Route Origin Authorization

$ rpki-client -vvf rpki.pudu.be/repo/pudu/3/326130373a353463313a343166663a3a2f34382d3438203d3e203536373632.roa
File:                     326130373a353463313a343166663a3a2f34382d3438203d3e203536373632.roa (raw, json)
Hash identifier:          d5u5k+3/rjeFAbZMAZL2Vjbr4aRvWxZsoNuduoSU1fw=
Subject key identifier:   B4:62:CE:A7:6E:C3:6A:38:75:30:E8:BA:A8:66:30:EA:B2:37:0F:6A
Certificate issuer:       /CN=36E709368620BD63612D7AF179D2A786396A87A5
Certificate serial:       67DEF1D6D413B89C42E7B03954F927585000035F
Authority key identifier: 36:E7:09:36:86:20:BD:63:61:2D:7A:F1:79:D2:A7:86:39:6A:87:A5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/3/326130373a353463313a343166663a3a2f34382d3438203d3e203536373632.roa
Signing time:             Sat 05 Jul 2025 13:18:09 +0000
ROA not before:           Sat 05 Jul 2025 13:13:09 +0000
ROA not after:            Sat 04 Jul 2026 13:18:09 +0000
asID:                     56762
IP address blocks:        2a07:54c1:41ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.crl
                          rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 17:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:de:f1:d6:d4:13:b8:9c:42:e7:b0:39:54:f9:27:58:50:00:03:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E709368620BD63612D7AF179D2A786396A87A5
        Validity
            Not Before: Jul  5 13:13:09 2025 GMT
            Not After : Jul  4 13:18:09 2026 GMT
        Subject: CN=B462CEA76EC36A387530E8BAA86630EAB2370F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:76:7a:fc:6b:a5:2d:42:b9:3c:b2:08:04:
                    cb:1b:6d:86:61:a1:95:74:25:90:7a:e6:5f:f8:74:
                    f2:30:4b:d3:86:1f:a8:44:c3:f8:b8:99:aa:38:09:
                    6b:72:34:8e:69:f6:23:e4:57:28:31:f4:45:5c:9f:
                    7c:7a:2e:42:b8:f5:b9:79:a9:01:75:8f:89:d1:4e:
                    1f:d1:a4:d1:4c:5b:2c:95:1e:54:cc:fe:d8:ea:de:
                    e3:96:fa:b2:fb:ba:38:2d:6e:a9:a1:0f:8e:4b:7b:
                    f6:e3:7f:e2:15:2c:d0:f3:aa:41:e1:05:75:4b:ff:
                    fa:de:d4:75:f6:1b:da:2f:ba:a8:c6:5c:a9:89:e2:
                    bc:ad:a4:79:6a:54:cc:99:e3:c4:d9:6a:e6:06:72:
                    ec:ce:c6:ce:14:f6:27:fc:62:44:52:f3:47:2c:9b:
                    ea:8d:bd:c0:08:14:07:75:c9:4a:86:d2:ec:e3:53:
                    32:46:39:fb:37:d8:e3:4f:0a:5e:13:1c:70:1f:b6:
                    28:56:e3:de:ac:df:d6:04:db:86:87:69:89:4b:b2:
                    74:cd:31:e7:36:91:4c:8b:d0:4c:02:90:d2:94:cc:
                    ab:cd:1f:ff:3f:e1:3f:f7:8d:52:5b:4f:4a:61:73:
                    00:2a:64:c2:d2:7a:eb:fc:8c:20:6d:c2:85:d6:bd:
                    c4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:62:CE:A7:6E:C3:6A:38:75:30:E8:BA:A8:66:30:EA:B2:37:0F:6A
            X509v3 Authority Key Identifier:
                keyid:36:E7:09:36:86:20:BD:63:61:2D:7A:F1:79:D2:A7:86:39:6A:87:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/3/326130373a353463313a343166663a3a2f34382d3438203d3e203536373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:41ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:15:eb:81:a5:77:f5:d4:19:e4:ab:c7:06:2f:32:00:2b:e0:
         7c:45:13:c6:47:77:25:d9:e3:62:3a:39:06:b8:8e:dc:84:d0:
         16:49:c6:c4:1d:73:19:ce:eb:5d:64:99:33:10:36:0b:97:d0:
         64:22:40:33:99:b7:ac:f9:ed:fb:06:23:5a:dd:bf:ac:82:7b:
         6f:7b:09:bb:25:b6:ec:01:f2:82:1b:cc:8f:1c:4d:a1:82:1b:
         1e:71:e1:8d:59:0b:1b:7e:d1:95:a4:c0:a3:cd:a2:f6:d1:cf:
         91:bf:5c:dc:61:88:b9:b7:66:2a:44:7d:b8:45:48:3e:43:9e:
         59:1f:a6:fe:0d:66:fd:b2:66:82:cd:b6:c7:d6:be:61:94:06:
         f3:94:df:23:f6:27:61:2e:77:ed:aa:34:3d:b9:e7:00:90:10:
         91:a9:20:fb:a3:17:e2:2e:01:e3:32:21:51:a3:8c:38:09:cb:
         1c:d6:d3:1e:0d:b7:37:06:8b:b0:ec:38:b5:f7:0b:be:b0:ca:
         5a:8e:43:c9:bd:84:9f:68:5c:bb:a2:d1:3c:8f:6b:44:f8:8b:
         73:03:fd:f8:15:16:de:7f:e4:f8:51:be:10:bd:89:8a:b1:90:
         7c:92:8c:22:2b:47:df:c0:91:12:46:05:da:06:d7:87:c0:bb:
         a5:b2:30:96
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jul 6 08:52:50 2025 by rpki-client