Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130303a3a2f34302d3430203d3e20323033383433.roa
File:                     326130613a363034303a613130303a3a2f34302d3430203d3e20323033383433.roa (raw, json)
Hash identifier:          +VtiHSWR5Ougk5ey+gyyKXZVuWXBb16H5XRNScgesKQ=
Subject key identifier:   FF:23:69:F2:B3:55:3A:B8:45:37:D7:EA:3A:CF:4F:BF:2F:D6:96:46
Certificate issuer:       /CN=13DDCFA128DC141F076EB7B60F46359286489D55
Certificate serial:       1C73533309AEBE8BED7308D31ECF7AD860AC97D6
Authority key identifier: 13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130303a3a2f34302d3430203d3e20323033383433.roa
Signing time:             Sun 05 Nov 2023 04:27:04 +0000
ROA not before:           Sun 05 Nov 2023 04:22:04 +0000
ROA not after:            Sun 03 Nov 2024 04:27:04 +0000
asID:                     203843
IP address blocks:        2a0a:6040:a100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 10:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:73:53:33:09:ae:be:8b:ed:73:08:d3:1e:cf:7a:d8:60:ac:97:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13DDCFA128DC141F076EB7B60F46359286489D55
        Validity
            Not Before: Nov  5 04:22:04 2023 GMT
            Not After : Nov  3 04:27:04 2024 GMT
        Subject: CN=FF2369F2B3553AB84537D7EA3ACF4FBF2FD69646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2e:73:18:af:f7:92:67:75:56:5f:f4:68:40:
                    1a:40:23:95:21:f2:9c:9f:6d:55:3d:25:2f:86:da:
                    cb:d3:c6:6b:f8:45:a0:36:85:55:02:79:2c:3a:86:
                    d8:98:4c:5f:63:4b:40:dc:06:20:3b:2b:4b:1d:93:
                    d1:a2:46:cd:98:7f:27:aa:84:38:42:01:e9:d2:6c:
                    e3:04:79:f4:87:08:f5:29:b5:d6:3c:e1:2d:3b:f6:
                    c4:6a:de:78:fb:dd:36:6b:e4:3c:5d:5e:af:78:0c:
                    d6:57:54:e3:67:6c:94:4a:e9:5c:6e:a9:79:07:31:
                    68:32:34:f0:64:41:34:01:d8:93:d2:3c:f7:8a:6a:
                    af:57:c6:d6:d2:49:e0:78:09:bd:76:73:16:49:d6:
                    dc:3c:e4:4c:56:3d:90:01:94:f7:31:e0:15:06:5d:
                    a6:d3:3a:19:51:29:a3:b5:84:df:61:f9:69:0b:76:
                    65:08:33:69:54:7c:42:c0:8c:c3:da:d3:d0:21:10:
                    d9:0b:cb:2d:58:0d:61:2a:e9:a6:15:1e:00:95:74:
                    09:17:16:94:7d:a1:5c:03:04:f9:b2:a0:c1:17:6e:
                    94:b2:b4:ec:cf:31:e3:26:e9:ac:d3:30:71:90:16:
                    5d:0b:a4:49:37:a5:72:5a:84:cb:0f:d8:11:0f:76:
                    d9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:23:69:F2:B3:55:3A:B8:45:37:D7:EA:3A:CF:4F:BF:2F:D6:96:46
            X509v3 Authority Key Identifier:
