Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130313a3a2f34382d3438203d3e20323033383433.roa
File:                     326130613a363034303a613130313a3a2f34382d3438203d3e20323033383433.roa (raw, json)
Hash identifier:          HohUsqNZ7IE9IaaprapNt2q3pktanMjf3+9sz3wT9Lo=
Subject key identifier:   14:92:50:E9:38:06:D0:01:B9:73:2B:32:AD:78:87:E5:67:EC:3E:C4
Certificate issuer:       /CN=13DDCFA128DC141F076EB7B60F46359286489D55
Certificate serial:       7CA3CA132166D7491ADAD067A884BE8E65AD838D
Authority key identifier: 13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130313a3a2f34382d3438203d3e20323033383433.roa
Signing time:             Sun 05 Nov 2023 04:27:05 +0000
ROA not before:           Sun 05 Nov 2023 04:22:05 +0000
ROA not after:            Sun 03 Nov 2024 04:27:05 +0000
asID:                     203843
IP address blocks:        2a0a:6040:a101::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 10:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a3:ca:13:21:66:d7:49:1a:da:d0:67:a8:84:be:8e:65:ad:83:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13DDCFA128DC141F076EB7B60F46359286489D55
        Validity
            Not Before: Nov  5 04:22:05 2023 GMT
            Not After : Nov  3 04:27:05 2024 GMT
        Subject: CN=149250E93806D001B9732B32AD7887E567EC3EC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b8:92:66:c9:e0:6c:75:91:19:f4:ec:36:c5:
                    76:f7:0a:bf:55:ca:47:dc:16:2f:d8:e4:71:0b:b0:
                    b8:e5:b0:51:0c:64:13:67:38:55:8c:73:f2:de:8a:
                    88:9b:2e:d6:e4:92:77:ef:1a:57:4c:c6:d4:2d:87:
                    cf:28:f7:fe:ab:52:41:24:89:d2:ea:71:d9:b1:30:
                    f9:a4:ef:e3:ac:13:c2:73:7d:2e:38:e5:d8:b3:c9:
                    34:d7:7f:37:75:27:00:a6:5b:31:e6:9a:ef:b6:ce:
                    2d:51:9d:eb:b7:cf:b1:89:ff:1d:2f:d7:1f:88:a0:
                    1d:9f:03:97:70:87:a8:38:ea:1a:10:63:bb:73:fc:
                    aa:05:73:af:d2:d5:36:7d:43:b1:d0:d3:e9:3a:2a:
                    63:06:64:85:bd:3d:a5:60:42:4d:3a:d4:2a:e0:da:
                    aa:22:0a:42:b9:79:0b:34:72:78:f8:a8:a4:29:c6:
                    50:d7:2e:e7:db:ea:71:4d:2a:73:01:d7:4f:ac:8e:
                    07:3b:e7:ee:38:df:36:a9:af:ca:a9:d6:21:d7:c4:
                    62:77:e5:4b:f5:2a:3a:73:8b:c0:45:2b:8e:b8:fd:
                    4a:d1:09:3f:6d:79:91:55:17:03:e6:d3:08:88:d7:
                    0a:6f:25:ad:d9:20:fb:26:a5:b3:10:4f:d2:72:ad:
                    7d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:92:50:E9:38:06:D0:01:B9:73:2B:32:AD:78:87:E5:67:EC:3E:C4
            X509v3 Authority Key Identifier:
                keyid:13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130313a3a2f34382d3438203d3e20323033383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a101::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:2a:de:1c:6f:30:b6:3f:e0:87:21:cd:8d:bb:4d:f8:3d:46:
         05:32:28:92:2c:7a:f8:c0:52:05:59:f9:ca:61:ea:59:78:e5:
         b1:71:76:c6:d9:fc:a1:e9:17:53:4c:34:38:a1:1d:6a:de:c0:
         54:18:f6:ed:c5:a7:31:d9:19:30:f8:16:7f:2d:a4:97:ef:5e:
         e5:9c:d3:2c:22:56:3f:97:b4:93:63:2d:02:d9:88:53:e8:90:
         ee:6f:9a:6d:b3:db:fd:2a:d5:85:65:39:4d:17:ce:bd:cd:93:
         3c:d9:1d:df:a0:c4:67:ff:e2:6f:c8:07:0f:35:62:a8:df:48:
         e0:4f:f1:1f:9b:99:c6:53:34:da:ad:6a:b8:e5:2e:b6:d8:94:
         d2:27:18:49:aa:f4:42:23:ad:25:6e:30:f1:ac:63:87:02:e1:
         e4:26:08:e4:0a:fa:07:82:49:0e:34:5c:c5:ae:0e:03:a0:1f:
         c4:4f:14:77:56:33:ae:d4:f5:22:ea:41:03:59:5b:d1:81:a5:
         5c:a0:bf:a9:06:ee:fb:4b:35:67:d8:b0:f4:52:e1:bd:9b:fb:
         3c:cd:b1:8f:0e:6a:66:d6:eb:ed:57:60:29:65:50:eb:12:c5:
         49:d7:93:21:3c:45:67:b1:f1:c1:7b:e0:5f:d2:a7:3f:85:32:
         87:79:09:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 00:13:14 2024 by rpki-client on console-fra.rpki-client.org