Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/BerryByte/2/326130613a363034303a623030303a3a2f34302d3438203d3e20323034383537.roa
File:                     326130613a363034303a623030303a3a2f34302d3438203d3e20323034383537.roa (raw, json)
Hash identifier:          pPwLCiP/DuQR/8xl8FdNQH0X57kRb6rFj5JDffSqmCg=
Subject key identifier:   96:79:4C:8D:80:A6:C3:5F:18:EE:7C:5E:1B:5A:0A:83:BE:C2:D8:00
Certificate issuer:       /CN=85F2469BD62AF070F48839CBBB5D9B8085BDADF1
Certificate serial:       718E422DE92886F55B8B945E3DF91CD3CAE37B55
Authority key identifier: 85:F2:46:9B:D6:2A:F0:70:F4:88:39:CB:BB:5D:9B:80:85:BD:AD:F1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.cer
Subject info access:      rsync://rpki.cc/repo/BerryByte/2/326130613a363034303a623030303a3a2f34302d3438203d3e20323034383537.roa
Signing time:             Fri 04 Jul 2025 08:58:12 +0000
ROA not before:           Fri 04 Jul 2025 08:53:12 +0000
ROA not after:            Fri 03 Jul 2026 08:58:12 +0000
asID:                     204857
IP address blocks:        2a0a:6040:b000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/BerryByte/2/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.crl
                          rsync://rpki.cc/repo/BerryByte/2/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8e:42:2d:e9:28:86:f5:5b:8b:94:5e:3d:f9:1c:d3:ca:e3:7b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F2469BD62AF070F48839CBBB5D9B8085BDADF1
        Validity
            Not Before: Jul  4 08:53:12 2025 GMT
            Not After : Jul  3 08:58:12 2026 GMT
        Subject: CN=96794C8D80A6C35F18EE7C5E1B5A0A83BEC2D800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:00:00:99:d8:5d:24:f4:1e:23:a4:d1:ea:07:
                    b5:24:74:ed:5f:3a:6c:37:30:59:2a:75:4e:10:22:
                    ad:b2:b2:a3:82:ec:b5:81:bd:b9:60:0d:38:0f:86:
                    4c:38:b9:31:4c:9f:4e:87:a0:3e:45:47:d5:d8:10:
                    a5:5c:b1:be:ee:6d:50:d0:74:ae:61:a6:4f:6b:90:
                    9b:c4:b6:f2:42:6c:d1:e3:f3:43:b9:7c:12:d2:df:
                    4f:79:23:1c:3f:6d:2a:6a:a3:42:7e:53:01:51:64:
                    66:fd:a2:5a:83:f3:af:25:9c:1e:2d:5f:70:2b:dd:
                    d0:60:2b:02:35:e4:35:88:04:92:60:d0:22:d4:88:
                    b5:3c:c5:f8:ae:47:dd:49:fe:8c:06:02:ef:85:ef:
                    60:f6:c8:2c:a3:0d:d9:18:76:94:3a:ab:cf:bc:f3:
                    a2:c2:33:6c:79:59:22:d0:c9:48:96:09:73:79:3b:
                    23:86:75:07:29:43:30:7e:57:3b:6d:51:f6:84:84:
                    11:60:51:87:dc:82:e8:48:9a:fb:0e:66:a8:ce:6a:
                    43:d8:f0:7a:29:3b:46:08:cb:fb:ab:03:f3:35:d9:
                    f2:aa:ae:df:ae:92:26:82:53:18:64:20:74:60:72:
                    3f:6f:89:3c:b6:2d:be:62:db:ef:73:14:bc:f6:db:
                    bd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:79:4C:8D:80:A6:C3:5F:18:EE:7C:5E:1B:5A:0A:83:BE:C2:D8:00
            X509v3 Authority Key Identifier:
                keyid:85:F2:46:9B:D6:2A:F0:70:F4:88:39:CB:BB:5D:9B:80:85:BD:AD:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/BerryByte/2/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/BerryByte/2/326130613a363034303a623030303a3a2f34302d3438203d3e20323034383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:0b:b1:c3:34:cb:68:da:b3:40:eb:25:16:61:0d:86:dd:36:
         6e:ce:67:0e:02:2d:5c:4c:26:72:a0:de:7f:7a:54:ad:8e:a7:
         d7:e9:31:1b:70:67:4e:e6:92:b3:ea:a8:42:3d:8f:6e:58:9c:
         cd:29:a7:81:2e:33:4d:4f:1d:16:1e:5a:f0:84:32:e4:26:ba:
         52:ad:62:00:f0:87:16:af:d6:e9:5c:b5:04:1c:21:4b:03:12:
         25:90:49:95:ca:3c:d5:21:28:7c:d0:1e:54:77:bc:81:5c:65:
         90:3f:76:1c:e4:67:64:41:a4:28:58:a8:1b:69:0d:5f:13:48:
         f5:8a:a3:8c:a9:c0:85:db:49:bc:2b:4d:bf:13:8c:7b:0a:b2:
         7e:9b:bd:fb:21:c0:75:b7:50:4b:2f:84:8c:1c:8e:9b:21:9a:
         db:fe:55:1c:21:99:33:0a:bb:eb:54:c3:5e:c4:43:7f:88:8e:
         7f:7e:c1:b4:94:96:eb:f5:b1:b4:7e:47:d3:43:39:9b:eb:ce:
         5f:0d:f0:57:9a:d5:6d:ae:5b:4c:a8:6e:da:15:78:2f:b3:8c:
         02:59:2e:94:2d:16:c2:45:f0:04:cd:d0:d7:cf:7a:27:2d:e2:
         f7:1f:15:18:00:2c:cd:91:fa:55:de:6e:a7:5e:e0:43:da:c9:
         de:fa:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:32:22 2025 by rpki-client