Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa
File:                     326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          LBWSPbWdHS2qLW48sBVvajPcn95MUvX0AUIFyg2pSwE=
Subject key identifier:   84:EC:56:9E:73:1C:A8:8E:B4:CF:68:17:E5:EF:06:23:6C:27:96:4A
Certificate issuer:       /CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76
Certificate serial:       750692F9423EFEA3E2BC91D1FA218C120816C57A
Authority key identifier: 30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa
Signing time:             Tue 10 Sep 2024 19:15:17 +0000
ROA not before:           Tue 10 Sep 2024 19:10:17 +0000
ROA not after:            Tue 09 Sep 2025 19:15:17 +0000
asID:                     200676
IP address blocks:        2a0a:6040:b1f5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Oct 2024 08:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:06:92:f9:42:3e:fe:a3:e2:bc:91:d1:fa:21:8c:12:08:16:c5:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76
        Validity
            Not Before: Sep 10 19:10:17 2024 GMT
            Not After : Sep  9 19:15:17 2025 GMT
        Subject: CN=84EC569E731CA88EB4CF6817E5EF06236C27964A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0f:78:6a:32:01:fe:3f:93:fe:a4:64:0a:7f:
                    78:8c:2d:4e:91:4f:bc:f3:b4:62:64:c3:49:5e:b2:
                    0a:24:00:a3:a7:a9:3e:b8:52:8c:bd:af:cd:c5:b7:
                    ca:92:92:67:2c:4d:29:24:57:b3:43:c7:08:ae:f3:
                    10:6f:b6:ed:4c:c5:25:d0:9e:81:99:58:2e:58:44:
                    35:04:a4:39:fb:d1:5b:ec:fb:aa:05:a0:e1:7b:c8:
                    d4:ec:1a:d0:48:a0:24:70:f3:ed:8c:ac:a4:88:5d:
                    23:96:04:c7:eb:02:2e:98:7b:72:5a:c3:b5:e6:f5:
                    51:48:6c:1b:6e:bb:3f:05:f3:a8:bf:a0:c4:f1:86:
                    af:d0:ed:21:31:72:4b:cb:6d:1d:9c:4c:70:42:c4:
                    be:90:3f:10:80:91:4e:e9:73:f0:28:02:e1:6b:c9:
                    42:80:7d:f4:a8:42:76:27:86:2a:47:ae:b8:58:72:
                    a2:fa:96:a2:2b:63:40:76:77:24:be:5d:76:9b:47:
                    f0:8c:f3:67:9d:6b:e7:81:cf:a5:77:4d:33:b6:a9:
                    b5:8b:15:31:05:0e:09:b8:c2:8b:4e:12:01:3e:e3:
                    aa:1b:ed:7f:1f:87:5d:2a:6b:e2:82:aa:27:a4:88:
                    7f:87:35:13:ae:9b:58:2e:07:93:c5:07:e8:89:0e:
                    3f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EC:56:9E:73:1C:A8:8E:B4:CF:68:17:E5:EF:06:23:6C:27:96:4A
            X509v3 Authority Key Identifier:
                keyid:30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f5::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:8f:04:48:3d:a9:2b:32:ca:9a:ca:90:5f:8c:1c:64:6a:33:
         59:25:b8:67:45:94:98:7a:52:ed:64:a3:cf:a0:9f:40:a9:89:
         59:46:fb:98:ce:e3:98:3b:12:68:5f:ca:89:83:2d:f3:8a:a4:
         96:72:11:8e:1f:bb:0d:66:36:56:44:99:66:82:e0:75:8e:2c:
         5e:99:49:2a:21:34:b7:02:68:11:b9:4b:7d:c9:6e:9c:67:97:
         12:2e:79:2d:b6:1a:d4:78:93:75:6f:7a:90:b4:4f:33:68:6c:
         d2:da:68:0d:e1:51:8f:13:9f:87:9c:17:af:a6:83:79:fc:c7:
         65:d1:88:2b:07:24:94:df:13:20:1e:1d:79:e6:65:37:a4:8e:
         d9:5d:65:74:09:34:1f:39:15:19:1f:0e:88:67:2d:f1:b6:2b:
         af:3b:e8:86:6a:32:22:5a:3e:08:d4:ee:52:70:3a:23:0b:61:
         f2:b7:fd:80:1e:d0:35:a0:cb:cb:77:0f:e4:a6:69:06:75:71:
         b8:03:95:e9:5d:20:9c:aa:2b:3a:04:a9:0c:a5:d2:a0:e7:e1:
         73:41:1a:95:8f:14:6c:8d:a1:ce:bb:98:54:3d:16:2b:d2:b0:
         76:69:b7:21:3e:38:d6:ca:24:a4:f3:3b:5a:31:cb:62:c6:f5:
         38:dd:a3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:27:44 2024 by rpki-client on console-ams.rpki-client.org