Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa
File:                     326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (raw, json)
Hash identifier:          2zW7FUfufzUtSfzDyqzozswKwOz7JYWLwNZyMHG9MN4=
Subject key identifier:   09:25:EE:1D:79:18:1D:4D:61:76:F0:C3:14:B5:E7:D2:68:55:F5:57
Certificate issuer:       /CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
Certificate serial:       38EACDC0B7EB867F19A763E43AE65F3452EE1FCA
Authority key identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa
Signing time:             Sun 24 Sep 2023 18:11:22 +0000
ROA not before:           Sun 24 Sep 2023 18:06:22 +0000
ROA not after:            Sun 22 Sep 2024 18:11:22 +0000
asID:                     200179
IP address blocks:        2a0a:6040:4900::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 04:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ea:cd:c0:b7:eb:86:7f:19:a7:63:e4:3a:e6:5f:34:52:ee:1f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
        Validity
            Not Before: Sep 24 18:06:22 2023 GMT
            Not After : Sep 22 18:11:22 2024 GMT
        Subject: CN=0925EE1D79181D4D6176F0C314B5E7D26855F557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:c2:b8:02:85:eb:0c:b0:62:4e:ea:53:cd:
                    7b:39:f9:b6:98:d1:87:9c:51:34:7e:d9:47:1d:bd:
                    fb:3d:79:0a:82:a1:a6:f3:77:0a:46:01:fa:60:c6:
                    38:e5:f5:31:8a:14:8b:0f:f3:b8:c3:4f:71:d4:28:
                    6d:83:eb:dd:62:80:b2:57:b6:2c:59:7c:1d:9c:96:
                    f0:c4:05:21:68:2a:22:bd:64:aa:3b:54:19:20:c0:
                    ba:db:50:80:ba:ae:89:76:1e:78:35:0a:79:c2:5d:
                    e6:63:9a:e4:7b:89:09:26:84:80:57:62:d1:39:d2:
                    17:6d:08:19:c2:74:3e:e4:e2:14:fc:94:91:0a:fa:
                    be:b5:35:c3:e3:f2:45:90:16:de:0b:61:47:8c:0b:
                    c8:14:9d:47:27:a4:ce:bb:ec:04:35:b0:ee:26:55:
                    ae:1e:14:d2:c5:24:53:a2:34:a5:63:7c:3f:d0:e2:
                    52:83:2f:61:bc:65:10:a6:a1:b7:64:66:f0:5f:86:
                    21:49:e2:74:a6:db:89:3e:f5:b2:b0:81:38:b0:fe:
                    c1:bd:5b:6c:79:92:cf:9c:be:98:4b:ee:e5:fa:3d:
                    f3:38:57:d5:31:c3:f6:f7:31:1a:61:90:0e:98:1c:
                    a9:9e:0f:8b:0a:f5:7e:ab:1a:99:70:15:63:2e:25:
                    50:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:25:EE:1D:79:18:1D:4D:61:76:F0:C3:14:B5:E7:D2:68:55:F5:57
            X509v3 Authority Key Identifier:
                keyid:53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:4900::/40

    Signature Algorithm: sha256WithRSAEncryption
