Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa
File:                     326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (raw, json)
Hash identifier:          cr9zAfMvxZve/7JXD2f4n3BhiKrPiLnrwH/qsV4egwU=
Subject key identifier:   B7:87:03:80:4C:93:30:F3:A5:CF:11:90:3C:4B:B1:14:70:A3:F2:D4
Certificate issuer:       /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
Certificate serial:       15A6664A711995295DA63C3E21DC5C8BA8A13772
Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa
Signing time:             Fri 04 Jul 2025 21:45:33 +0000
ROA not before:           Fri 04 Jul 2025 21:40:33 +0000
ROA not after:            Fri 03 Jul 2026 21:45:33 +0000
asID:                     152368
IP address blocks:        2a0a:6040:4400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 23:46:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a6:66:4a:71:19:95:29:5d:a6:3c:3e:21:dc:5c:8b:a8:a1:37:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
        Validity
            Not Before: Jul  4 21:40:33 2025 GMT
            Not After : Jul  3 21:45:33 2026 GMT
        Subject: CN=B78703804C9330F3A5CF11903C4BB11470A3F2D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b0:74:90:88:05:32:48:74:5f:6e:7c:3e:1b:
                    bd:a7:83:d2:87:8e:b2:d1:64:f7:94:36:f1:1e:ce:
                    a1:65:0b:6f:40:66:c4:3d:99:2b:df:7b:94:d4:af:
                    6b:a5:bb:68:2a:58:38:8d:df:80:c5:6c:f4:a9:eb:
                    95:82:db:d5:49:c2:b4:e9:58:19:24:ae:e1:d7:65:
                    fc:5f:08:39:9c:17:27:ca:ef:81:eb:f6:50:3e:a3:
                    ca:6d:5c:01:c0:20:c6:1a:2a:83:e2:05:d7:52:0e:
                    2c:46:ba:2a:e7:aa:fe:9c:9b:e3:fc:92:3b:0d:fa:
                    02:8d:67:64:a1:15:7f:95:2d:f8:0b:8d:a3:cb:7d:
                    14:8f:50:42:ec:f4:ce:d4:2c:22:9f:c7:d2:85:65:
                    e4:05:0d:a3:87:c9:c0:9d:b0:84:6f:d9:6f:3d:45:
                    9d:e6:3d:5a:0c:3c:f3:7e:11:2d:bc:60:01:cb:ae:
                    1b:3d:84:92:5f:2f:0a:e8:af:0b:34:e9:c3:ad:02:
                    9c:45:8a:51:08:e3:e0:15:55:da:4a:ac:31:55:29:
                    65:2b:50:7a:6c:ac:46:97:1f:64:a4:bd:b8:60:42:
                    c7:51:36:61:e2:b1:e4:f0:b7:27:5a:52:f1:a8:19:
                    d0:da:9a:b9:cc:aa:5f:e1:18:43:12:59:5a:65:0d:
                    d9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:87:03:80:4C:93:30:F3:A5:CF:11:90:3C:4B:B1:14:70:A3:F2:D4
            X509v3 Authority Key Identifier:
                keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:4400::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:6b:06:42:7b:f2:fd:c3:c7:62:bb:b1:23:74:14:7b:3b:d9:
         c9:b9:61:6d:c0:b2:dc:7e:37:45:8c:12:7c:ba:98:bd:b9:10:
         6d:2a:0e:7a:85:ef:5e:b9:6d:13:b5:40:be:9d:da:ea:fe:3b:
         65:35:b9:0a:10:e8:88:7c:21:04:09:dc:3e:ae:4d:50:59:af:
         92:4d:f2:c4:2b:7a:91:d4:84:d3:f4:ee:0d:75:1c:f2:6e:d2:
         af:06:56:36:89:e1:27:d0:9c:59:87:59:37:9c:40:34:db:00:
         79:17:51:0b:be:7d:7b:9e:20:91:05:d3:bf:ea:23:4a:51:57:
         b2:2e:18:8f:69:9e:78:d4:e6:07:20:85:36:dc:72:6c:2c:f6:
         9e:be:32:b1:9b:1c:90:08:59:36:06:9e:b3:58:d4:67:e9:c0:
         18:9b:50:0b:c0:15:73:d7:d3:26:cd:a8:94:a6:3d:2a:22:47:
         94:32:4c:70:ec:48:47:9f:94:a7:27:75:7e:34:d1:6b:8e:55:
         57:75:a7:cd:3d:01:e6:fc:5f:3d:b9:0d:42:a4:d8:3b:2d:5b:
         55:12:65:98:e8:88:5d:fb:46:b7:ad:22:67:8a:32:f6:0a:7f:
         05:47:60:0d:9e:98:4b:cb:71:dc:a7:47:45:7d:ac:65:a1:11:
         0f:0a:7c:f1
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUFaZmSnEZlSldpjw+Idxci6ihN3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJF
MEIyRjhEODAeFw0yNTA3MDQyMTQwMzNaFw0yNjA3MDMyMTQ1MzNaMDMxMTAvBgNV
BAMTKEI3ODcwMzgwNEM5MzMwRjNBNUNGMTE5MDNDNEJCMTE0NzBBM0YyRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTsHSQiAUySHRfbnw+G72ng9KH
jrLRZPeUNvEezqFlC29AZsQ9mSvfe5TUr2ulu2gqWDiN34DFbPSp65WC29VJwrTp
WBkkruHXZfxfCDmcFyfK74Hr9lA+o8ptXAHAIMYaKoPiBddSDixGuirnqv6cm+P8
kjsN+gKNZ2ShFX+VLfgLjaPLfRSPUELs9M7ULCKfx9KFZeQFDaOHycCdsIRv2W89
RZ3mPVoMPPN+ES28YAHLrhs9hJJfLwrorws06cOtApxFilEI4+AVVdpKrDFVKWUr
UHpsrEaXH2SkvbhgQsdRNmHiseTwtydaUvGoGdDamrnMql/hGEMSWVplDdllAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUt4cDgEyTMPOlzxGQPEuxFHCj8tQwHwYDVR0j
BBgwFoAUaYbcgoEsR9oUmUuObnJ7cuCy+NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk
OGM0LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzY5ODZEQzgyODEyQzQ3
REExNDk5NEI4RTZFNzI3QjcyRTBCMkY4RDguY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzFiZDMwNmI0LWU1YzMtNDhmOS1iMmVlLTM2YTliZGRlZDhj
NC85LzMyNjEzMDYxM2EzNjMwMzQzMDNhMzQzNDMwMzAzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMTM1MzIzMzM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBARAAwDQYJKoZIhvcN
AQELBQADggEBAJJrBkJ78v3Dx2K7sSN0FHs72cm5YW3Astx+N0WMEny6mL25EG0q
DnqF7165bRO1QL6d2ur+O2U1uQoQ6Ih8IQQJ3D6uTVBZr5JN8sQrepHUhNP07g11
HPJu0q8GVjaJ4SfQnFmHWTecQDTbAHkXUQu+fXueIJEF07/qI0pRV7IuGI9pnnjU
5gcghTbccmws9p6+MrGbHJAIWTYGnrNY1GfpwBibUAvAFXPX0ybNqJSmPSoiR5Qy
THDsSEeflKcndX400WuOVVd1p809Aeb8Xz25DUKk2DstW1USZZjoiF37RretImeK
MvYKfwVHYA2emEvLcdynR0V9rGWhEQ8KfPE=
-----END CERTIFICATE-----
Generated at Sat Jul 5 13:06:40 2025 by rpki-client