Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/BerryByte/1/326130613a363034303a623030303a3a2f34302d3430203d3e203539393230.roa
File:                     326130613a363034303a623030303a3a2f34302d3430203d3e203539393230.roa (raw, json)
Hash identifier:          JBaetqasG2qy8sUck9/1xa0g4dhZkMu1PeG215+90DY=
Subject key identifier:   AB:49:01:63:02:67:88:CD:0F:05:E5:78:61:D3:B3:34:0F:C5:B7:89
Certificate issuer:       /CN=10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1
Certificate serial:       13E8A4864095648126F7F9EACCFEDAC3071AA1B9
Authority key identifier: 10:85:8A:E8:15:A7:DD:CA:83:BE:CC:17:C1:F7:AC:0E:B7:C1:CE:B1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.cer
Subject info access:      rsync://rpki.cc/repo/BerryByte/1/326130613a363034303a623030303a3a2f34302d3430203d3e203539393230.roa
Signing time:             Tue 19 Nov 2024 13:56:14 +0000
ROA not before:           Tue 19 Nov 2024 13:51:14 +0000
ROA not after:            Tue 18 Nov 2025 13:56:14 +0000
asID:                     59920
IP address blocks:        2a0a:6040:b000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.cc/repo/BerryByte/1/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.crl
                          rsync://rpki.cc/repo/BerryByte/1/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e8:a4:86:40:95:64:81:26:f7:f9:ea:cc:fe:da:c3:07:1a:a1:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1
        Validity
            Not Before: Nov 19 13:51:14 2024 GMT
            Not After : Nov 18 13:56:14 2025 GMT
        Subject: CN=AB490163026788CD0F05E57861D3B3340FC5B789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:e5:88:10:ab:77:ae:0e:af:0e:5d:7d:1f:
                    ef:38:3b:1e:2e:6b:59:3d:cd:34:bd:83:0a:06:67:
                    a6:39:72:d1:36:01:10:1c:54:29:55:1a:2c:a7:eb:
                    c4:d5:a3:52:be:49:48:93:19:31:40:6b:ba:c7:0f:
                    9f:97:65:0b:34:1b:e4:75:db:f0:7a:65:d9:6c:1b:
                    90:68:1d:0b:4e:da:63:f2:3d:78:9a:a3:e8:6f:2e:
                    74:ca:0b:c2:8f:60:6a:c1:3a:1f:72:ec:c0:5a:e6:
                    4f:ae:38:eb:c4:fb:64:6d:b6:d6:c8:8c:a4:7c:da:
                    e5:14:3a:b2:c1:eb:d7:3c:df:86:9a:1b:c8:a5:b6:
                    ed:d4:22:4e:63:a4:0a:67:dd:aa:0e:5b:ea:ef:0a:
                    cc:b6:9b:ee:20:7e:de:0e:fd:a0:29:7f:c0:72:fd:
                    c0:16:2b:2c:46:4b:5b:8b:76:ee:e7:d2:0a:44:59:
                    3d:13:71:41:88:a7:28:ef:a6:c4:9f:ce:4a:42:78:
                    f8:f4:46:27:24:a8:ca:2c:69:b5:ee:1a:b2:bf:91:
                    53:6a:fd:4f:ec:55:6c:6e:c7:01:6e:9d:84:65:42:
                    e2:ff:f3:17:40:2c:8a:8b:f9:ba:23:d0:49:ef:b7:
                    e9:e2:e8:ae:2a:79:be:c8:14:9b:f8:a5:ba:73:5b:
                    a1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:49:01:63:02:67:88:CD:0F:05:E5:78:61:D3:B3:34:0F:C5:B7:89
            X509v3 Authority Key Identifier:
                keyid:10:85:8A:E8:15:A7:DD:CA:83:BE:CC:17:C1:F7:AC:0E:B7:C1:CE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/BerryByte/1/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/BerryByte/1/326130613a363034303a623030303a3a2f34302d3430203d3e203539393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:89:47:79:3a:02:7c:52:68:da:61:2e:bc:a3:5b:91:1a:99:
         f6:99:ac:0c:f6:57:71:1c:cc:7d:d3:c9:98:2c:20:8c:75:8a:
         cc:9a:6a:5d:02:a8:3a:2b:a1:06:7d:fb:28:9c:8d:dd:74:ce:
         a5:fc:13:12:64:c8:9a:8a:48:ae:0f:1a:03:f6:36:a1:e8:bd:
         31:38:c3:43:db:a5:f1:31:0f:87:ec:66:81:44:e8:2e:d4:38:
         d0:b7:66:c6:66:e2:44:ba:27:91:bb:01:52:b3:0e:d7:d4:a1:
         d9:b0:e0:86:07:75:20:94:99:e0:0b:5c:2b:96:82:f7:ca:7d:
         88:82:91:8c:3a:fa:df:ae:6d:00:d9:c3:09:ff:3f:ad:41:f2:
         79:88:a7:61:bd:31:56:fe:3c:e3:3e:bb:61:29:b1:c5:7c:d2:
         11:ea:7e:09:a9:f7:7c:61:f0:0c:0b:0b:09:76:60:43:41:b7:
         4e:4f:0e:19:8e:67:7d:af:f9:5b:16:5c:7e:48:6d:3b:84:b6:
         23:87:51:0a:55:36:b8:30:77:20:17:65:f5:f1:a4:de:ad:30:
         a3:36:ba:a1:33:a1:fd:06:fa:7f:e5:a2:23:4b:e2:3a:6d:16:
         84:cf:49:ab:6c:9b:ad:f5:98:d4:c4:78:55:36:ac:bc:60:a4:
         34:09:fd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:52:37 2024 by rpki-client on console-ams.rpki-client.org