Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/BerryByte/2/326130613a363034303a623030303a3a2f34302d3430203d3e203539393230.roa
File:                     326130613a363034303a623030303a3a2f34302d3430203d3e203539393230.roa (raw, json)
Hash identifier:          cHS+R6OBeQ2r4A/Qr0uIqty6ESLETvoBhWvKi08aG7w=
Subject key identifier:   99:A5:75:3D:77:80:43:54:2A:F1:80:2B:42:3E:16:EA:64:36:B5:BC
Certificate issuer:       /CN=85F2469BD62AF070F48839CBBB5D9B8085BDADF1
Certificate serial:       3793D00C02931276BAC73C09F9B3B2BB97305E0A
Authority key identifier: 85:F2:46:9B:D6:2A:F0:70:F4:88:39:CB:BB:5D:9B:80:85:BD:AD:F1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.cer
Subject info access:      rsync://rpki.cc/repo/BerryByte/2/326130613a363034303a623030303a3a2f34302d3430203d3e203539393230.roa
Signing time:             Fri 05 Jun 2026 09:04:24 +0000
ROA not before:           Fri 05 Jun 2026 08:59:24 +0000
ROA not after:            Fri 04 Jun 2027 09:04:24 +0000
asID:                     59920
IP address blocks:        2a0a:6040:b000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.cc/repo/BerryByte/2/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.crl
                          rsync://rpki.cc/repo/BerryByte/2/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:93:d0:0c:02:93:12:76:ba:c7:3c:09:f9:b3:b2:bb:97:30:5e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F2469BD62AF070F48839CBBB5D9B8085BDADF1
        Validity
            Not Before: Jun  5 08:59:24 2026 GMT
            Not After : Jun  4 09:04:24 2027 GMT
        Subject: CN=99A5753D778043542AF1802B423E16EA6436B5BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:a7:1f:db:b6:f1:0b:25:61:e7:4e:e6:f9:
                    96:68:89:72:85:c1:6f:07:09:37:1a:78:cc:ef:18:
                    4b:3c:66:43:9f:68:d2:12:c8:d6:3f:11:0e:0a:d8:
                    f2:68:78:ff:3b:12:91:09:df:6e:ef:a9:29:9d:51:
                    b4:9d:95:c6:7f:e0:57:a7:43:24:b9:92:07:cd:96:
                    b3:3d:19:c7:e5:2d:dd:5a:88:fa:75:66:4d:78:a5:
                    cd:9f:7d:95:5e:f1:af:4f:5b:bb:0c:5a:a9:26:d0:
                    04:9a:47:8c:92:4e:25:d4:be:5e:5b:94:2c:17:ef:
                    93:0b:91:03:43:2d:f8:48:a5:60:a0:62:d5:07:0f:
                    0f:4e:f9:65:e6:ee:64:f7:03:e4:c9:a9:80:86:3a:
                    fc:6e:69:95:20:56:e4:55:b6:56:4a:8d:8e:3f:9e:
                    2f:38:b2:bd:49:67:92:de:d0:de:1a:60:b9:af:30:
                    e6:fd:2c:94:92:3c:10:2a:6d:80:ea:f4:a9:71:09:
                    b9:af:42:2e:d9:a8:a6:bd:2b:4d:f8:d9:dd:40:3d:
                    4d:fd:d1:95:bf:3c:25:ec:d8:79:69:05:ce:68:dd:
                    34:6d:57:a4:3d:f0:45:c9:be:31:8e:18:f8:44:cb:
                    b4:45:37:5b:30:ca:0f:85:03:3a:de:e4:6e:7e:c9:
                    ff:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A5:75:3D:77:80:43:54:2A:F1:80:2B:42:3E:16:EA:64:36:B5:BC
            X509v3 Authority Key Identifier:
                keyid:85:F2:46:9B:D6:2A:F0:70:F4:88:39:CB:BB:5D:9B:80:85:BD:AD:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/BerryByte/2/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/BerryByte/2/326130613a363034303a623030303a3a2f34302d3430203d3e203539393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         94:11:8a:99:eb:15:45:f9:fc:2f:0c:d2:5a:ab:5b:40:f1:0a:
         f1:e7:e4:49:a7:27:1e:a1:dd:cf:69:2a:39:87:a3:23:ed:11:
         3f:d4:2d:1b:6f:8e:46:63:c3:54:f0:81:92:f6:49:e8:8d:31:
         b2:04:76:ff:ca:fd:a1:12:fe:be:49:e1:6d:44:9e:59:aa:ad:
         6d:18:43:68:6d:9e:e1:b7:30:e2:5d:57:d4:d9:37:dc:b9:6b:
         98:97:dd:46:5a:e0:c6:4e:44:4d:d0:57:e4:2b:f4:ec:de:60:
         0e:fa:98:ef:0a:18:3d:4b:af:28:ec:a0:1c:36:6f:6a:49:51:
         7a:74:74:d1:60:02:bc:25:db:b2:10:0a:8f:37:ed:51:6a:57:
         fb:f0:66:04:8d:e3:6a:ff:4d:53:d3:0a:fe:97:41:a0:33:d3:
         9f:f1:35:4b:1f:43:e5:67:32:c2:ec:0c:25:62:ae:ff:6c:56:
         45:2a:53:5d:b4:bc:1d:b2:b6:7a:46:c3:2a:02:a9:8d:3b:41:
         c9:89:f0:56:4f:78:34:64:4e:e8:4c:d8:3b:f7:53:b2:f0:0c:
         5d:6d:26:1f:51:4e:e0:da:47:7d:58:a7:87:85:2a:c5:53:f9:
         a8:3e:fc:64:d5:b9:ff:be:71:9f:67:36:ac:04:6e:05:f0:b4:
         ae:71:bf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:51:20 2026 by rpki-client