Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/BerryByte/2/326130613a363034303a623030623a3a2f34382d3438203d3e20323134333730.roa
File:                     326130613a363034303a623030623a3a2f34382d3438203d3e20323134333730.roa (raw, json)
Hash identifier:          ckp76OrO2ZNLybQCLYBHlTvdpZKA3EFR8L6jYAkv114=
Subject key identifier:   22:32:24:FA:98:2D:91:2E:3F:4B:5D:0B:2A:65:F7:B8:4B:F6:83:93
Certificate issuer:       /CN=85F2469BD62AF070F48839CBBB5D9B8085BDADF1
Certificate serial:       4EE70B25C3F493A7AF5B87C6950D38D2036E08F0
Authority key identifier: 85:F2:46:9B:D6:2A:F0:70:F4:88:39:CB:BB:5D:9B:80:85:BD:AD:F1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.cer
Subject info access:      rsync://rpki.cc/repo/BerryByte/2/326130613a363034303a623030623a3a2f34382d3438203d3e20323134333730.roa
Signing time:             Fri 04 Jul 2025 08:58:12 +0000
ROA not before:           Fri 04 Jul 2025 08:53:12 +0000
ROA not after:            Fri 03 Jul 2026 08:58:12 +0000
asID:                     214370
IP address blocks:        2a0a:6040:b00b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/BerryByte/2/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.crl
                          rsync://rpki.cc/repo/BerryByte/2/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e7:0b:25:c3:f4:93:a7:af:5b:87:c6:95:0d:38:d2:03:6e:08:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F2469BD62AF070F48839CBBB5D9B8085BDADF1
        Validity
            Not Before: Jul  4 08:53:12 2025 GMT
            Not After : Jul  3 08:58:12 2026 GMT
        Subject: CN=223224FA982D912E3F4B5D0B2A65F7B84BF68393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4c:4b:d7:06:4e:8c:d6:ab:be:c7:16:91:28:
                    57:d1:13:19:45:85:d0:39:a1:33:4c:7a:ad:c6:09:
                    f1:78:6e:f8:d7:7c:0b:07:1a:43:9b:e9:51:51:0d:
                    a5:68:b5:b9:bd:52:a2:64:4b:b3:85:58:06:dd:81:
                    58:f9:d7:0a:de:ed:10:c1:e4:3a:8f:64:47:dd:72:
                    64:76:0c:c2:7d:80:e9:fe:fe:41:82:02:34:44:6c:
                    e1:ad:c0:aa:82:b7:15:a0:d6:62:da:a9:02:2d:5b:
                    08:d1:81:a1:8c:b5:2a:29:c3:43:ac:ae:ed:5c:87:
                    f4:02:e8:98:3f:d7:22:41:ad:fe:99:54:d2:79:87:
                    ab:50:97:12:c6:fc:75:d0:01:57:fd:b1:12:7b:5f:
                    ce:8e:ec:88:74:5f:7d:a8:08:8d:90:b5:6f:70:b2:
                    ca:dc:bd:6e:06:34:d7:41:09:b5:4c:96:60:29:85:
                    4b:77:8b:49:33:d2:1e:d7:47:d9:2f:f5:fb:83:83:
                    8d:e0:41:2c:37:6a:34:be:3a:21:6b:2a:41:59:42:
                    f2:f2:2f:e2:e8:3d:2e:68:aa:3b:e9:a4:2d:35:d0:
                    ef:22:3d:e7:32:0a:b5:78:dc:0d:d2:fd:e2:ab:3b:
                    c9:6d:c3:a4:48:63:44:32:b3:99:20:cd:cc:82:a4:
                    2f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:32:24:FA:98:2D:91:2E:3F:4B:5D:0B:2A:65:F7:B8:4B:F6:83:93
            X509v3 Authority Key Identifier:
                keyid:85:F2:46:9B:D6:2A:F0:70:F4:88:39:CB:BB:5D:9B:80:85:BD:AD:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/BerryByte/2/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/BerryByte/2/326130613a363034303a623030623a3a2f34382d3438203d3e20323134333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:df:0b:c2:5b:a9:d6:ca:ed:88:7d:c2:90:ac:0f:24:29:cb:
         c0:2a:f6:de:b2:6d:18:27:35:f3:24:3e:68:4a:e3:7a:de:12:
         1c:75:2a:c7:1e:ff:e7:d3:24:78:94:40:62:8f:42:92:77:a0:
         c0:bc:90:c3:46:44:f6:ae:1f:1e:3a:ed:d0:db:a4:a3:bc:e5:
         67:bc:69:7b:ca:0e:4b:1c:18:1a:07:5e:a8:49:5b:61:6c:1d:
         ef:2b:0f:85:f4:4b:5b:97:ef:07:5a:f8:05:59:48:ef:11:86:
         20:df:32:c4:1b:0c:95:34:9d:59:fb:a1:ee:88:78:75:80:6d:
         b0:39:ad:fd:6d:be:44:70:5b:e2:0d:ad:97:bf:7a:e4:3e:75:
         03:79:6b:2c:e4:7b:21:37:74:87:cd:cb:21:3e:59:b5:8c:c2:
         6c:0f:b9:ab:5f:60:ef:8a:05:79:3f:d4:03:c9:6c:e8:ac:e4:
         9b:9e:37:a9:cd:73:90:85:64:04:ab:0c:80:27:e4:69:e7:62:
         25:40:51:c4:aa:18:3d:4a:5e:f1:be:c9:18:e1:99:b9:19:71:
         9f:4d:37:e7:ac:39:e0:6d:19:0f:19:5c:72:c2:59:9f:1c:81:
         48:79:ed:41:a7:a6:24:a0:09:94:42:78:2f:26:b6:f6:cf:10:
         b0:b2:4e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:17:57 2025 by rpki-client