Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa
File:                     326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (raw, json)
Hash identifier:          V0mvV0hNihc/jKb8hU2/V8roZXN+5IVqU0BoJ9bcQys=
Subject key identifier:   1F:B1:FC:20:E2:64:4D:D0:11:8A:B8:40:BC:D8:8C:1C:12:FB:D7:E0
Certificate issuer:       /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
Certificate serial:       6BB488A2D991308921C9288812DE7425F75468C4
Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa
Signing time:             Fri 10 May 2024 15:39:03 +0000
ROA not before:           Fri 10 May 2024 15:34:03 +0000
ROA not after:            Fri 09 May 2025 15:39:03 +0000
asID:                     203069
IP address blocks:        2a0a:6040:3f00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b4:88:a2:d9:91:30:89:21:c9:28:88:12:de:74:25:f7:54:68:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
        Validity
            Not Before: May 10 15:34:03 2024 GMT
            Not After : May  9 15:39:03 2025 GMT
        Subject: CN=1FB1FC20E2644DD0118AB840BCD88C1C12FBD7E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:0f:72:ee:37:c7:ef:08:66:d3:09:1f:df:
                    1f:a7:c8:eb:f4:69:f3:02:21:53:d4:b0:e7:4e:bd:
                    27:91:b6:67:f7:17:79:b5:96:c8:a4:d3:d9:f9:eb:
                    5e:30:bb:9b:8e:34:56:e6:dd:5b:39:a9:36:9b:88:
                    2d:ea:22:c5:44:39:7e:c6:ee:a0:d5:4b:6c:1b:d4:
                    cb:06:42:63:a0:76:dc:00:3f:6d:20:41:32:93:cc:
                    c8:f5:d8:8f:a0:04:71:0b:76:7a:ef:13:f7:d5:2a:
                    c5:37:8d:09:71:4b:5d:58:08:08:13:a7:f5:68:ff:
                    12:bb:e9:ed:4f:b1:7c:40:7f:5b:c7:16:cb:a7:4b:
                    0a:59:8f:a3:97:73:54:a5:bc:de:2a:52:d4:c8:0a:
                    f9:ce:26:ee:80:a3:ff:71:ff:35:59:2c:82:1c:c0:
                    45:0a:b6:a5:54:b4:f4:8f:1b:1b:d9:7a:16:19:6e:
                    a1:c3:74:70:2c:64:bc:a3:56:40:0e:a4:74:8c:bf:
                    cb:79:b1:65:12:24:ec:f2:56:1c:d7:84:1b:ed:e9:
                    e1:6d:0d:72:38:ea:2f:dd:b7:df:6c:c1:81:89:64:
                    85:72:34:35:98:99:8b:79:02:99:8d:34:30:13:da:
                    f7:14:ae:53:7f:52:61:97:40:39:3b:a0:af:d0:10:
                    95:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B1:FC:20:E2:64:4D:D0:11:8A:B8:40:BC:D8:8C:1C:12:FB:D7:E0
            X509v3 Authority Key Identifier:
                keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:3f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:5a:9b:25:46:23:91:c6:3b:3d:4c:96:c8:38:2a:2b:2b:76:
         d4:95:99:c7:39:c5:1a:02:92:e7:d2:0d:3e:58:f1:ba:f9:7b:
         3c:aa:28:7f:da:b0:bd:3f:31:97:93:27:e0:f1:38:66:98:b2:
         9c:90:48:8d:fb:13:49:c9:05:96:77:91:7a:70:4e:0a:88:f6:
         b6:34:bc:4e:da:dd:31:36:8a:5d:ea:8b:e9:22:75:26:e5:cc:
         c4:93:6a:1a:e8:82:13:8d:59:a3:16:2b:56:c7:79:f4:ff:fd:
         cb:ba:9e:21:c2:b9:74:ad:37:61:d3:0c:dc:15:b1:3b:39:de:
         84:37:ee:95:39:12:5a:1e:61:f1:58:8f:4c:d9:b5:22:ab:fd:
         ed:f5:20:a2:15:f4:1b:9e:63:0c:4a:71:ca:74:4b:64:f7:1e:
         30:30:1b:61:1e:2e:95:1b:8a:09:8d:e2:0b:f4:5a:92:ef:c2:
         a5:fa:af:3d:80:25:cb:e1:e1:ec:7d:bf:2d:97:48:ef:f5:83:
         35:cd:55:b9:59:3e:91:de:9e:21:22:e9:02:1e:f4:2f:13:3a:
         02:81:bf:8e:29:be:10:8f:c6:8f:83:ff:8e:2a:5d:d0:b9:f4:
         ed:80:25:b0:76:65:83:85:05:8c:f0:0a:0e:d3:8d:61:3c:54:
         3d:81:56:8b
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIUa7SIotmRMIkhySiIEt50JfdUaMQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAw
MTFBQzEyMjAeFw0yNDA1MTAxNTM0MDNaFw0yNTA1MDkxNTM5MDNaMDMxMTAvBgNV
BAMTKDFGQjFGQzIwRTI2NDRERDAxMThBQjg0MEJDRDg4QzFDMTJGQkQ3RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQA9y7jfH7whm0wkf3x+nyOv0
afMCIVPUsOdOvSeRtmf3F3m1lsik09n5614wu5uONFbm3Vs5qTabiC3qIsVEOX7G
7qDVS2wb1MsGQmOgdtwAP20gQTKTzMj12I+gBHELdnrvE/fVKsU3jQlxS11YCAgT
p/Vo/xK76e1PsXxAf1vHFsunSwpZj6OXc1SlvN4qUtTICvnOJu6Ao/9x/zVZLIIc
wEUKtqVUtPSPGxvZehYZbqHDdHAsZLyjVkAOpHSMv8t5sWUSJOzyVhzXhBvt6eFt
DXI46i/dt99swYGJZIVyNDWYmYt5ApmNNDAT2vcUrlN/UmGXQDk7oK/QEJW7AgMB
AAGjggJfMIICWzAdBgNVHQ4EFgQUH7H8IOJkTdARirhAvNiMHBL71+AwHwYDVR0j
BBgwFoAU+QC8ZeK2RuusRypd6hK9sAEawSIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzMvRjkwMEJDNjVFMkI2NDZFQkFDNDcyQTVERUExMkJEQjAwMTFBQzEyMi5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0Y5MDBCQzY1RTJCNjQ2
RUJBQzQ3MkE1REVBMTJCREIwMDExQUMxMjIuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQyYmU0
ZS8zLzMyNjEzMDYxM2EzNjMwMzQzMDNhMzM2NjMwMzAzYTNhMmYzNDMwMmQzNDM4
MjAzZDNlMjAzMjMwMzMzMDM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAPzANBgkqhkiG9w0B
AQsFAAOCAQEAdlqbJUYjkcY7PUyWyDgqKyt21JWZxznFGgKS59INPljxuvl7PKoo
f9qwvT8xl5Mn4PE4ZpiynJBIjfsTSckFlneRenBOCoj2tjS8TtrdMTaKXeqL6SJ1
JuXMxJNqGuiCE41ZoxYrVsd59P/9y7qeIcK5dK03YdMM3BWxOznehDfulTkSWh5h
8ViPTNm1Iqv97fUgohX0G55jDEpxynRLZPceMDAbYR4ulRuKCY3iC/Raku/Cpfqv
PYAly+Hh7H2/LZdI7/WDNc1VuVk+kd6eISLpAh70LxM6AoG/jim+EI/Gj4P/jipd
0Ln07YAlsHZlg4UFjPAKDtONYTxUPYFWiw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:39 2024 by rpki-client on console-fra.rpki-client.org