Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/BerryByte/2/326130613a363034303a623030303a3a2f34302d3438203d3e20323034383537.roa
File:                     326130613a363034303a623030303a3a2f34302d3438203d3e20323034383537.roa (raw, json)
Hash identifier:          SspOD7P7ZZDVFTgSmqdxcfDSDvq80LnrctwN6uFdqnk=
Subject key identifier:   DC:40:51:79:82:E9:2B:39:17:E7:85:8D:8D:5C:4C:08:CA:B3:FD:DC
Certificate issuer:       /CN=85F2469BD62AF070F48839CBBB5D9B8085BDADF1
Certificate serial:       10930F8016CD63F73176AB0780D5C944116DE97F
Authority key identifier: 85:F2:46:9B:D6:2A:F0:70:F4:88:39:CB:BB:5D:9B:80:85:BD:AD:F1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.cer
Subject info access:      rsync://rpki.cc/repo/BerryByte/2/326130613a363034303a623030303a3a2f34302d3438203d3e20323034383537.roa
Signing time:             Fri 05 Jun 2026 09:04:24 +0000
ROA not before:           Fri 05 Jun 2026 08:59:24 +0000
ROA not after:            Fri 04 Jun 2027 09:04:24 +0000
asID:                     204857
IP address blocks:        2a0a:6040:b000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/BerryByte/2/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.crl
                          rsync://rpki.cc/repo/BerryByte/2/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 17:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:93:0f:80:16:cd:63:f7:31:76:ab:07:80:d5:c9:44:11:6d:e9:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F2469BD62AF070F48839CBBB5D9B8085BDADF1
        Validity
            Not Before: Jun  5 08:59:24 2026 GMT
            Not After : Jun  4 09:04:24 2027 GMT
        Subject: CN=DC40517982E92B3917E7858D8D5C4C08CAB3FDDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8f:9c:ca:e8:ad:aa:f8:40:15:42:16:03:dc:
                    66:1a:0a:e1:4f:84:6a:b9:14:ab:97:23:22:cc:e1:
                    ee:65:0f:a0:2d:42:4c:62:73:ae:ec:05:ba:09:54:
                    81:6c:45:1f:1d:13:48:50:ec:9c:3b:b9:18:5b:91:
                    37:02:0c:57:de:f3:eb:6f:01:90:81:3a:73:a9:a9:
                    73:12:ff:8a:26:42:38:79:5a:e6:a0:54:13:1b:b2:
                    d2:25:0a:76:3f:72:22:2c:64:f3:20:10:48:c4:fb:
                    08:93:62:4c:7b:c7:df:66:ca:07:7a:bf:89:55:51:
                    1d:72:91:b7:28:7c:76:85:34:c9:46:2f:60:3f:79:
                    7b:7b:33:12:03:ea:a8:bd:ce:c2:bf:54:d0:bc:f5:
                    66:99:4b:cf:05:27:81:44:d3:60:6e:9d:1b:e5:ab:
                    d6:41:7b:67:0d:28:be:ec:d3:fa:3a:11:b0:9a:c6:
                    d8:e9:bc:ca:77:d5:95:f9:b4:75:4a:9e:45:4d:13:
                    5f:b9:1b:89:ca:64:c5:08:82:6d:86:1a:55:36:73:
                    be:4b:92:48:d0:23:75:8a:2d:e0:4b:a4:f6:47:3c:
                    74:05:5a:37:79:8c:23:cf:c1:bd:e0:e1:e0:89:72:
                    49:e7:68:ce:5f:1f:ea:b8:48:3a:cd:e4:c7:bc:24:
                    26:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:40:51:79:82:E9:2B:39:17:E7:85:8D:8D:5C:4C:08:CA:B3:FD:DC
            X509v3 Authority Key Identifier:
                keyid:85:F2:46:9B:D6:2A:F0:70:F4:88:39:CB:BB:5D:9B:80:85:BD:AD:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/BerryByte/2/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/BerryByte/2/326130613a363034303a623030303a3a2f34302d3438203d3e20323034383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:db:1f:af:a1:20:19:51:a7:d7:63:2c:ed:27:1c:88:a8:22:
         68:72:44:8d:0e:47:15:3a:fe:9d:61:5f:63:f0:35:a9:7d:23:
         3f:c6:10:77:59:00:6c:79:f3:92:2e:90:7d:86:a8:92:44:ab:
         4a:9d:88:73:63:73:39:24:92:de:f3:3f:b9:83:07:01:ea:49:
         8f:c6:04:a0:5d:ca:02:48:24:0e:e9:37:39:aa:70:06:01:a6:
         34:52:a8:aa:cb:20:3d:da:10:dd:61:7d:ef:54:91:1d:1d:72:
         80:0c:9d:1e:8c:a3:16:f8:6d:db:56:8c:8c:fc:35:b4:77:57:
         88:1e:70:52:e5:85:85:38:71:97:64:38:e1:1b:9a:05:b9:e3:
         e9:8e:63:04:fc:f3:d3:d5:40:90:d1:21:0c:b4:1a:bf:7d:e8:
         51:2c:3b:8f:da:41:d6:c6:eb:3d:96:71:be:f4:92:85:ca:35:
         10:52:a8:cf:be:46:46:5e:a6:c5:91:7d:9a:2f:29:bc:af:c5:
         df:f9:ec:80:de:ba:78:08:45:92:98:13:2c:5d:95:68:ea:21:
         54:66:a0:02:5b:bf:7f:c2:60:ef:bf:2f:64:04:51:58:6e:21:
         76:df:81:86:b7:a1:19:21:12:af:74:ff:27:d6:2f:cb:b3:ff:
         45:31:8e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:15:46 2026 by rpki-client