Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa
File:                     326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa (raw, json)
Hash identifier:          2+mys6eWCFEG14zhjOL+66PUeUWZpM9AodO+AR9LzTw=
Subject key identifier:   7C:1D:14:AC:10:6A:49:91:A4:0D:C1:CE:96:E6:BB:DD:0C:D0:D2:C9
Certificate issuer:       /CN=13DDCFA128DC141F076EB7B60F46359286489D55
Certificate serial:       4D7CCBFC3FEA05118E811D4F867A97DF34A34C7F
Authority key identifier: 13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa
Signing time:             Sun 05 Nov 2023 04:27:05 +0000
ROA not before:           Sun 05 Nov 2023 04:22:05 +0000
ROA not after:            Sun 03 Nov 2024 04:27:05 +0000
asID:                     203843
IP address blocks:        2a0a:6040:a104::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 10:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7c:cb:fc:3f:ea:05:11:8e:81:1d:4f:86:7a:97:df:34:a3:4c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13DDCFA128DC141F076EB7B60F46359286489D55
        Validity
            Not Before: Nov  5 04:22:05 2023 GMT
            Not After : Nov  3 04:27:05 2024 GMT
        Subject: CN=7C1D14AC106A4991A40DC1CE96E6BBDD0CD0D2C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f1:89:ce:29:70:14:80:a2:23:c9:1d:b9:b5:
                    bf:e6:da:95:c9:aa:ea:50:0d:99:ce:c8:22:bc:c5:
                    25:4a:80:3b:71:2b:18:5b:00:39:06:15:32:60:f5:
                    1e:4a:35:89:80:5b:b0:7b:c3:fb:50:c7:2c:a8:41:
                    ca:c6:a4:5c:76:a4:1a:94:cc:35:30:4b:e6:ed:e9:
                    14:51:98:d8:0f:ee:12:f0:b1:30:26:40:79:9f:4b:
                    db:79:86:4d:d3:27:d6:14:9a:64:e3:0e:29:e4:85:
                    79:bf:5a:b7:f6:c9:64:a5:fb:d8:36:57:04:4d:0d:
                    fa:87:cc:86:f8:0f:82:82:b3:c9:ed:d7:42:d4:71:
                    55:e2:0f:be:1f:53:99:70:34:e0:e5:92:27:43:1c:
                    f5:f0:b0:f7:d6:79:f1:57:c3:b1:b1:65:e7:e6:8e:
                    3f:f5:de:b7:83:7e:35:b1:fc:36:7f:df:bd:ce:b6:
                    ec:39:cd:ae:09:5b:4b:2e:49:27:c7:01:34:11:84:
                    3f:6a:ce:06:0a:e1:05:1b:6f:e9:57:8f:97:46:8d:
                    85:d5:e7:df:18:99:ae:8b:36:48:85:b2:7c:b8:ef:
                    cf:94:37:80:77:f3:e3:79:55:8a:dc:03:0b:74:a1:
                    3a:24:21:37:16:ef:ec:72:23:28:7b:68:05:f8:90:
                    6f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1D:14:AC:10:6A:49:91:A4:0D:C1:CE:96:E6:BB:DD:0C:D0:D2:C9
            X509v3 Authority Key Identifier:
                keyid:13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a104::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:a8:ad:e7:a5:df:a9:9e:ed:11:be:55:6a:ab:29:71:d8:c9:
