Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa
File:                     326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (raw, json)
Hash identifier:          92+lsmyfA1dbS5hvoEPYQjapfeES/k8FUYGANJUnv7Q=
Subject key identifier:   CD:5A:B1:EE:5C:77:8E:F3:1E:46:9F:70:95:E9:96:FB:9D:97:B1:6B
Certificate issuer:       /CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76
Certificate serial:       585E99588E8866AA43966B9502DE0AD0835442FF
Authority key identifier: 30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa
Signing time:             Tue 10 Sep 2024 19:15:15 +0000
ROA not before:           Tue 10 Sep 2024 19:10:15 +0000
ROA not after:            Tue 09 Sep 2025 19:15:15 +0000
asID:                     50755
IP address blocks:        2a0a:6040:b1f3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Oct 2024 08:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5e:99:58:8e:88:66:aa:43:96:6b:95:02:de:0a:d0:83:54:42:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76
        Validity
            Not Before: Sep 10 19:10:15 2024 GMT
            Not After : Sep  9 19:15:15 2025 GMT
        Subject: CN=CD5AB1EE5C778EF31E469F7095E996FB9D97B16B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5b:f8:36:dd:1d:f2:cf:13:eb:ab:94:89:f3:
                    43:75:01:d1:56:fd:89:6c:92:0c:88:0b:b8:b2:b2:
                    1a:f9:07:4e:6c:e1:0e:27:6a:fa:6b:07:da:ac:c2:
                    6b:ae:b6:76:37:8e:38:21:53:3c:9d:32:2c:cd:0a:
                    30:9c:cd:76:79:46:ce:80:ee:62:eb:90:ff:83:4e:
                    2a:84:e0:6d:7c:d9:b8:83:c2:47:75:e4:69:5d:0d:
                    c7:01:dc:f8:fa:ab:63:58:89:db:95:dc:3d:4c:22:
                    43:30:08:91:e7:31:40:ac:b8:82:50:53:f5:ca:44:
                    27:fd:8c:73:92:5f:eb:bf:9f:c9:59:30:32:2c:1a:
                    55:87:bd:22:9a:df:6b:0a:13:c6:86:0b:b6:d3:32:
                    81:2e:9d:5d:32:2a:54:73:59:54:c7:5f:a9:34:71:
                    94:7c:dd:42:1a:53:d5:9c:f5:87:c6:08:eb:1a:da:
                    2b:23:0d:e8:f0:2d:7a:9e:8e:de:74:c8:96:bf:e4:
                    bd:67:a9:37:b2:47:9c:cc:3a:89:74:e5:cf:3d:a5:
                    e1:c3:72:87:ee:23:9e:b9:08:80:aa:b3:cd:31:ea:
                    b8:fa:bc:31:4a:7b:47:c5:de:bc:38:ee:96:e3:3d:
                    e7:33:6f:f1:7d:1d:57:90:93:32:1a:36:5e:1c:fe:
                    26:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5A:B1:EE:5C:77:8E:F3:1E:46:9F:70:95:E9:96:FB:9D:97:B1:6B
            X509v3 Authority Key Identifier:
                keyid:30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f3::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:b1:6c:0c:8c:dc:4c:ca:cf:7f:f7:5b:08:2a:56:16:15:e0:
         ea:26:bc:00:0e:7d:ed:a5:b5:e5:0d:da:67:4d:86:3c:f5:55:
         8f:a1:2a:e3:56:67:73:b2:db:56:91:f2:c3:a1:d2:d2:84:96:
         a5:58:94:b7:64:5d:a0:73:9a:3c:9e:e7:87:f7:22:b4:3b:84:
         93:c3:6b:72:3c:3b:94:43:ef:14:86:7e:8e:a7:f9:fd:a6:1f:
         16:2f:a9:1c:37:d7:d7:62:52:35:b6:61:53:3e:a2:61:7a:f7:
         4b:ce:1a:69:10:65:09:9f:b0:57:d3:d5:d3:45:95:ff:78:a9:
         ed:cf:86:24:5a:c0:72:aa:47:43:4e:04:a7:43:5d:eb:6b:25:
         f1:24:d5:8b:3f:c5:09:45:d6:45:44:d7:fd:93:1c:6a:3e:ed:
         3e:bf:6f:ec:15:58:3b:56:26:01:87:64:02:c8:7b:7d:83:63:
         28:8c:9a:67:c6:81:b0:4b:14:c3:fa:19:01:3f:ec:e0:dd:53:
         9c:c4:3d:67:cb:03:fc:5f:e4:22:7e:36:e7:70:bb:55:68:63:
         2f:22:0b:d5:d6:4f:b9:17:47:e9:bf:f3:b4:92:b1:85:57:cb:
         ea:e1:ca:64:5a:c3:4e:ef:30:4a:02:8f:21:d1:af:c5:c9:12:
         54:49:26:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:27:44 2024 by rpki-client on console-ams.rpki-client.org