Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa
File:                     326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (raw, json)
Hash identifier:          B12DmFls+H0qkH0yc3239fgwixjYfGQa/u7XVxErqzQ=
Subject key identifier:   92:B8:A2:AB:38:FD:DD:79:1C:1C:2C:E6:E6:22:77:22:0C:68:17:00
Certificate issuer:       /CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
Certificate serial:       61D82B4F6F794C53930B0E03F8383E511E20CC0F
Authority key identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa
Signing time:             Sun 25 Aug 2024 18:41:30 +0000
ROA not before:           Sun 25 Aug 2024 18:36:30 +0000
ROA not after:            Sun 24 Aug 2025 18:41:30 +0000
asID:                     200179
IP address blocks:        2a0a:6040:4900::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d8:2b:4f:6f:79:4c:53:93:0b:0e:03:f8:38:3e:51:1e:20:cc:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
        Validity
            Not Before: Aug 25 18:36:30 2024 GMT
            Not After : Aug 24 18:41:30 2025 GMT
        Subject: CN=92B8A2AB38FDDD791C1C2CE6E62277220C681700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3e:93:fb:b1:c4:6f:b9:55:07:d5:63:56:e9:
                    f0:37:be:e3:c6:0c:79:4c:54:7c:a1:cd:0b:c7:32:
                    1f:02:72:40:a4:45:e3:75:6e:9e:61:54:37:fd:a4:
                    c0:7b:1d:97:4c:d0:db:ef:dd:e1:3d:a0:3c:3a:5a:
                    98:88:c4:9b:a7:c8:84:d7:66:02:58:95:8a:52:b6:
                    ad:4a:df:b1:15:0c:40:3e:0c:0a:82:64:cf:0c:af:
                    55:3f:af:d5:22:44:93:7e:01:48:a6:d9:1d:45:2b:
                    42:13:82:95:e5:d4:aa:b4:ac:43:b0:34:06:3c:93:
                    ae:d8:1d:78:40:7f:ce:84:ad:64:e0:dc:d2:ba:55:
                    91:36:a6:ac:54:8e:c7:c3:96:0c:b1:b6:af:d6:2a:
                    1c:50:a5:7b:66:98:74:4d:21:8c:84:71:ee:29:08:
                    bd:21:13:e1:c0:e6:5e:a1:10:c5:ad:00:c3:76:95:
                    19:b0:bd:65:9c:b1:b5:86:ea:5b:36:4b:b9:be:a0:
                    2f:ab:86:06:1b:35:fa:00:c8:92:2d:27:14:fb:14:
                    07:a3:96:e7:54:0c:9c:f2:60:d2:a7:f8:f4:ec:63:
                    b7:f6:26:85:75:de:5d:21:dd:35:d6:79:96:98:bf:
                    f8:0e:75:50:79:f0:72:dd:c2:d0:4e:83:be:87:d8:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B8:A2:AB:38:FD:DD:79:1C:1C:2C:E6:E6:22:77:22:0C:68:17:00
            X509v3 Authority Key Identifier:
                keyid:53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:4900::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:4c:bf:53:81:e0:91:25:8b:13:48:b7:b7:5b:52:29:c1:e1:
         2a:ba:ef:37:df:91:6b:7d:0b:e7:b9:10:eb:6c:22:97:0b:aa:
         85:13:a8:b2:28:31:9c:f5:2b:44:cc:da:5e:ad:9b:11:07:ad:
         89:6a:f0:d5:1a:d3:2e:d2:25:f6:51:61:1e:76:ba:e2:d5:c2:
         b8:7e:49:62:66:b3:c1:d4:9b:46:6f:5c:ff:5a:01:e6:02:3f:
         d2:c3:4a:f4:32:8e:ed:29:41:1c:23:4a:71:0f:0f:39:41:ce:
         8b:0d:66:8c:95:35:bf:5c:af:06:bc:61:33:3f:29:3e:4d:40:
         94:b6:b8:7a:ac:ee:7f:d8:4b:99:d4:83:40:f4:38:68:47:da:
         0d:4a:2f:6d:71:3c:6e:c5:f4:7f:fc:f1:53:3f:c9:a7:a3:4d:
         8b:cd:dc:f2:78:bc:4f:3e:1d:94:b1:3e:17:90:c7:15:53:0f:
         d2:a8:17:b8:4e:76:b3:0a:1a:91:89:41:c9:42:48:6d:61:71:
         67:c2:00:4c:58:be:74:c1:b8:3c:fd:7d:bf:7b:23:02:84:13:
         34:53:7a:35:3d:d2:74:f1:79:3c:85:cd:bc:1f:7c:1b:16:3f:
         f7:d7:75:12:2d:4e:23:ce:47:5d:a0:d7:f4:40:91:f9:2e:79:
         87:5d:b2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:58:16 2024 by rpki-client on console-ams.rpki-client.org