5:03:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:23:33 2025 by rpki-client