Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130353a3a2f34382d3438203d3e2038303735.roa
File:                     326130613a363034303a613130353a3a2f34382d3438203d3e2038303735.roa (raw, json)
Hash identifier:          6basabdeqipSwURMbL1KEb7nia7cx2uMF4aZn6R13SQ=
Subject key identifier:   D5:9F:78:6B:7F:5D:ED:4D:C6:4E:F4:B4:F1:14:84:11:87:A3:64:78
Certificate issuer:       /CN=13DDCFA128DC141F076EB7B60F46359286489D55
Certificate serial:       743BFCB7939F7533E84EE440BC006B1FA934186F
Authority key identifier: 13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130353a3a2f34382d3438203d3e2038303735.roa
Signing time:             Sun 05 Nov 2023 04:27:05 +0000
ROA not before:           Sun 05 Nov 2023 04:22:05 +0000
ROA not after:            Sun 03 Nov 2024 04:27:05 +0000
asID:                     8075
IP address blocks:        2a0a:6040:a105::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 12:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:3b:fc:b7:93:9f:75:33:e8:4e:e4:40:bc:00:6b:1f:a9:34:18:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13DDCFA128DC141F076EB7B60F46359286489D55
        Validity
            Not Before: Nov  5 04:22:05 2023 GMT
            Not After : Nov  3 04:27:05 2024 GMT
        Subject: CN=D59F786B7F5DED4DC64EF4B4F114841187A36478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:41:a3:4b:16:a4:a4:cf:70:c3:a2:ef:ea:4e:
                    07:d2:f9:15:91:f5:b2:bb:68:a2:f0:a3:9f:1b:10:
                    e9:31:49:4f:60:09:13:50:66:18:e9:33:ed:e4:9d:
                    4f:28:23:9e:1c:a6:2f:df:45:a3:57:d9:ae:b9:bd:
                    e2:4f:50:8b:eb:80:9b:4a:6d:96:c5:a9:fc:62:ed:
                    39:66:de:97:a1:10:df:66:4c:4e:28:5b:d1:48:d4:
                    e4:5e:f0:9a:c3:ba:60:93:67:4d:13:5e:a9:dd:dc:
                    ee:3e:46:e3:85:fd:fb:90:f5:22:ea:2c:e7:d8:0f:
                    01:55:7b:3b:1b:27:bb:bd:28:a4:3f:f6:8f:b7:6c:
                    ae:ab:3a:95:19:0b:09:ea:03:9b:7b:04:37:a3:f1:
                    9f:93:02:74:99:f4:64:cb:6f:01:e5:9e:79:bf:cf:
                    a3:17:3f:7a:0a:85:13:17:a8:8a:3c:bb:00:c5:eb:
                    6d:3f:b9:ae:38:f0:82:47:a4:ad:cc:f3:52:0f:eb:
                    93:7e:75:50:44:ae:97:0b:80:fb:90:e2:8f:dc:5b:
                    f7:ab:ae:ef:f1:07:9f:82:d5:06:7d:9c:cf:b6:ef:
                    c4:27:4d:83:1d:9e:7c:58:58:c6:a3:0b:b5:4d:33:
                    22:76:26:65:15:e2:61:38:a8:14:1d:6f:71:06:ef:
                    a5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9F:78:6B:7F:5D:ED:4D:C6:4E:F4:B4:F1:14:84:11:87:A3:64:78
            X509v3 Authority Key Identifier:
                keyid:13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130353a3a2f34382d3438203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a105::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:3b:8e:44:17:56:5c:17:72:4c:65:e0:84:c4:a6:10:56:84:
         0b:f5:af:02:fe:7a:83:4f:04:00:14:a7:b3:f7:a4:54:26:90:
         b7:37:57:b2:be:87:51:63:60:52:3e:c5:46:75:e5:cc:90:1e:
         a1:17:c4:a2:14:96:ed:52:43:02:c2:63:41:ab:5c:ce:38:ff:
         fa:b0:62:4e:a7:9c:7d:29:39:34:2f:c0:1d:eb:95:8b:b5:74:
         1f:0b:ae:c0:1c:98:4f:0e:80:48:1c:35:8e:ef:e6:d0:7c:3d:
         d3:8b:ae:3c:6d:b4:bc:75:ce:bb:97:b7:b7:b0:46:e4:83:fc:
         c6:27:99:a1:a5:7b:b7:e3:51:0f:ad:f5:6a:d5:b6:20:65:f3:
         c5:b5:da:b0:1a:a9:c1:ed:ba:aa:fb:1d:2c:9a:f5:69:18:4a:
         3f:e2:73:56:5d:0c:a8:ba:91:56:d1:10:f9:76:ab:34:ac:33:
         41:5f:38:4e:4b:1e:e9:45:ef:9e:ef:55:89:36:f4:fd:cc:3d:
         8a:5e:4c:35:89:2d:95:f5:52:44:2b:56:65:7f:68:08:13:76:
         0c:a4:41:54:c3:71:ea:0a:44:e0:9b:6e:d8:65:23:c9:e7:62:
         68:de:56:69:17:5a:a7:2b:54:5c:17:6b:dc:5c:82:d0:ca:ce:
         6e:7a:db:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 00:57:15 2024 by rpki-client on console-ams.rpki-client.org