Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa
File:                     326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (raw, json)
Hash identifier:          JDVDvoY2LzG4FOnjq1lk2gJuRJSJTwl39Idwnd4C3E8=
Subject key identifier:   7F:64:C1:CE:B6:47:EF:7F:63:89:B5:CC:32:0E:11:DA:96:D4:24:44
Certificate issuer:       /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
Certificate serial:       3CA797F383132950694ECC988650C7781A383D3C
Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa
Signing time:             Fri 04 Jul 2025 21:45:33 +0000
ROA not before:           Fri 04 Jul 2025 21:40:33 +0000
ROA not after:            Fri 03 Jul 2026 21:45:33 +0000
asID:                     50104
IP address blocks:        2a0a:6040:4400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 23:46:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a7:97:f3:83:13:29:50:69:4e:cc:98:86:50:c7:78:1a:38:3d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
        Validity
            Not Before: Jul  4 21:40:33 2025 GMT
            Not After : Jul  3 21:45:33 2026 GMT
        Subject: CN=7F64C1CEB647EF7F6389B5CC320E11DA96D42444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:4c:6c:be:c5:0f:40:be:f7:8e:2f:96:25:
                    ba:0b:c9:2c:ac:67:e1:f8:87:30:1f:18:b1:71:ff:
                    5f:4f:3a:97:64:a8:03:d9:a2:b5:bb:70:2d:85:93:
                    07:6a:6e:60:49:a1:e1:55:af:26:ef:9b:5a:28:97:
                    2e:ed:a4:66:0c:a0:bd:ea:6c:1b:9c:43:f3:f1:a8:
                    bb:c1:7d:6b:f1:57:2f:7e:b9:9f:e3:08:07:19:c0:
                    cd:d5:83:ea:82:01:e9:ac:b0:8f:f7:cc:21:ba:b7:
                    a1:10:fd:b0:99:71:f3:36:93:f6:4b:4b:f0:76:cc:
                    9d:dd:25:c9:ca:86:5b:36:ed:27:d2:1c:94:83:90:
                    81:34:d8:d1:fb:1e:4e:2b:89:b6:b5:a7:44:f7:c9:
                    a3:9a:f3:7c:89:e2:39:2a:6f:3b:bb:7a:73:5d:8b:
                    03:5b:c6:eb:42:65:36:7d:74:5b:07:97:35:a4:98:
                    e4:8a:18:c9:85:f0:46:66:af:bc:b8:6f:3f:dd:c4:
                    21:56:85:51:46:22:5e:fa:4e:95:fe:e0:c5:e1:06:
                    ff:3b:e5:18:68:3e:8a:42:0d:5a:3c:fa:69:be:be:
                    8e:d8:fd:3b:98:40:7e:f1:97:58:d6:85:6c:69:a6:
                    8f:ad:82:5b:4e:db:be:c7:4d:c6:33:54:f9:a8:e9:
                    6b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:64:C1:CE:B6:47:EF:7F:63:89:B5:CC:32:0E:11:DA:96:D4:24:44
            X509v3 Authority Key Identifier:
                keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:4400::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:fb:f6:fb:6c:c0:ab:21:e0:e7:06:49:9f:9e:64:61:73:86:
         42:86:19:74:f2:c9:d7:5b:42:8c:13:3a:aa:d5:ef:2c:d5:04:
         4f:e7:c0:7e:71:e7:e5:49:78:32:4c:f9:b8:80:a8:74:ee:53:
         2c:7a:b4:cc:01:31:d9:ec:70:6d:05:1d:1f:03:c8:54:40:0d:
         39:43:4b:06:37:5e:30:94:07:dd:c7:1b:2b:13:1e:13:ea:48:
         d7:f2:3e:e5:dc:55:0a:26:b7:84:ce:58:25:64:35:87:08:35:
         02:d7:c8:2c:55:4b:2a:d3:a3:a5:e8:74:91:95:a6:33:e6:89:
         89:1f:d7:75:a4:cb:60:88:cc:66:41:41:b9:d3:83:90:d3:51:
         9f:c8:28:df:98:21:56:7b:1d:ce:b4:dd:40:de:4b:15:bd:8b:
         7d:1b:d5:8a:58:e1:05:03:63:ed:74:b8:f7:0b:67:c4:5a:a6:
         72:9a:d2:9f:9f:f7:5a:52:bb:43:03:f9:18:58:6c:c2:7e:18:
         f9:3c:40:d3:6b:9c:a0:ca:f3:cb:02:c3:44:33:73:dd:99:ff:
         80:11:29:74:0f:35:86:44:d6:0b:c4:e1:b4:2d:2e:7e:8d:49:
         63:b0:05:c1:fe:76:83:c8:a7:1c:bb:79:3f:9e:b3:9c:14:01:
         15:8c:9a:8e
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUPKeX84MTKVBpTsyYhlDHeBo4PTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJF
MEIyRjhEODAeFw0yNTA3MDQyMTQwMzNaFw0yNjA3MDMyMTQ1MzNaMDMxMTAvBgNV
BAMTKDdGNjRDMUNFQjY0N0VGN0Y2Mzg5QjVDQzMyMEUxMURBOTZENDI0NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqExsvsUPQL73ji+WJboLySys
Z+H4hzAfGLFx/19POpdkqAPZorW7cC2FkwdqbmBJoeFVrybvm1ooly7tpGYMoL3q
bBucQ/PxqLvBfWvxVy9+uZ/jCAcZwM3Vg+qCAemssI/3zCG6t6EQ/bCZcfM2k/ZL
S/B2zJ3dJcnKhls27SfSHJSDkIE02NH7Hk4riba1p0T3yaOa83yJ4jkqbzu7enNd
iwNbxutCZTZ9dFsHlzWkmOSKGMmF8EZmr7y4bz/dxCFWhVFGIl76TpX+4MXhBv87
5RhoPopCDVo8+mm+vo7Y/TuYQH7xl1jWhWxppo+tgltO277HTcYzVPmo6WsLAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUf2TBzrZH739jibXMMg4R2pbUJEQwHwYDVR0j
BBgwFoAUaYbcgoEsR9oUmUuObnJ7cuCy+NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk
OGM0LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzY5ODZEQzgyODEyQzQ3
REExNDk5NEI4RTZFNzI3QjcyRTBCMkY4RDguY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzFiZDMwNmI0LWU1YzMtNDhmOS1iMmVlLTM2YTliZGRlZDhj
NC85LzMyNjEzMDYxM2EzNjMwMzQzMDNhMzQzNDMwMzAzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzNTMwMzEzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgQEQAMA0GCSqGSIb3DQEB
CwUAA4IBAQAL+/b7bMCrIeDnBkmfnmRhc4ZChhl08snXW0KMEzqq1e8s1QRP58B+
ceflSXgyTPm4gKh07lMserTMATHZ7HBtBR0fA8hUQA05Q0sGN14wlAfdxxsrEx4T
6kjX8j7l3FUKJreEzlglZDWHCDUC18gsVUsq06Ol6HSRlaYz5omJH9d1pMtgiMxm
QUG504OQ01GfyCjfmCFWex3OtN1A3ksVvYt9G9WKWOEFA2PtdLj3C2fEWqZymtKf
n/daUrtDA/kYWGzCfhj5PEDTa5ygyvPLAsNEM3Pdmf+AESl0DzWGRNYLxOG0LS5+
jUljsAXB/naDyKccu3k/nrOcFAEVjJqO
-----END CERTIFICATE-----
Generated at Sat Jul 5 12:58:18 2025 by rpki-client