                keyid:13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130303a3a2f34302d3430203d3e20323033383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a100::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:20:9c:a7:33:89:c8:68:be:4b:c6:5b:9e:0d:73:12:2a:d7:
         a5:64:cb:0d:45:92:8e:2b:5d:a2:05:46:7a:5c:67:0f:ba:e1:
         c1:2e:b0:a6:3b:bd:00:b0:5e:52:10:c8:b0:c2:c5:c7:d0:9c:
         ff:68:df:97:46:db:95:a7:d2:44:f0:28:69:a1:0b:4f:98:15:
         a2:f5:15:a8:e5:dc:b7:f7:53:b3:f5:a3:1b:ef:25:a5:29:01:
         f6:8f:29:a7:78:4d:41:5a:c4:92:f8:3a:5c:82:71:43:3b:e0:
         17:f5:9a:06:31:6f:88:be:84:84:17:c8:60:24:f1:ca:2c:d7:
         40:8f:af:2b:41:1a:bc:9a:ad:c0:6c:99:44:51:5c:e4:f5:95:
         6f:97:e8:85:55:43:69:05:4e:f6:4c:7a:ee:f1:be:87:78:41:
         fd:f0:93:0b:45:e7:6f:a9:6d:f4:7d:48:c8:35:7b:72:68:e6:
         40:99:c4:6d:aa:45:6e:18:65:9b:10:85:a7:4f:90:03:df:e5:
         af:46:cc:06:e7:9d:81:d3:f4:06:83:32:68:cf:37:4d:1a:b1:
         38:6e:26:08:88:07:4c:16:1f:05:23:20:89:5d:77:5b:e1:f4:
         bb:ff:94:48:0f:79:bd:ef:88:b8:74:94:cf:c5:73:9d:9c:1e:
         44:80:04:a4
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIUHHNTMwmuvovtcwjTHs962GCsl9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNERENGQTEyOERDMTQxRjA3NkVCN0I2MEY0NjM1OTI4
NjQ4OUQ1NTAeFw0yMzExMDUwNDIyMDRaFw0yNDExMDMwNDI3MDRaMDMxMTAvBgNV
BAMTKEZGMjM2OUYyQjM1NTNBQjg0NTM3RDdFQTNBQ0Y0RkJGMkZENjk2NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPLnMYr/eSZ3VWX/RoQBpAI5Uh
8pyfbVU9JS+G2svTxmv4RaA2hVUCeSw6htiYTF9jS0DcBiA7K0sdk9GiRs2Yfyeq
hDhCAenSbOMEefSHCPUptdY84S079sRq3nj73TZr5DxdXq94DNZXVONnbJRK6Vxu
qXkHMWgyNPBkQTQB2JPSPPeKaq9XxtbSSeB4Cb12cxZJ1tw85ExWPZABlPcx4BUG
XabTOhlRKaO1hN9h+WkLdmUIM2lUfELAjMPa09AhENkLyy1YDWEq6aYVHgCVdAkX
FpR9oVwDBPmyoMEXbpSytOzPMeMm6azTMHGQFl0LpEk3pXJahMsP2BEPdtk/AgMB
AAGjggJfMIICWzAdBgNVHQ4EFgQU/yNp8rNVOrhFN9fqOs9Pvy/WlkYwHwYDVR0j
BBgwFoAUE93PoSjcFB8Hbre2D0Y1koZInVUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4
ZWI4LzIvMTNERENGQTEyOERDMTQxRjA3NkVCN0I2MEY0NjM1OTI4NjQ4OUQ1NS5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzEzRERDRkExMjhEQzE0
MUYwNzZFQjdCNjBGNDYzNTkyODY0ODlENTUuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGVi
OC8yLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjEzMTMwMzAzYTNhMmYzNDMwMmQzNDMw
MjAzZDNlMjAzMjMwMzMzODM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAoTANBgkqhkiG9w0B
AQsFAAOCAQEAYSCcpzOJyGi+S8Zbng1zEirXpWTLDUWSjitdogVGelxnD7rhwS6w
pju9ALBeUhDIsMLFx9Cc/2jfl0bblafSRPAoaaELT5gVovUVqOXct/dTs/WjG+8l
pSkB9o8pp3hNQVrEkvg6XIJxQzvgF/WaBjFviL6EhBfIYCTxyizXQI+vK0EavJqt
wGyZRFFc5PWVb5fohVVDaQVO9kx67vG+h3hB/fCTC0Xnb6lt9H1IyDV7cmjmQJnE
bapFbhhlmxCFp0+QA9/lr0bMBuedgdP0BoMyaM83TRqxOG4mCIgHTBYfBSMgiV13
W+H0u/+USA95ve+IuHSUz8VznZweRIAEpA==
-----END CERTIFICATE-----
Generated at Wed May 8 00:13:14 2024 by rpki-client on console-fra.rpki-client.org