         14:ce:5d:8e:f5:40:53:53:4f:04:5c:fc:7b:96:e2:06:95:46:
         ac:05:07:95:e4:ea:24:5d:11:b2:05:d1:d4:04:5f:28:36:d8:
         02:5d:18:09:a5:be:1c:94:dd:c5:97:19:c1:3b:5c:74:ac:12:
         db:a1:cf:86:a1:cb:e7:e0:d2:11:75:8b:1a:34:9d:6a:6c:00:
         44:4e:34:ca:a2:e6:a4:5d:8c:4b:29:25:04:75:e3:61:e0:d3:
         32:cf:e2:5e:1e:cd:0f:5a:ad:1d:b8:dd:a0:8e:f7:0d:a3:48:
         60:5a:f8:e3:37:da:3b:de:08:d4:e8:4f:22:08:02:41:24:f4:
         3b:4d:1f:70:27:86:3a:41:88:71:cb:a1:71:1c:c9:a1:14:e8:
         8c:bc:91:d2:bf:a5:e7:be:47:25:96:33:7b:db:41:1c:c2:2d:
         73:09:2c:d2:ad:25:31:bd:49:77:2f:0d:70:ab:db:7d:c5:00:
         9d:2b:42:e4:2d:2b:59:f5:40:b0:e8:7b:52:53:79:11:8a:cf:
         37:02:83:72:89:ec:d3:38:53:a6:3c:fb:13:0a:15:5c:8a:36:
         df:7f:9c:90:f4:4f:fa:d6:7e:a3:27:cb:6e:5e:b4:5c:0c:25:
         73:69:51:82
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUTXzL/D/qBRGOgR1PhnqX3zSjTH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNERENGQTEyOERDMTQxRjA3NkVCN0I2MEY0NjM1OTI4
NjQ4OUQ1NTAeFw0yMzExMDUwNDIyMDVaFw0yNDExMDMwNDI3MDVaMDMxMTAvBgNV
BAMTKDdDMUQxNEFDMTA2QTQ5OTFBNDBEQzFDRTk2RTZCQkREMENEMEQyQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC58YnOKXAUgKIjyR25tb/m2pXJ
qupQDZnOyCK8xSVKgDtxKxhbADkGFTJg9R5KNYmAW7B7w/tQxyyoQcrGpFx2pBqU
zDUwS+bt6RRRmNgP7hLwsTAmQHmfS9t5hk3TJ9YUmmTjDinkhXm/Wrf2yWSl+9g2
VwRNDfqHzIb4D4KCs8nt10LUcVXiD74fU5lwNODlkidDHPXwsPfWefFXw7GxZefm
jj/13reDfjWx/DZ/373Otuw5za4JW0suSSfHATQRhD9qzgYK4QUbb+lXj5dGjYXV
598Yma6LNkiFsny478+UN4B38+N5VYrcAwt0oTokITcW7+xyIyh7aAX4kG8HAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUfB0UrBBqSZGkDcHOlua73QzQ0skwHwYDVR0j
BBgwFoAUE93PoSjcFB8Hbre2D0Y1koZInVUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4
ZWI4LzIvMTNERENGQTEyOERDMTQxRjA3NkVCN0I2MEY0NjM1OTI4NjQ4OUQ1NS5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzEzRERDRkExMjhEQzE0
MUYwNzZFQjdCNjBGNDYzNTkyODY0ODlENTUuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGVi
OC8yLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjEzMTMwMzQzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMjMwMzMzODM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAoQQwDQYJKoZIhvcN
AQELBQADggEBAMaoreel36me7RG+VWqrKXHYyRTOXY71QFNTTwRc/HuW4gaVRqwF
B5Xk6iRdEbIF0dQEXyg22AJdGAmlvhyU3cWXGcE7XHSsEtuhz4ahy+fg0hF1ixo0
nWpsAERONMqi5qRdjEspJQR142Hg0zLP4l4ezQ9arR243aCO9w2jSGBa+OM32jve
CNToTyIIAkEk9DtNH3AnhjpBiHHLoXEcyaEU6Iy8kdK/pee+RyWWM3vbQRzCLXMJ
LNKtJTG9SXcvDXCr233FAJ0rQuQtK1n1QLDoe1JTeRGKzzcCg3KJ7NM4U6Y8+xMK
FVyKNt9/nJD0T/rWfqMny25etFwMJXNpUYI=
-----END CERTIFICATE-----
Generated at Tue May 7 23:39:19 2024 by rpki-client on console-ams.rpki-client.org