Route Origin Authorization

$ rpki-client -vvf rpki-repository.haruue.net/repo/YC3254-RPKI/2/326130613a363034303a326431303a3a2f34342d3435203d3e20313436393530.roa
File:                     326130613a363034303a326431303a3a2f34342d3435203d3e20313436393530.roa (raw, json)
Hash identifier:          /WXlA8QtcA0qhKEPCkyPWeZs5YPUSM5lTr1fYRiqieQ=
Subject key identifier:   AC:E9:E1:54:E5:05:B7:B8:33:B8:0B:03:62:F1:6A:36:92:1A:C6:D5
Certificate issuer:       /CN=3F0AC25D352C83DA8307594B98ED061BE8489682
Certificate serial:       20DAD878864E0131C7BA68C1954DFD8AF408765C
Authority key identifier: 3F:0A:C2:5D:35:2C:83:DA:83:07:59:4B:98:ED:06:1B:E8:48:96:82
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer
Subject info access:      rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/326130613a363034303a326431303a3a2f34342d3435203d3e20313436393530.roa
Signing time:             Tue 01 Apr 2025 06:31:22 +0000
ROA not before:           Tue 01 Apr 2025 06:26:22 +0000
ROA not after:            Tue 31 Mar 2026 06:31:22 +0000
asID:                     146950
IP address blocks:        2a0a:6040:2d10::/44 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.crl
                          rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 08:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:da:d8:78:86:4e:01:31:c7:ba:68:c1:95:4d:fd:8a:f4:08:76:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0AC25D352C83DA8307594B98ED061BE8489682
        Validity
            Not Before: Apr  1 06:26:22 2025 GMT
            Not After : Mar 31 06:31:22 2026 GMT
        Subject: CN=ACE9E154E505B7B833B80B0362F16A36921AC6D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:51:3b:77:69:52:a1:5c:2f:32:e8:13:c7:a5:
                    3c:15:d5:7c:86:d5:1d:51:66:c0:df:c1:c7:42:72:
                    19:7b:26:b8:ae:3c:a9:ca:65:15:80:47:ef:e3:70:
                    50:bf:3d:1a:e1:08:88:9e:c6:ac:b8:b3:86:93:b5:
                    37:60:1a:15:86:4c:86:1a:67:87:9b:0b:2d:c0:f8:
                    73:cd:64:c0:88:f5:ef:f3:a6:82:a8:7b:76:84:f7:
                    81:43:3d:32:68:c9:cf:53:c6:08:a6:42:9d:90:bc:
                    2f:28:f9:2a:09:5c:22:67:aa:f4:4d:ca:0d:7f:e5:
                    35:94:72:f6:a5:31:59:36:4d:58:9b:f1:b0:ca:4e:
                    8c:84:1d:7b:95:27:8d:b4:6b:d8:34:af:a1:d5:06:
                    a1:ed:9e:9f:15:90:23:98:17:c6:29:57:67:16:49:
                    92:63:62:3c:9b:73:02:6a:55:59:99:31:76:4e:84:
                    ec:55:38:25:70:cf:ff:62:d9:22:26:01:64:d8:f3:
                    79:a7:91:a9:1d:5d:1c:47:0a:b6:75:a8:97:bc:f7:
                    26:18:e1:13:b0:20:1e:e5:e8:a5:7f:35:18:c0:7a:
                    63:80:a1:fc:8f:3f:e6:cd:d7:f5:2b:79:2b:de:cf:
                    2f:75:4b:ca:82:ef:36:c5:c8:49:ee:f3:07:fd:3a:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E9:E1:54:E5:05:B7:B8:33:B8:0B:03:62:F1:6A:36:92:1A:C6:D5
            X509v3 Authority Key Identifier:
                keyid:3F:0A:C2:5D:35:2C:83:DA:83:07:59:4B:98:ED:06:1B:E8:48:96:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/326130613a363034303a326431303a3a2f34342d3435203d3e20313436393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2d10::/44

    Signature Algorithm: sha256WithRSAEncryption
         3d:23:e6:85:4d:d9:a4:e8:3e:03:ed:b7:c9:bc:47:f5:c4:ea:
         31:e1:3a:3e:16:48:47:dc:20:f5:77:94:ce:54:52:39:02:77:
         b8:df:08:b5:77:e9:20:9b:24:ec:c5:aa:6e:9f:20:38:f6:39:
         22:ed:79:bc:af:72:c3:27:e8:cf:82:60:5f:50:80:cf:a8:d4:
         f9:1d:70:9b:9d:55:38:7c:e8:44:c4:61:67:f4:d5:8f:e4:30:
         56:d8:7e:ca:0e:29:e9:17:fd:e3:1e:4b:6f:9d:d5:2c:84:fa:
         a5:e2:2b:fe:95:ad:44:b2:45:2a:85:f0:01:7f:d7:42:80:08:
         6c:b8:31:c2:30:63:66:2c:a1:48:80:87:e0:73:f1:cc:36:ac:
         61:a4:38:6d:39:46:34:4b:38:fe:90:31:fe:e2:e9:c1:8d:32:
         87:58:28:6c:69:eb:a7:3b:f3:62:90:79:22:de:32:e1:da:a3:
         14:af:98:35:42:ef:f5:07:fc:ff:1a:b0:4b:ba:0c:d3:6d:db:
         e0:d8:87:c1:92:c4:fa:93:33:79:dc:46:99:be:b7:3e:ef:e9:
         8e:a6:5d:09:df:af:ea:9d:48:a6:0e:45:4d:6f:1e:cf:49:6b:
         54:d6:35:cc:56:26:ba:0e:7a:f1:d8:0e:c7:fc:82:c9:9a:35:
         d4:1d:c8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:41:08 2025 by rpki-client