Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/BerryByte/2/326130613a363034303a623030623a3a2f34382d3438203d3e20323134333730.roa
File:                     326130613a363034303a623030623a3a2f34382d3438203d3e20323134333730.roa (raw, json)
Hash identifier:          q9yBxJrV2vQu5aYCdjg+zns4I6yiirWRJ2fRwSvGxSo=
Subject key identifier:   63:84:8F:4B:47:5B:EE:77:4A:C8:B6:08:C8:61:7A:F9:34:E4:F0:06
Certificate issuer:       /CN=85F2469BD62AF070F48839CBBB5D9B8085BDADF1
Certificate serial:       65C0223ED59C3595AB08A076C89F34FB544B8871
Authority key identifier: 85:F2:46:9B:D6:2A:F0:70:F4:88:39:CB:BB:5D:9B:80:85:BD:AD:F1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.cer
Subject info access:      rsync://rpki.cc/repo/BerryByte/2/326130613a363034303a623030623a3a2f34382d3438203d3e20323134333730.roa
Signing time:             Fri 05 Jun 2026 09:04:24 +0000
ROA not before:           Fri 05 Jun 2026 08:59:24 +0000
ROA not after:            Fri 04 Jun 2027 09:04:24 +0000
asID:                     214370
IP address blocks:        2a0a:6040:b00b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/BerryByte/2/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.crl
                          rsync://rpki.cc/repo/BerryByte/2/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 06:24:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c0:22:3e:d5:9c:35:95:ab:08:a0:76:c8:9f:34:fb:54:4b:88:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F2469BD62AF070F48839CBBB5D9B8085BDADF1
        Validity
            Not Before: Jun  5 08:59:24 2026 GMT
            Not After : Jun  4 09:04:24 2027 GMT
        Subject: CN=63848F4B475BEE774AC8B608C8617AF934E4F006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:39:e9:a9:b7:fd:e1:1f:68:1b:1c:02:ac:85:
                    d7:8e:58:63:f6:c6:8d:d1:f4:fd:b0:ca:c4:d6:0e:
                    9f:81:05:ff:04:3f:bb:64:09:a0:30:0b:c0:d1:c1:
                    d3:fd:5d:85:e3:14:1b:01:93:fa:f2:da:9f:eb:ee:
                    73:c1:74:57:da:d1:87:c4:9d:db:17:33:a4:d6:4c:
                    02:64:d6:c1:9a:e0:85:1a:ab:f5:d6:71:a0:f2:c6:
                    34:7f:5e:f6:fa:a8:27:c5:08:3e:bc:e2:a4:de:7d:
                    36:64:fd:12:d7:8b:01:70:28:a6:70:6a:3c:ff:14:
                    0b:3a:37:5e:f5:58:09:85:c8:66:96:0b:36:df:3a:
                    5d:a2:a0:9a:9f:69:8b:05:08:7e:8d:56:ea:09:9b:
                    79:d2:e4:af:e7:7d:26:38:6e:27:2c:26:56:00:cb:
                    ce:3d:bf:9c:69:df:f3:3d:7e:33:cd:a9:9e:f7:e6:
                    88:3f:2a:b9:4c:cf:1f:b4:43:3f:9a:3a:a4:71:fa:
                    5c:b6:ab:e1:6b:73:b5:a4:b3:32:1a:07:c6:f2:6b:
                    7d:ee:db:7c:fa:2a:a4:e3:93:7e:22:44:c5:00:c0:
                    1b:c8:55:f8:b5:5b:b1:cc:97:0c:98:80:0a:ce:84:
                    26:f0:bf:02:fb:54:03:81:68:ef:1d:24:ff:8e:3d:
                    2a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:84:8F:4B:47:5B:EE:77:4A:C8:B6:08:C8:61:7A:F9:34:E4:F0:06
            X509v3 Authority Key Identifier:
                keyid:85:F2:46:9B:D6:2A:F0:70:F4:88:39:CB:BB:5D:9B:80:85:BD:AD:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/BerryByte/2/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/BerryByte/2/326130613a363034303a623030623a3a2f34382d3438203d3e20323134333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:21:98:9a:d2:55:d2:e2:aa:63:40:58:d6:b1:dd:61:ca:f3:
         2d:5b:41:c9:54:e6:a2:d1:98:2e:48:59:62:9c:09:47:2e:ec:
         e8:bd:e9:96:33:aa:3a:2c:0f:b6:9b:a2:1b:e3:ed:08:f6:1f:
         e7:15:0c:c0:75:aa:94:80:c9:5c:d1:d6:1a:4c:f8:d9:44:8e:
         88:94:78:c8:e7:f5:1a:bf:3a:88:eb:7e:8c:b0:f3:d0:73:4b:
         37:1d:b1:b0:12:37:3e:c1:9f:28:24:c9:a7:a6:cd:9b:c9:06:
         db:07:9d:e0:44:7e:3b:a3:72:39:0f:4a:eb:07:38:e0:be:bc:
         15:ea:c3:30:79:11:d8:8c:9b:ee:be:4e:23:88:3d:01:d1:37:
         dc:47:62:7d:28:d8:b8:ac:66:15:ea:05:41:cb:d4:18:96:3b:
         e9:6b:ed:8a:b7:6d:6f:1b:0a:c8:03:63:76:04:3c:f0:dd:42:
         ac:14:be:ca:0e:84:f3:e9:7e:e6:6a:9b:db:f2:bb:32:8d:2d:
         78:f3:0f:a9:1a:8d:52:e6:22:99:fd:b7:5a:e6:93:ff:2c:a6:
         39:17:cd:f5:40:a7:7e:32:06:1f:d4:2d:c7:c1:ca:67:18:e2:
         75:cd:c1:b6:5c:dc:48:07:74:ee:96:c8:da:ca:ae:ca:ce:a1:
         ce:07:a5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:07:33 2026 by rpki-client