         b3:5c:67:5c:0a:5f:3f:a7:32:18:2e:50:e6:79:1a:b1:c0:e3:
         a7:e7:ec:4f:64:a1:e1:48:ac:b2:01:1a:c2:39:bc:a8:92:e7:
         b9:12:f3:41:8c:29:e2:cd:d7:dc:04:2f:d0:68:4d:ea:5f:ea:
         3a:7c:e9:33:14:10:2b:31:b2:92:37:51:66:0e:e7:6e:9c:b3:
         37:c3:61:2c:16:ed:91:49:5f:d5:1c:bf:ba:53:d7:a5:e6:68:
         9c:98:1a:17:4f:d5:82:af:db:04:d9:34:9e:38:eb:d0:d8:66:
         da:87:f2:0c:73:07:df:7b:98:21:32:ab:61:90:64:26:e9:77:
         d8:08:f7:05:03:f5:c9:5b:3e:06:03:d5:56:62:5f:78:91:7a:
         c5:78:3d:3c:27:81:4d:12:ac:6f:b7:cc:f5:46:fa:44:f6:d2:
         04:65:96:28:65:0f:a1:d4:68:a8:6c:03:52:df:79:61:7c:be:
         54:a0:65:51:53:b8:0c:fe:76:10:d7:2a:40:6f:73:7e:7f:ff:
         f6:6d:7d:f5:c1:90:34:ef:3f:32:59:ed:0a:5b:c0:ca:5b:83:
         51:63:17:8d:84:21:6d:bf:94:2c:5b:f3:5e:54:86:54:3c:49:
         14:93:ba:2c:2e:ea:5e:24:7a:46:31:28:00:69:69:13:e1:75:
         a2:95:52:18
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIUOOrNwLfrhn8Zp2PkOuZfNFLuH8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3Mjcw
RTNENjBFMzAeFw0yMzA5MjQxODA2MjJaFw0yNDA5MjIxODExMjJaMDMxMTAvBgNV
BAMTKDA5MjVFRTFENzkxODFENEQ2MTc2RjBDMzE0QjVFN0QyNjg1NUY1NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHcK4AoXrDLBiTupTzXs5+baY
0YecUTR+2Ucdvfs9eQqCoabzdwpGAfpgxjjl9TGKFIsP87jDT3HUKG2D691igLJX
tixZfB2clvDEBSFoKiK9ZKo7VBkgwLrbUIC6rol2Hng1CnnCXeZjmuR7iQkmhIBX
YtE50hdtCBnCdD7k4hT8lJEK+r61NcPj8kWQFt4LYUeMC8gUnUcnpM677AQ1sO4m
Va4eFNLFJFOiNKVjfD/Q4lKDL2G8ZRCmobdkZvBfhiFJ4nSm24k+9bKwgTiw/sG9
W2x5ks+cvphL7uX6PfM4V9Uxw/b3MRphkA6YHKmeD4sK9X6rGplwFWMuJVAfAgMB
AAGjggJfMIICWzAdBgNVHQ4EFgQUCSXuHXkYHU1hdvDDFLXn0mhV9VcwHwYDVR0j
BBgwFoAUU7q4qfgzeJs1PSrMFc43Jw49YOMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3
Y2EzLzAvNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3MjcwRTNENjBFMy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzUzQkFCOEE5RjgzMzc4
OUIzNTNEMkFDQzE1Q0UzNzI3MEUzRDYwRTMuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzAxNzkxYTY0LWEzNmEtNGViOS1hNmZmLWUxYzQwNzhhN2Nh
My8wLzMyNjEzMDYxM2EzNjMwMzQzMDNhMzQzOTMwMzAzYTNhMmYzNDMwMmQzNDM4
MjAzZDNlMjAzMjMwMzAzMTM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBASTANBgkqhkiG9w0B
AQsFAAOCAQEAs1xnXApfP6cyGC5Q5nkascDjp+fsT2Sh4UissgEawjm8qJLnuRLz
QYwp4s3X3AQv0GhN6l/qOnzpMxQQKzGykjdRZg7nbpyzN8NhLBbtkUlf1Ry/ulPX
peZonJgaF0/Vgq/bBNk0njjr0Nhm2ofyDHMH33uYITKrYZBkJul32Aj3BQP1yVs+
BgPVVmJfeJF6xXg9PCeBTRKsb7fM9Ub6RPbSBGWWKGUPodRoqGwDUt95YXy+VKBl
UVO4DP52ENcqQG9zfn//9m199cGQNO8/MlntClvAyluDUWMXjYQhbb+ULFvzXlSG
VDxJFJO6LC7qXiR6RjEoAGlpE+F1opVSGA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:37:37 2024 by rpki-client on console-ams.rpki-client.org